Privacy Policy

Last updated: 2025-09-16

1. Overview

This Privacy Policy explains what data we process when you use Email Metrics, why we process it, and the choices you have.

2. Data We Collect

• Account Data: Email address and authentication identifiers.
• Uploaded CSV Data: Email performance metrics you submit (e.g., sends, opens, clicks).
• Technical Data: IP address (short-term for security), user agent, timestamps.
• Derived Metrics: Aggregations generated for snapshot reports.
• Billing Data: Subscription selections, payment method tokens, limited billing address details, and transaction metadata received from our payment processor (currently Stripe).

3. How We Use Data

• Provide, operate, and improve the Service.
• Generate aggregate analytics and snapshots you request.
• Secure the Service (fraud and abuse detection).
• Process payments, manage subscriptions, and communicate about billing events.
• Comply with legal obligations.

4. Legal Bases

Where required, processing is based on performance of a contract, legitimate interests in operating the Service, and compliance with legal obligations.

5. Retention

Uploaded CSV raw files are retained only as long as needed to create derived snapshot metrics, after which they may be deleted or minimized. Aggregated metrics may be kept for historical comparison unless you request deletion. Billing records are retained for the period required to satisfy accounting, audit, and tax obligations.

6. Data Sharing

We do not sell personal data. Limited third-party processors (e.g., hosting, authentication, payments) receive data strictly to provide the Service under contractual safeguards. For payment processing we use Stripe, which receives billing data needed to charge your account; see Stripe’s Privacy Policy for details on their practices.

7. Security

We implement administrative, technical, and organizational measures appropriate to risk; however, no system is perfectly secure.

8. Your Rights

Depending on jurisdiction, you may have rights to access, rectify, delete, or port your data, or object/restrict certain processing. Contact us to exercise these rights. Requests to delete billing information may require coordination with our payment processor and can be limited by legal retention requirements.

9. International Transfers

Data may be processed in the country where our infrastructure or processors operate with appropriate safeguards.

10. Children

The Service is not directed to children under 16 and we do not knowingly collect their personal data.

11. Changes

We may update this Policy; continued use after updates signifies acceptance. The "Last updated" date reflects the latest revision.

12. Contact

Privacy questions: support@emailmetrics.io