Privacy Notice

This Privacy Notice explains how Salemail ("Salemail", "we", "us", "our") collects, uses, shares, and protects personal data when you use the sallyEmail service (the "Service"). Salemail is the data controller for the personal data described here.

1. Personal data we collect

• Account data — name, email address, and authentication credentials you provide when signing up or signing in.
• Connected mailbox data — OAuth tokens for Gmail and Outlook, and the content and metadata of email messages we process on your behalf (headers, addresses, subjects, bodies, attachments).
• Usage and telemetry — device and browser information, IP address, log data, feature usage, and error diagnostics.
• Support communications — messages you send us and the content of any support tickets.
• Billing data — collected and processed by our reseller Paddle.com. We receive customer identifiers, subscription status, and transaction metadata from Paddle, but we do not receive full payment card details.

2. How we use personal data

• To provide and operate the Service (account creation, sign-in, connecting mailboxes, generating AI outputs).
• To secure the Service, prevent fraud and abuse, and enforce our Terms.
• To improve product quality (aggregated diagnostics, error reporting).
• To communicate with you about your account, security, and service updates.
• To comply with legal obligations and enforce our rights.

We do not sell your personal data, and we do not use the content of your email messages to train public AI models.

3. Legal bases for processing (where applicable)

• Contract — to provide the Service you've asked for.
• Legitimate interests — to secure, maintain, and improve the Service.
• Consent — where required (for example, for optional analytics or marketing).
• Legal obligation — where processing is required by law.

4. How we share personal data

• Service providers / subprocessors — cloud hosting, database, and email providers that host or process data on our behalf under written contracts.
• Merchant of Record — Paddle.com, which handles checkout, payments, tax compliance, invoicing, and subscription management.
• AI model providers — the AI providers that generate summaries, drafts, and categorizations from the inputs we send them. Content sent for AI processing is not used to train public models.
• Professional advisers — legal, accounting, and similar advisers, under confidentiality obligations.
• Authorities — where required by law, court order, or to protect the rights, property, or safety of Salemail, our users, or the public.

5. Data retention

We retain personal data only for as long as necessary for the purposes above, or as required by law. Account and mailbox data are retained while your account is active and deleted (or anonymised) within a reasonable period after account closure, except where we're legally required to retain longer (for example, billing records for tax purposes).

6. Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, encryption of OAuth tokens at rest, access controls, and audit logging. No system is perfectly secure; we work to reduce risk and respond promptly to incidents.

7. International transfers

Our providers may process personal data outside your country of residence, including in the United States and other jurisdictions. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing or withdraw consent. You may also have the right to complain to your local data protection authority. To exercise your rights, contact us at privacy@sallyemail.com. We will respond within the time period required by applicable law (typically within 30 days).

9. Cookies

We use cookies and similar technologies that are strictly necessary for the Service to function (for example, keeping you signed in). We may also use limited analytics cookies to understand usage in aggregate. You can control cookies through your browser settings.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will delete it.

11. Changes to this Notice

We may update this Notice from time to time. Material changes will be communicated in-app or by email. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

Questions about this Notice can be sent to privacy@sallyemail.com.