Privacy Policy

1. Who We Are

MailyGent Ltd ("MailyGent", "we", "us", "our") operates the website mailygent.com and the MailyGent application. We are registered in England & Wales and are subject to UK GDPR and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, contact us at privacy@mailygent.com.

2. Data We Collect

2.1 Account data

When you register, we collect your email address, full name and the date you created your account. This data is necessary to provide the service.

2.2 Usage data

We collect information about how you use MailyGent, including:

• Campaigns generated and number of executions
• Features accessed and session duration
• Browser type, operating system and IP address (anonymised after 30 days)

2.3 Payment data

Payments are processed by Stripe. We store only your Stripe customer ID and subscription status — we never see or store your card details.

2.4 Communications

If you contact us by email, we store the correspondence to handle your request.

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract performance — to provide and manage your account and subscription.
• Legitimate interests — to improve the service, detect fraud, and send you relevant product updates (you can opt out at any time).
• Consent — for marketing emails and non-essential cookies (where required).
• Legal obligation — to comply with applicable UK law.

4. How We Use Your Data

• Provide, operate and improve the MailyGent service
• Manage your subscription and process payments
• Send transactional emails (receipts, password resets, onboarding)
• Send product updates and marketing (with opt-out on every email)
• Analyse usage patterns to improve the product
• Detect and prevent fraud or abuse
• Comply with legal obligations

5. Data Sharing

We do not sell your personal data. We share it only with the following third parties to operate the service:

• Supabase — database and authentication (EU servers)
• Stripe — payment processing (UK/EU compliant)
• HubSpot — CRM for customer support and communications (EU data centre)
• Render / Netlify — hosting infrastructure
• Anthropic (Claude) — AI generation (your prompts may be processed; see Anthropic's privacy policy)

All processors are contractually bound to process your data only on our instructions and in compliance with applicable data protection law.

6. International Transfers

Some of our service providers are located outside the UK. Where data is transferred outside the UK, we ensure appropriate safeguards are in place (such as UK International Data Transfer Agreements or equivalent).

7. Data Retention

We retain your personal data for as long as your account is active. After account deletion:

• Account and usage data is deleted within 30 days
• Billing records are retained for 7 years for legal and tax purposes
• Anonymised analytics data may be retained indefinitely

8. Your Rights

Under UK GDPR, you have the following rights:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion ("right to be forgotten")
• Restriction — restrict how we process your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, email us at privacy@mailygent.com. We will respond within 30 days.

You also have the right to lodge a complaint with the UK supervisory authority: Information Commissioner's Office (ICO).

9. Cookies

We use cookies to operate the service and understand how it's used. For full details, see our Cookie Policy.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encryption in transit (TLS), encrypted data at rest, and access controls.

No system is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@mailygent.com.

11. Children

MailyGent is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or via an in-app notice. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact

For any privacy-related questions or requests:

• Email: privacy@mailygent.com
• General: hello@mailygent.com