Welcome to Excel2Mail.com ("we," "our," or "us"). We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email campaign service.
1. Information We Collect
1.1 Information You Provide
- Account Information: When you sign up, we collect your email address through OAuth authentication (Google or Microsoft Outlook).
- Contact Lists: Email addresses and custom fields you upload for your distribution lists and email campaigns.
- Payment Information: If you subscribe to a paid plan, we collect payment information through Stripe, our third-party payment processor. We do not store your complete credit card information on our servers.
1.2 Automatically Collected Information
- OAuth Tokens: We securely store encrypted access and refresh tokens from Google or Microsoft to send emails on your behalf.
- Usage Data: We collect information about how you use our service, including the number of emails sent, distribution lists created, and feature usage.
- Analytics Data: We use Google Analytics to understand how users interact with our service. This includes page views, session duration, and general usage patterns.
- Session Information: We use cookies and session data to maintain your login state and provide core functionality.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our email campaign service
- Send emails on your behalf through your connected Google or Outlook account
- Process your subscription and payment transactions
- Monitor and analyze usage patterns to improve our service
- Enforce our usage limits (daily sending limits, free tier email limits)
- Communicate with you about service updates, security alerts, and support issues
- Detect and prevent fraud, abuse, or security issues
- Comply with legal obligations
3. How We Share Your Information
We do not sell your personal information. We may share your information only in the following circumstances:
- Service Providers: We use trusted third-party services including:
- Google Cloud Platform and Microsoft Azure (for OAuth authentication)
- Stripe (for payment processing)
- Google Analytics (for usage analytics)
- Railway (for hosting infrastructure)
- Legal Requirements: We may disclose your information if required by law, court order, or government regulation.
- Protection of Rights: We may share information to protect our rights, property, or safety, or that of our users or the public.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
4. Data Security
We take data security seriously and implement industry-standard measures to protect your information:
- OAuth tokens are encrypted at rest using strong encryption algorithms
- Secure HTTPS connections for all data transmission
- Regular security updates and monitoring
- Limited access to personal information on a need-to-know basis
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
5. Data Retention
We retain your information for as long as your account is active. When you delete your account or disconnect from our service:
- We delete your OAuth tokens immediately
- Your account data, distribution lists, and contact information are deleted from our database
- Some data may be retained in backups for a limited period for security and legal compliance purposes
6. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: You can view and manage your account information and distribution lists through your account dashboard.
- Correction: You can update or correct your information at any time.
- Deletion: You can delete your account and all associated data by disconnecting from our service.
- Data Portability: You can export your contact lists and distribution data.
- Opt-Out of Analytics: You can opt out of Google Analytics tracking using browser extensions or settings.
7. Cookies and Tracking
We use the following types of cookies:
- Essential Cookies: Required for authentication and session management. These cannot be disabled without affecting service functionality.
- Analytics Cookies: Used by Google Analytics to understand usage patterns and improve our service.
- CSRF Protection: Security cookies to prevent cross-site request forgery attacks.
8. Third-Party Services
Our service integrates with third-party platforms:
9. Children's Privacy
Our service is not intended for users under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete such information.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the service after any changes indicates your acceptance of the updated Privacy Policy.
12. Contact Us
← Back to Home
