Legal
Privacy you can ship.
This page is a plain-language summary for the marketing site. It is not a substitute for legal advice and should be reviewed by counsel before launch.
1. What we collect
When you send a tracked email, we record engagement events: opens (via a tracking pixel and beacon), link clicks, and replies. Each event carries a timestamp, an approximate city derived from IP, and a device type. We also store your account details and the metadata of threads you choose to track.
We do not read the body of your emails beyond what is needed to render the sidebar and generate follow-up suggestions you explicitly request.
2. How we use it
Engagement data powers the real-time sidebar, the signal model, and the AI follow-up drafts. We use aggregate, de-identified data to improve the product. We never sell your data or your recipients' data.
3. Recipient transparency
You can enable an optional one-line consent footer — workspace-wide or per send — so recipients know engagement is being measured. A full audit log of everything we collected on a thread is available on request and exportable from the dashboard.
4. Your GDPR rights
If you are in the EEA or UK, you have the right to access, correct, export, or delete your personal data, and to object to or restrict processing. The lawful basis for processing is our legitimate interest in providing the service and your consent where required. Email contact@mailsenseai.com to exercise any of these rights; we respond within 30 days.
5. Data processing
For business customers, MailSenseAI acts as a data processor for the engagement data of your recipients. A Data Processing Addendum (DPA) incorporating the EU Standard Contractual Clauses is available on request for business customers.
6. Sub-processors
We rely on the following sub-processors to deliver the service:
- Vercel — application hosting and edge delivery
- Neon — managed Postgres database
- Resend — transactional and digest email
- Stripe — billing and payments
- Anthropic — AI follow-up draft generation
We notify customers of material changes to this list with reasonable notice before a new sub-processor begins handling data.
7. Data retention
Engagement history is retained according to your workspace's retention window (configurable in Settings, 90 days by default) and deleted on account closure. You can request earlier deletion at any time.
8. Contact
Questions about this policy? Email contact@mailsenseai.com.