Legal

Privacy Policy

Last updated: July 12, 2026

Template notice. This document is a plain-language starting point and is not legal advice. Have a lawyer review before you rely on it in production.

What we collect

  • Account data — name, email, company, password hash.
  • Billing data — handled by Stripe or bKash; we store only order metadata and last-4 digits where returned by the processor.
  • Service data — domain names, admin credentials (encrypted with AES-256), lead-list search URLs and delivered lists.
  • Usage data — request logs, error reports, and basic product analytics.

How we use it

We use your data to deliver the services you ordered, send transactional emails (renewal reminders, ticket replies, deliverables), prevent abuse, and improve the product. We do not sell your data.

Subprocessors

Selected subprocessors include Google (Workspace API), Stripe (payments), bKash (payments in Bangladesh), Supabase (database & auth), and Brevo (transactional email). See the DPA for the full list.

Data retention

We retain account data for as long as your account is active. On deletion we purge personal data within 30 days, except where retention is required for tax, fraud, or legal reasons.

Your rights

You can export your data or request account deletion from your dashboard, or by emailing hello@mailzy.us.

Security

Traffic is TLS-encrypted. Admin credentials are encrypted at rest with AES-256. Access is limited to on-call operators, and every credential reveal is audit-logged.

Cookies

We use strictly-necessary cookies for authentication and light first-party analytics. We do not run third-party ad trackers.

Contact

Privacy questions? Email hello@mailzy.us.