Privacy Policy

Last updated: November 10, 2025

Introduction

Auto Emailer CRM ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Account Information

When you create an account, we collect your email address and encrypted password. We use Supabase for authentication and user management.

Contact Data

You provide contact information (names, email addresses, phone numbers, company names) when importing CSV files or manually adding contacts. This data is stored securely in your account.

Email Credentials

If you choose to use SMTP, we store your email credentials encrypted using AES-256 encryption. If you use Gmail OAuth, we store encrypted OAuth tokens that allow us to send emails on your behalf.

Usage Data

We automatically collect information about your interactions with the service, including email campaigns sent, contacts viewed, and feature usage for analytics and service improvement.

How We Use Your Information

  • To provide and maintain our email automation and CRM services
  • To send emails on your behalf through your connected email account
  • To manage and organize your contacts, companies, and relationships
  • To track email campaign performance and activity history
  • To improve and optimize our service
  • To communicate with you about your account and service updates

Data Security

We implement industry-standard security measures to protect your data:

  • All passwords and SMTP credentials are encrypted using AES-256 encryption
  • OAuth tokens are securely stored and encrypted
  • Row-level security policies ensure users can only access their own data
  • All data transmission is encrypted using HTTPS/TLS
  • Regular security audits and updates

Data Sharing and Distribution

We do NOT share, sell, trade, rent, or distribute your personal information, contact data, or any other data to ANY third parties for ANY purpose.

Your data is yours alone. We only use necessary service providers to operate the application:

  • Supabase: Secure database storage and authentication (data is encrypted and isolated to your account)
  • Vercel: Application hosting infrastructure
  • Gmail API or SMTP: Only used to send emails directly from YOUR account on YOUR behalf - we never access or share your email content

These service providers are bound by strict contractual obligations and only process data as necessary to provide the service. They do not have permission to use your data for any other purpose.

We will only disclose your information if legally required by law enforcement or court order.

Data Ownership

YOUR DATA BELONGS TO YOU. We will never share, sell, trade, rent, or distribute your personal information, contact data, or any other data to ANY third parties without your explicit consent.

You maintain full ownership and control of all data you input into BenGia Auto Emailer. We act only as a service provider to help you manage and organize your data. You can export, modify, or delete your data at any time.

Your Data Rights

You have the right to:

  • Access and export your data at any time
  • Update or correct your information
  • Delete your account and all associated data
  • Revoke OAuth permissions for connected email accounts
  • Opt out of non-essential communications

Data Retention

We retain your data for as long as your account is active. When you delete your account, we permanently delete all associated data within 30 days, except where we are required to retain it for legal purposes.

Cookies and Tracking

We use essential cookies for authentication and session management. We also use Vercel Analytics to understand how users interact with our service, but this data is anonymized and aggregated.

Third-Party Services

Our service integrates with third-party infrastructure providers (Supabase for database, Vercel for hosting, and Google for Gmail OAuth when you choose to connect). These services only process your data to provide the core functionality and are contractually obligated to protect your information. We do not share your data with any marketing, analytics, or advertising third parties.

Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at ben@bengia.ventures or visit our contact page.