Privacy Policy - Auto Emailer

Introduction

Auto Emailer ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, protect, and handle your data when you use our email automation service. By using Auto Emailer, you agree to the practices described in this policy.

1. Data Accessed

Auto Emailer accesses the following types of Google user data:

Sensitive Scopes:

Gmail Send API (.../auth/gmail.send): We access this scope exclusively to send customized emails on your behalf to the prospect lists you upload. This permission allows our application to compose and deliver emails using your Gmail account.

Non-Sensitive Scopes:

User Email Address (.../auth/userinfo.email): We access your primary Google Account email address to identify your account, personalize your experience, and associate your prospect lists and email campaigns with your account.

Additionally, you upload prospect contact lists containing email addresses and related information (such as names, company details, and other relevant contact information) that you wish to target for your email campaigns.

2. Data Usage

Auto Emailer uses your data strictly for the following purposes:

Email Delivery: We utilize the Gmail Send API to send personalized, customized emails from your Gmail account to the prospect accounts you specify in your uploaded contact lists. Each email is sent individually on your behalf.
Account Management: Your Google email address is used to create and manage your Auto Emailer account, authenticate your access to our services, and provide customer support when needed.
Campaign Management: Your uploaded prospect lists are processed and stored to enable you to create, schedule, and manage your email outreach campaigns. We use this data to track campaign performance and provide analytics on email delivery.
Service Improvement: We may analyze aggregated, anonymized usage patterns to improve our service functionality, user experience, and system performance. This analysis never includes personally identifiable information.

We do not read, analyze, or access any emails in your Gmail inbox or sent folder beyond the emails we send on your behalf through our service. We do not use your data for advertising, marketing to third parties, or any purpose other than providing you with the email automation services you requested.

3. Data Sharing

Auto Emailer maintains a strict no-sharing policy for your personal data:

Zero Data Sales or Third-Party Sharing

We do not sell, rent, trade, or otherwise share your Google user data, prospect lists, or any other personal information with third parties for any purpose. Your data remains exclusively within our secure systems and is used solely to provide our email automation services to you.

The only exceptions to our no-sharing policy are:

Service Providers: We may share minimal data with trusted service providers who assist us in operating our platform (such as our secure database hosting provider, Supabase). These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.
Legal Requirements: We may disclose your information if required by law, court order, or government regulation, or if we believe in good faith that such disclosure is necessary to comply with legal obligations, protect our rights, or ensure user safety.
Business Transfers: In the event of a merger, acquisition, or sale of company assets, your data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

4. Data Storage & Protection

We implement industry-standard security measures to protect your data:

Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols to prevent interception or unauthorized access during transmission.
Encryption at Rest: Your prospect lists, contact information, and all other user data stored in our Supabase database are encrypted at rest using industry-standard encryption algorithms. This ensures that even if our storage systems were compromised, your data would remain unreadable.
Access Controls: We implement strict access controls and authentication mechanisms to ensure that only authorized personnel can access our systems. Your data is isolated and accessible only through your authenticated account.
Secure Infrastructure: Our application is hosted on secure, enterprise-grade infrastructure with regular security audits, monitoring, and updates to protect against vulnerabilities and threats.
OAuth Security: We use Google's OAuth 2.0 authentication protocol to access your Gmail account, which means we never store your Google password. Your Gmail credentials remain secure with Google.

While we take extensive measures to secure your data, no method of electronic storage or transmission is 100% secure. We continuously review and update our security practices to maintain the highest standards of data protection.

5. Data Retention & Deletion

You maintain full control over your data:

Retention Policy:

Your user data, including your account information, prospect lists, and campaign history, is retained in our systems for as long as your account remains active. This allows you to access your historical data, analyze campaign performance, and maintain continuity in your email outreach efforts.

Data Deletion Rights:

You have the right to request deletion of your data at any time. You can exercise this right through the following methods:

Account Settings: Navigate to your account settings page and use the "Delete Account" option. This will permanently remove all your data from our systems.
Email Request: Send an email to ben@bengia.ventures with the subject line "Data Deletion Request" and include your registered email address. We will process your request within 30 days.
Revoke Access: You can revoke Auto Emailer's access to your Gmail account at any time through your Google Account permissions page. While this prevents future email sending, you should still submit a deletion request to remove stored data.

Deletion Timeline:

Upon receiving your deletion request or account deletion action, we will permanently delete all your personal data, prospect lists, and campaign information within 30 days. Some anonymized, aggregated data may be retained for analytical and legal compliance purposes, but this data cannot be used to identify you personally.

Please note that after data deletion, we cannot recover your information. We recommend exporting any data you wish to retain before initiating the deletion process.

6. Your Rights

Under applicable data protection laws, you have the following rights regarding your personal data:

Right to Access: You can request a copy of all personal data we hold about you.
Right to Rectification: You can request that we correct any inaccurate or incomplete data.
Right to Erasure: You can request deletion of your data as described in Section 5.
Right to Portability: You can request your data in a structured, machine-readable format.
Right to Object: You can object to our processing of your data for specific purposes.

To exercise any of these rights, please contact us at ben@bengia.ventures.

7. Google API Services User Data Policy Compliance

Auto Emailer's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We only request access to Google user data that is necessary to provide our email automation service.
We do not transfer Google user data to third parties except as necessary to provide our service, comply with legal obligations, or with your explicit consent.
We do not use Google user data for serving advertisements.
We do not allow humans to read Gmail data unless we have your explicit consent, it's necessary for security purposes, or it's required for legal compliance.

8. Children's Privacy

Auto Emailer is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately at ben@bengia.ventures so we can delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features. When we make material changes, we will notify you by email or through a prominent notice in our application. The "Last Updated" date at the top of this policy indicates when it was most recently revised. Your continued use of Auto Emailer after such changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: ben@bengia.ventures

Data Protection Officer: ben@bengia.ventures

Website: https://emailer.bengia.ventures

We are committed to addressing your concerns and will respond to all inquiries within 30 days.