Legal
Data processing addendum
The GDPR terms for customers who need them: we are the processor, you are the controller, and this says what that means here.
Draft — not yet reviewed by counsel.
This document says what the product actually does, written by the people who built it. A lawyer has not read it. It is published in this state because a product with no published policy is worse than one with a policy that admits what it is, and it will be replaced by a reviewed version before the first paid contract.
last reviewed 2026-09-17
Roles
For the message data you send through us, you are the controller and we are the processor. You decide who gets emailed and what it says; we act on your instructions and on nothing else.
For your own account data — your sign-in address, your billing details — we are the controller.
Our instructions
We process message data to do the four things the product does: accept the message, attempt delivery, record what happened, and deliver your webhooks. We do not process it for anything else. The two exceptions are stated rather than hidden: an automated abuse check reads content to refuse sending that would harm recipients, and a support engineer may read one specific message when you ask us to debug it.
Subprocessors
Listed at /subprocessors with what each one sees. We give 14 days' notice before adding one, and you may object in that window.
Security
The measures are described at /security. Data in transit uses TLS; API keys are stored hashed with a server-side pepper, never in plaintext.
Your rights as controller
- Access and export:
GET /account/exportreturns everything we hold, as a zip of emails, suppressions and domains. - Deletion:
DELETE /accountcloses the account; data ages out on the schedule in /privacy; individual message data ages out at 7 days. - Audit: the account audit log records every change with who made it and what it was before.
Breach notification
If we discover a breach affecting your data, we tell you without undue delay and within 72 hours of becoming aware, with what we know at the time rather than waiting for a complete picture.
Transfers
Where data leaves the region you chose, the Standard Contractual Clauses apply. The specific module and the annexes are being drafted — see the banner at the top of this page.
How to execute it
Today, by writing to [email protected] with "Legal" in the subject. Self-serve execution on acceptance of the terms is planned and is not built yet, and this page will say so until it is.