This Privacy Policy describes how IvyMail ("we", "us", or "our") collects, uses and protects your information when you use our website at ivymail.io and related services (the "Service"). By using the Service you agree to the practices described below.
1. Information We Collect
Account Information
When you sign in with Google, we receive your name, email address and profile photo from your Google account. We use this to create and manage your account.
API and Email Data
You may provide API keys, domain configurations and email templates through the Service. This data is stored in your account and used solely to facilitate transactional email delivery on your behalf.
Usage Data
We automatically collect basic usage information such as pages visited, timestamps and device type. This helps us maintain and improve the Service.
2. How We Use Your Information
We use your information to:
- Authenticate your identity and manage your account
- Process and deliver transactional emails on your behalf
- Monitor email delivery, bounces and reputation metrics
- Enforce our Abuse Prevention Policy (suppression lists, reputation monitoring, sending limits)
- Generate and display your sending logs and analytics
- Improve the Service and fix issues
We do not sell, rent or share your personal information with third parties for marketing purposes.
3. Third-Party Services
We rely on the following third-party services to operate:
- Firebase Authentication -for sign-in and account management (Google)
- Firebase / Google Cloud Firestore -for storing your account data, API keys, domains and sending history
- Amazon Simple Email Service (SES) -for delivering transactional emails. Recipient email addresses and email content are transmitted to Amazon SES for delivery. Amazon SES may process this data in accordance with the AWS Privacy Policy
- Stripe -for payment processing and subscription management. Your email address and billing plan information are shared with Stripe when you subscribe to a paid plan
Each third-party service is governed by its own privacy policy. We encourage you to review them.
4. Data Processing Role
When you use IvyMail to send emails, we act as a data processor on your behalf. You remain the data controller and are responsible for ensuring you have a lawful basis to process recipient data.
We process recipient email addresses and email content solely to facilitate delivery through Amazon SES and to provide tracking and analytics features.
5. Data Storage and Security
Your data is stored in Google Cloud Firestore. We use HTTPS for all data in transit and rely on Google Cloud's built-in encryption at rest. Email content and delivery data also passes through Amazon SES infrastructure and is subject to AWS security practices.
No method of electronic transmission or storage is 100% secure. While we use commercially reasonable measures to protect your data, we cannot guarantee absolute security. You acknowledge that data transmitted over the internet may be intercepted by third parties.
You are responsible for keeping your account credentials and API keys safe.
6. Data Retention
We retain your data for as long as your account is active. Sending logs are retained based on your plan: 7 days (Free) or 30 days (Starter), after which they are automatically deleted. If you delete your account, we will remove your personal data within 30 days.
We may retain anonymized and aggregated analytics data (such as delivery rates and usage statistics) indefinitely for service improvement purposes. This data cannot be used to identify you.
7. Your Rights
You may at any time:
- View and update your domains, API keys and configurations through the dashboard
- Export your data by contacting us
- Request deletion of your account and all associated data
To exercise these rights, contact us at the address below.
8. Cookies
We use essential cookies and local storage for authentication state and theme preferences. Analytics cookies are only set with your explicit consent. For full details on the cookies we use and how to manage your preferences, see our Cookie Policy.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes take effect when published on this page. Continued use of the Service constitutes acceptance of any changes.
10. Contact
If you have questions about this Privacy Policy, contact us at support@ivymail.io.