Email Pro SaaS

Privacy Policy

Last Updated: March 31, 2026

This Privacy Policy describes how Email Pro SaaS collects, uses, and protects your information. By using our service, you agree to the practices described herein.

1. Information We Collect

• Account Information: Username, business email address, password hash
• SMTP Credentials: Host, port, username, and encrypted password for email delivery
• Usage Data: Email send counts, campaign history, subscriber lists
• Technical Data: IP address, browser type, access timestamps

1b. Email Analytics Data (Pro/Growth Plans)

To provide email engagement analytics, we collect the following data when you send campaigns:

• Email Opens: We use a 1x1 tracking pixel to detect when your emails are opened. This may record your recipient's IP address and user agent.
• Link Clicks: URLs in your emails are rewritten through our tracking system. When clicked, we may log the clicker's IP address, browser type, and destination URL.
• Location Data: Pro plan users may see approximate geographic location derived from IP addresses.
• Purpose: This data is used solely to provide you with campaign performance metrics and is never shared with third parties.

Note: Recipients of your emails should be informed that their email client may load external images (including tracking pixels) when opening your messages.

2. How We Use Your Information

• To provide email delivery services through your SMTP server
• To manage your account and billing
• To track usage for plan limits and analytics
• To communicate important account updates
• To prevent fraud and ensure security

3. Data Protection & Encryption

• SMTP passwords are encrypted using AES-256-CBC before storage
• User passwords are hashed using bcrypt
• All data is isolated by tenant - users cannot access others' data
• We implement industry-standard security measures

4. Data Sharing

We do not sell, rent, or share your personal data with third parties except:

• With your SMTP providers (only as needed for email delivery)
• When required by law or legal process
• To protect our rights, property, or safety

5. Data Retention

• Account data retained while account is active
• Email history retained for 12 months
• SMTP credentials retained until user deletes them
• You may request deletion of your data at any time

6. Your Rights

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Export: Request export of your data in a portable format

7. Cookie Policy

We use essential cookies for authentication and session management. No tracking or advertising cookies are used.

8. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or dashboard notice.