Privacy Policy

1. Introduction

Welcome to Pigeonify. This Privacy Policy explains how Pigeonify ("we", "us", or "our") collects, uses, and protects information when you use our email marketing platform and services available at pigeonify.com (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. This policy works in conjunction with our Terms of Service.

2. Definitions

• Personal Data: Information about a living individual who can be identified from those data, including email address, name, phone number, and IP address.
• Usage Data: Data collected automatically, such as IP address, browser type, pages visited, time spent, and device identifiers.
• Cookies: Small files stored on your device containing data about your browsing activity.
• Data Controller: The entity that determines the purposes and means of processing personal data. Pigeonify is the Data Controller for customer account data.
• Data Processor: An entity that processes data on behalf of the Data Controller. Pigeonify acts as a Data Processor for customer email campaign data.

3. Information We Collect

3.1 Personal Data

When you create an account or use our Service, we may collect:

• Email address
• First and last name
• Company name and address
• Phone number
• Payment information (processed securely through third-party payment processors)
• Domain names you verify for sending emails

3.2 Usage Data

We automatically collect information about how you access and use the Service:

• IP address and browser type
• Pages visited and features used
• Time and date of visits
• Device information and operating system
• Email campaign performance metrics (open rates, click rates, bounces, complaints)
• API usage statistics

3.3 Customer Contact Data

As an email marketing platform, you upload contact lists and email content. We process this data on your behalf as a Data Processor. You are the Data Controller of this information and are responsible for ensuring you have the right to use and send emails to these contacts.

4. How We Use Your Information

We use collected data for the following purposes:

• To provide, maintain, and improve our Service
• To process your transactions and manage your account
• To send you service announcements, updates, and security alerts
• To provide customer support and respond to your inquiries
• To monitor usage patterns and detect technical issues
• To prevent fraud, abuse, and ensure platform security
• To comply with legal obligations and enforce our Terms of Service
• To send marketing communications (you may opt out at any time)
• To generate anonymized analytics and improve our services

5. Data Storage and Retention

We retain your Personal Data only as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations. Account data is retained for the duration of your subscription and for up to 12 months after account closure for legal and security purposes.

Email campaign data and contact lists are retained as long as your account remains active. Upon account deletion, this data is permanently removed within 30 days unless you have requested a data export.

6. Data Sharing and Disclosure

We may share your information with:

6.1 Service Providers

We work with third-party service providers who assist us in operating our platform:

• Amazon SES: Email delivery infrastructure
• Resend: System notification emails
• Payment Processors: Secure payment processing (Stripe, PayPal)
• Cloud Hosting: Data storage and infrastructure

6.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety, or that of our users or the public.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will provide notice before your Personal Data is transferred.

7. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication with hashed passwords (bcrypt)
• Regular security audits and vulnerability assessments
• Access controls and monitoring systems
• Compliance with AWS security best practices

While we strive to protect your Personal Data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Data Protection Rights (GDPR)

If you are a resident of the European Union (EU) or European Economic Area (EEA), you have the following data protection rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Request transfer of your data in a machine-readable format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, please email us at support@pigeonify.com. We may verify your identity before responding to such requests.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising CCPA rights

We do not sell or rent your personal information to third parties. To exercise your CCPA rights, email support@pigeonify.com.

10. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. Cookies help us:

• Remember your login session and preferences
• Understand how you use our Service
• Track email campaign performance (opens, clicks)
• Improve service functionality and user experience

You can control cookies through your browser settings. Disabling cookies may limit your ability to use certain features of our Service.

11. Third-Party Services

Our Service may contain links to third-party websites, plugins, or integrations. We are not responsible for the privacy practices of these third parties. We recommend reviewing their privacy policies before providing any personal information.

12. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws, including GDPR Standard Contractual Clauses where applicable.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through a prominent notice on our Service. Changes become effective when posted. Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: