Privacy notice

This notice describes how AlphaSynth Mail (“we”, “us”) processes personal data when you use AlphaSynth Mail and related websites or services. It is effective as of the date shown at the bottom of this page; we may update it when our practices change.

1. Data controller

For personal data relating to this deployment, the controller is:

• AlphaSynth Mail
• Privacy contact: set NEXT_PUBLIC_PRIVACY_EMAIL (or NEXT_PUBLIC_SUPPORT_EMAIL) for your deployment so recipients know how to reach you.

If you use the service on behalf of a company, your employer may be the controller for some processing; we may act as a processor—see also our Data processing information.

2. Categories of personal data

Depending on how you use the service, we may process:

• Account and profile data (e.g. name, email, organization, role).
• Authentication and security data (e.g. session identifiers via our identity provider).
• Service usage and technical data (e.g. IP address, device and browser type, timestamps, logs).
• Email marketing data you upload or send through the platform (e.g. lists, campaign content, suppression data, delivery and engagement events where you enable tracking).
• Billing identifiers when you use paid plans (handled by our payment provider).

3. Purposes and legal bases (EU/UK)

Typical mapping (your situation may vary by role and jurisdiction):

4. Retention

We keep personal data only as long as needed for the purposes above, unless a longer period is required by law. Technical logs and backups may be retained for a limited period for security and disaster recovery.

5. Recipients and subprocessors

We use infrastructure and service providers (for example hosting, authentication, email delivery, payments, and error monitoring). A current list of categories is available on request to the privacy contact above.

6. International transfers

If data is transferred outside your country, we use appropriate safeguards (such as standard contractual clauses or adequacy decisions) where required by law. You may request further information via the privacy contact.

7. Your rights

Depending on applicable law, you may have rights including access, rectification, erasure, restriction, objection, portability, and the right to complain to a supervisory authority. To exercise rights, contact the privacy email above; we respond within the timelines required by applicable law.

8. Cookies and similar technologies

We use essential cookies for sign-in and core functionality. Optional cookies for analytics and marketing load only if you allow them in the cookie banner. You can reopen preferences anytime from the footer.

9. Marketing communications

Messages you send through the platform must include a valid unsubscribe mechanism where required by law. Recipients can use links in emails or our unsubscribe help page where applicable.

10. Children

The service is not directed at children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children.

11. Security

We implement appropriate technical and organizational measures to protect personal data, including access controls, encryption in transit where supported, and monitoring. No method of transmission over the Internet is completely secure.

12. Changes

We will update this page when our practices change. Material changes may be communicated by email or in-app notice where appropriate.

13. Contact

Questions about this notice: configure a privacy contact email for this deployment (see section 1).

Last updated: 4 May 2026