What we collect
- Account data — name, email, company, password hash.
- Billing data — handled by Stripe or bKash; we store only order metadata and last-4 digits where returned by the processor.
- Service data — domain names, admin credentials (encrypted with AES-256), lead-list search URLs and delivered lists.
- Usage data — request logs, error reports, and basic product analytics.
How we use it
We use your data to deliver the services you ordered, send transactional emails (renewal reminders, ticket replies, deliverables), prevent abuse, and improve the product. We do not sell your data.
Subprocessors
Selected subprocessors include Google (Workspace API), Stripe (payments), bKash (payments in Bangladesh), Supabase (database & auth), and Brevo (transactional email). See the DPA for the full list.
Data retention
We retain account data for as long as your account is active. On deletion we purge personal data within 30 days, except where retention is required for tax, fraud, or legal reasons.
Your rights
You can export your data or request account deletion from your dashboard, or by emailing hello@mailzy.us.
Security
Traffic is TLS-encrypted. Admin credentials are encrypted at rest with AES-256. Access is limited to on-call operators, and every credential reveal is audit-logged.
Cookies
We use strictly-necessary cookies for authentication and light first-party analytics. We do not run third-party ad trackers.
Contact
Privacy questions? Email hello@mailzy.us.