Privacy Policy - BlueyEmail

1. What Data We Collect

When you use BlueyEmail, we collect the following types of information:

Account information: Name, email address, and authentication credentials managed through our identity provider (Clerk).
Workspace data: Organization name, team members, and workspace settings.
Contact data: Leads, subscribers, and audience information you import or collect through forms and landing pages.
Email content: Templates, campaigns, and email drafts you create within the platform.
Usage data: Interaction logs, feature usage patterns, and analytics events to improve our service.
Technical data: IP addresses, browser type, device information, and cookies for authentication and security.
Form submissions: Data submitted through forms you create, including submitter IP addresses (anonymized after 30 days).

2. How We Use Your Data

We use the data we collect to:

Provide, operate, and maintain the BlueyEmail platform.
Process and deliver your email campaigns, automations, and transactional emails.
Analyze email performance metrics (opens, clicks, bounces) to provide analytics dashboards.
Enforce rate limits, prevent abuse, and maintain platform security.
Improve our services, including training AI features (with your opt-in consent).
Communicate with you about account updates, billing, and service changes.
Comply with legal obligations and enforce our Terms of Service.

3. Third-Party Services

BlueyEmail integrates with the following third-party services that may process your data:

Clerk: Authentication and identity management. Clerk processes your login credentials and session data.
Cloudinary: Media storage for uploaded images and attachments in your email templates and content.
Payment providers (Stripe, Razorpay): Payment processing for subscription billing. We do not store your full payment card details.
AI providers (OpenAI, Google Gemini): AI-powered content generation features. Prompts and generated content may be processed by these providers.
Postal MTA: Self-hosted email delivery infrastructure for sending your campaigns.

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

4. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. You can configure custom data retention periods in your workspace GDPR settings. When a retention period is set:

Form submissions, email logs, web events, and analytics events older than the configured period are automatically deleted.
IP addresses in form submissions and web events are anonymized after 30 days.
Deletion jobs run daily and cannot be reversed once executed.

After account deletion, we retain anonymized aggregate data for analytics purposes but delete all personally identifiable information within 30 days.

5. Your Rights

Under applicable data protection laws (including GDPR and CCPA), you have the following rights:

Right of access: Request a copy of the personal data we hold about you.
Right to deletion: Request deletion of your personal data. You can initiate this through your GDPR settings or by contacting us.
Right to data portability: Export your data (leads, campaigns, templates) in machine-readable formats (CSV, JSON).
Right to rectification: Correct inaccurate personal data through your account settings.
Right to restrict processing: Request that we limit processing of your data in certain circumstances.
Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent: Withdraw previously given consent at any time.

To exercise any of these rights, contact us at the email address below or use the GDPR tools in your dashboard settings.

6. Contact Information

For any questions about this privacy policy or to exercise your data rights, please contact us at:

Email: sales@blueyemail.com