Privacy Policy
1. Who we are
We operate this email sending platform. For your own account information we act as the data controller. For the contact lists you upload, you are the controller and we are only the processor: they are your data, collected by you, and we process them solely to send the emails you instruct.
2. What we collect
- Account details — name, company, email address, phone, and a hashed password. We never store your password in readable form.
- Sending credentials — the mailbox address and app password you enter, stored so the platform can send on your instruction.
- Contact data you upload — names, company names, and email addresses in your CSV files, plus the delivery status of each message.
- Usage and technical data — sign-in sessions, actions in the app, and error logs.
- Payment data — handled entirely by PayPal. We never see or store your card details; we keep only your subscription reference and plan status.
3. How we use it
To run your account, send the campaigns you create, show your reports, take payment, provide support, and keep the platform secure. We do not sell your data, and we do not use the contacts you upload for our own marketing or share them with other customers.
4. Who else touches your data
- Your email provider (for example Google or Microsoft) — the emails you send pass through your own mailbox under their terms.
- PayPal — subscription payments.
- DigitalOcean — hosting.
5. Google user data
When you connect a Google account, DigiLucks requests only the permission needed to send email on your behalf (and, where you enable it, to manage your email signature). We do not read, search, or store the contents of your inbox. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect at any time from Settings, which immediately revokes our access.
6. Security
Access is over HTTPS, passwords are hashed with bcrypt, and sessions are restricted cookies. Credentials and data sit on an access-controlled server. No system is perfectly secure, so please use a strong, unique password.
7. Retention and deletion
Account and campaign data is kept while your account is open. You can delete contacts and campaigns yourself at any time, which removes them from our database. Ask us to close your account and we will delete your data, other than records we must keep for accounting or legal reasons.
8. Your rights
Depending on where you live you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Write to us and we will act on it. If a recipient on one of your lists contacts us about their data, we will point them to you, since you are the controller of that list.
9. Cookies
In the app we set a single essential cookie to keep you signed in. On our website you can accept or reject non-essential (analytics) cookies via the consent banner; analytics are off until you allow them. There is no advertising tracking.
10. Contact
Privacy questions or requests: hello@digilucks.com