1. Information We Collect
Account Information
When you create an account, we collect your email address and password (stored as a salted hash). We do not require your real name, though you may optionally provide it.
Email Account Credentials
To operate the warmup service, we collect and store:
- SMTP and IMAP server addresses, ports, and usernames
- SMTP and IMAP passwords (encrypted at rest with Fernet/AES-128)
- OAuth tokens for Gmail accounts (encrypted at rest)
Usage Data
We collect warmup statistics including emails sent/received counts, deliverability rates, and campaign performance metrics. We do not read or store the content of your personal emails — only AI-generated warmup emails are stored.
2. How We Use Your Information
- Service operation: Sending and receiving warmup emails on your behalf.
- Performance tracking: Calculating deliverability scores and campaign statistics.
- Spam rescue: Automatically moving warmup emails from spam to inbox.
- Account management: Authentication, password resets, and support.
3. Data Security
We take security seriously:
- Encryption at rest: Email passwords and OAuth tokens are encrypted using Fernet symmetric encryption (AES-128-CBC with HMAC-SHA256).
- Encryption in transit: All connections use HTTPS/TLS.
- Password hashing: Account passwords use Django's PBKDF2-SHA256 with salting.
- Access control: Users can only access their own data. Multi-tenant isolation is enforced at the application level.
4. Data Sharing
We do NOT sell, trade, or share your personal information with third parties, except:
- Shared warmup network: Your email accounts participate in the shared warmup network, exchanging AI-generated emails with other accounts. No personal data or credentials are shared between users.
- AI provider: We send minimal context (first names only) to OpenAI to generate email content. No credentials, email addresses, or personal data are sent.
- Legal compliance: We may disclose information if required by law or to protect our rights.
5. Data Retention
- Active accounts: Data is retained for the duration of your account.
- Deleted accounts: Upon account deletion, all data (credentials, campaigns, email logs) is permanently removed within 30 days.
- Warmup emails: Email content is stored for campaign performance analysis and is deleted with the campaign or account.
6. Your Rights
You have the right to:
- Access: View all data associated with your account via the dashboard.
- Correction: Update your profile information at any time from account settings.
- Deletion: Delete your account and all associated data from account settings.
- Portability: Request an export of your data by contacting support.
- Objection: Pause or stop warmup campaigns at any time.
7. Cookies
We use essential cookies for session management and CSRF protection. We do not use tracking cookies or third-party analytics cookies.
8. Children
The Service is not intended for users under the age of 18. We do not knowingly collect data from minors.
9. International Data
Your data may be processed in the United States where our servers are hosted. By using the Service, you consent to this transfer.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.
11. Contact
For privacy questions or data requests, contact us at [email protected].