← Email Buster

Privacy Policy

Last updated: June 25, 2026

PLACEHOLDER CONTENT. This is a starter Privacy Policy stub for the v2 landing page so footer links don't point to nowhere. Replace with reviewed legal copy (consult counsel, and align with your data-protection authority of record) before public launch.

Email Buster ("we," "us," or "the Service") provides a hosted SaaS for cold-email outreach. This Privacy Policy describes what data we collect, how we use it, who we share it with, and the choices you have.

1. Data we collect

  • Account data: your email address, organisation name, and authentication credentials (passwords are hashed with Argon2id).
  • Mailbox credentials: SMTP and IMAP credentials you provide for the mailboxes you connect, encrypted at rest with AES-256-GCM. We use these solely to send and poll your mail.
  • Contact data: the prospect lists you import — name, email, company, title, and any custom fields. You remain the data controller for these records.
  • Sending activity: events for each outbound email (sent, opened, clicked, replied, bounced, complained, unsubscribed), stored to power your analytics and reputation gating.
  • Telemetry: minimal application logs (request paths, IP addresses for auth events, error stacks) retained for operational security.

2. How we use it

We use your data to operate the Service, deliver your campaigns to their intended recipients, protect your sender reputation, and answer your support questions. We do not sell or share your data with advertisers.

3. Data isolation

Your data is isolated from other customers' data at the database level using PostgreSQL Row-Level Security. Application bugs cannot leak another tenant's rows because the database itself rejects cross-tenant queries.

4. Subprocessors

We use a small set of vetted subprocessors for hosting, payments, and transactional email. A current list is available on request.

5. Your rights

  • Access — request a copy of the personal data we hold about you.
  • Correction — update inaccurate data via your dashboard or by writing to us.
  • Deletion — delete your account; we will delete or anonymise your data within 30 days unless retention is required by law.
  • Export — every contact, event, and analytic is exportable to CSV at any time.

6. Contact

For any privacy questions or to exercise a right above, contact privacy@email-buster.app.

← Back to email-buster.app