Privacy Policy | HTML Mailer

1. Introduction

Welcome to HTML Mailer ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our website and in using our products and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered email template generation service.

By using HTML Mailer, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our service.

2. Information We Collect

2.1 Information You Provide

Account Information: When you create an account, we collect your name, email address, and password (stored as a hashed value).
Team Information: If you create or join a team, we collect team names and member information.
Template Content: We store the email templates you create, including HTML content, subject lines, and template names.
Payment Information: When you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full payment card details, but we store your Stripe customer ID and subscription information.
Communication Data: If you contact us for support, we may collect information contained in your communications.

2.2 Automatically Collected Information

Usage Data: We track your usage of our service, including the number of templates created, AI generations used, test emails sent, and image uploads.
Activity Logs: We maintain activity logs that record actions such as sign-ins, template creation, team member invitations, and account changes.
IP Address: We may collect your IP address for security and analytics purposes.
Device Information: We may collect information about your device, browser type, and operating system.
Cookies: We use session cookies to maintain your login state and provide a secure authentication experience.

2.3 Third-Party Services

Stripe: We use Stripe for payment processing. Stripe's privacy policy governs the collection and use of your payment information.
OpenAI: We use OpenAI's API to generate email templates. When you request template generation, your prompt is sent to OpenAI. Please review OpenAI's privacy policy for information about how they handle data.
Email Service Providers: We use email service providers (via Nodemailer) to send test emails and system notifications. Email content is transmitted to these providers.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide, maintain, and improve our service
To process your subscription payments and manage your account
To generate AI-powered email templates based on your requests
To send test emails to recipients you specify
To manage team memberships and invitations
To enforce usage limits based on your subscription plan
To monitor and analyze usage patterns and trends
To detect, prevent, and address technical issues and security threats
To send you service-related notifications and updates
To respond to your inquiries and provide customer support
To send you marketing communications, promotional materials, product updates, and newsletters (as described in Section 3.1)
To comply with legal obligations

3.1 Marketing Communications

By creating an account or using our Service, you consent to receive marketing emails from us. We reserve the right to send you marketing communications, including but not limited to:

Product updates and new feature announcements
Promotional offers, discounts, and special deals
Newsletters and company news
Tips, best practices, and educational content
Surveys and feedback requests
Event invitations and webinars
Other marketing and promotional materials related to our Service

You can opt out of marketing communications at any time by:

Clicking the "unsubscribe" link in any marketing email
Updating your email preferences in your account settings
Contacting us directly at the contact information provided below

Please note: Even if you opt out of marketing communications, we may still send you important service-related messages, such as account notifications, billing information, security alerts, and updates to these Terms or Privacy Policy. These service-related communications are not considered marketing communications and cannot be opted out of.

We may use your email address and other contact information to send marketing communications via email, and you agree that we have the right to do so as part of your use of the Service.

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

Passwords are hashed using secure algorithms and never stored in plain text
We use HTTPS encryption for data transmission
Session cookies are secured with HttpOnly and Secure flags
We regularly review and update our security practices
Access to personal data is restricted to authorized personnel only

Your data is stored in databases hosted by our service providers. We retain your information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers: We share information with third-party service providers who perform services on our behalf, such as payment processing (Stripe), AI generation (OpenAI), and email delivery.
Team Members: If you are part of a team, your team members may see your name, email, and activity within that team.
Legal Requirements: We may disclose information if required by law or in response to valid requests by public authorities.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
With Your Consent: We may share information with your explicit consent.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access: You can access and update your account information through your dashboard settings.
Correction: You can correct inaccurate or incomplete information in your account.
Deletion: You can delete your account and associated data by contacting us or using account deletion features.
Data Portability: You can export your templates and data.
Opt-Out of Marketing: You can opt out of marketing communications at any time by clicking the unsubscribe link in marketing emails, updating your email preferences in account settings, or contacting us. See Section 3.1 for more details about marketing communications.
Cookie Preferences: You can control cookies through your browser settings, though this may affect service functionality.

To exercise these rights, please contact us at the email address provided below.

7. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our service, you consent to the transfer of your information to these countries.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Peakyapps Ltd.
Website: peakyapps.com

11. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent

Our legal basis for processing your personal data includes: (1) your consent, (2) performance of a contract, (3) compliance with legal obligations, and (4) our legitimate interests in providing and improving our service.

12. CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to access your personal information
Right to request deletion of personal information
Right to non-discrimination for exercising your CCPA rights