Privacy Policy

Welcome to Nurturing Mail ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email automation platform and services.

By accessing or using Nurturing Mail, you agree to the terms outlined in this Privacy Policy. If you do not agree with these terms, please discontinue use of our services immediately.

Nurturing Mail is an email automation platform designed for directory owners to streamline their outreach efforts through ProductHunt scraping, AI-powered email generation, and automated campaign management.

2.1 Information You Provide Directly

• Account Information: When you create an account, we collect your name, email address, password (encrypted), company name, and business information.
• Profile Data: Optional profile information including profile picture, phone number, job title, and website URL.
• Payment Information: Billing details, payment card information (processed securely through third-party payment processors), billing address, and transaction history.
• Communication Data: Email templates you create, campaign settings, email content, subject lines, and any custom variables you define.
• Contact Lists: Email addresses and associated metadata of recipients you upload or import into campaigns.
• SMTP Configuration: Custom SMTP server details if you choose to use your own email infrastructure (stored encrypted).

2.2 Information We Collect Automatically

• Usage Data: Information about how you interact with our platform, including pages visited, features used, time spent, click patterns, and navigation paths.
• Device Information: IP address, browser type and version, operating system, device type, screen resolution, and unique device identifiers.
• Email Analytics: Email open rates, click-through rates, bounce rates, unsubscribe rates, geographic location of recipients, device types used to open emails, and time of engagement.
• Tracking Pixels: We use tracking pixels in emails to monitor delivery, opens, and engagement metrics.
• Cookies and Similar Technologies: Session cookies, persistent cookies, local storage data, and analytics tags to improve user experience and platform functionality.
• Log Data: Server logs including timestamps, API calls, error messages, and system performance metrics.

2.3 Information from Third-Party Sources

• ProductHunt Data: Product information, launch dates, descriptions, founder details, and engagement metrics scraped from ProductHunt's publicly available data.
• Authentication Providers: If you sign in using third-party services (Google, GitHub, etc.), we receive basic profile information as permitted by those services.
• Email Service Providers: Delivery status, bounce information, spam reports, and engagement data from email infrastructure providers.
• Analytics Services: Aggregated usage patterns and performance metrics from third-party analytics tools.

We use the collected information for the following purposes:

3.1 Service Delivery and Management

• Creating and managing your user account
• Processing and executing email campaigns on your behalf
• Scraping ProductHunt data to identify potential leads for your campaigns
• Generating AI-powered email content tailored to your target audience
• Scheduling and sending emails according to your campaign settings
• Tracking email delivery, opens, clicks, and other engagement metrics
• Managing unsubscribe requests and maintaining suppression lists
• Processing A/B tests to optimize email performance

3.2 Platform Improvement and Analytics

• Analyzing usage patterns to improve platform features and user experience
• Monitoring system performance and identifying technical issues
• Conducting research and development for new features
• Generating aggregated analytics and insights about platform usage
• Optimizing AI algorithms for better email generation and personalization

3.3 Communication and Support

• Responding to your inquiries and providing customer support
• Sending transactional emails (password resets, account confirmations, receipts)
• Notifying you about campaign status, deliverability issues, or system updates
• Sending weekly reports and analytics summaries
• Providing important security alerts and policy updates

3.4 Billing and Payments

• Processing subscription payments and managing billing cycles
• Maintaining payment history and generating invoices
• Detecting and preventing fraudulent transactions
• Managing subscription upgrades, downgrades, and cancellations

3.5 Legal and Security

• Enforcing our Terms of Service and preventing violations
• Detecting and preventing spam, abuse, and fraudulent activities
• Complying with legal obligations and responding to lawful requests
• Protecting the rights, property, and safety of our users and the public
• Investigating security incidents and potential threats

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Third-Party Service Providers

• Email Infrastructure: Email sending services (SMTP providers, transactional email services) to deliver your campaigns
• AI Services: AI/ML providers for email content generation and personalization
• Cloud Hosting: Cloud infrastructure providers for data storage and application hosting
• Payment Processors: Stripe, PayPal, or similar services for secure payment processing
• Analytics Tools: Analytics and monitoring services to track platform performance
• Customer Support: Help desk and communication tools to provide customer support

All third-party providers are contractually bound to protect your data and use it only for specified purposes.

4.2 Email Recipients

When you send emails through our platform, recipient email addresses and content are shared with our email delivery infrastructure. Recipients may see your sender information, email content, and tracking pixels embedded in emails.

4.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our platform before your information is transferred and becomes subject to a different privacy policy.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, search warrants)
• Government or regulatory requests
• Enforcement of our Terms of Service
• Protection of our rights, privacy, safety, or property
• Emergency situations involving potential threats to safety

4.5 Aggregated Data

We may share anonymized, aggregated, or de-identified data that cannot reasonably be used to identify you. This may include industry benchmarks, usage statistics, and trend analysis.

5.1 Data Storage Location

Your data is primarily stored on secure servers located in the United States and may be processed in other countries where our service providers operate. By using our services, you consent to the transfer of your information to countries outside your residence, which may have different data protection laws.

5.2 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: Data encrypted in transit using TLS/SSL and at rest using AES-256 encryption
• Authentication: Secure password hashing using bcrypt, optional two-factor authentication (2FA)
• Access Controls: Role-based access controls (RBAC) and principle of least privilege
• Network Security: Firewalls, intrusion detection systems, and DDoS protection
• Monitoring: 24/7 security monitoring and logging of suspicious activities
• Regular Audits: Periodic security assessments and vulnerability scanning
• Data Isolation: Logical separation of customer data in multi-tenant architecture
• Secure Development: Secure coding practices and regular code reviews

5.3 Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations (tax records, transaction history)
• Resolve disputes and enforce agreements
• Maintain backup and disaster recovery systems

Specific Retention Periods:

• Active account data: Retained while account is active
• Campaign data: Retained for 12 months after campaign completion
• Email logs: Retained for 90 days
• Analytics data: Aggregated and retained indefinitely
• Payment records: Retained for 7 years for tax compliance
• Deleted account data: Permanently deleted within 30 days, except where retention is required by law

5.4 Security Limitations

While we implement robust security measures, no system is completely secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials and for any activities under your account.

Depending on your location, you may have the following rights regarding your personal information:

6.1 Access and Portability

• Request a copy of the personal information we hold about you
• Export your campaign data, templates, and contact lists in machine-readable format
• Access your account dashboard to view and manage your information

6.2 Correction and Update

• Update your profile information and account settings at any time
• Correct inaccurate or incomplete information
• Request correction of information you cannot update yourself

6.3 Deletion and Erasure

• Delete your account and associated data through account settings
• Request deletion of specific information (subject to legal retention requirements)
• Remove email addresses from your contact lists
• Clear campaign history and logs

6.4 Restriction and Objection

• Pause or deactivate campaigns at any time
• Opt out of non-essential communications
• Restrict processing of certain data categories
• Object to automated decision-making and profiling

6.5 Marketing Communications

• Unsubscribe from marketing emails via the link in each email
• Manage email preferences in account settings
• Note: You cannot opt out of transactional emails necessary for service operation

6.6 Cookie Management

• Configure your browser to block or delete cookies
• Manage cookie preferences through our cookie banner (where applicable)
• Note: Blocking certain cookies may limit platform functionality

6.7 Exercising Your Rights

To exercise any of these rights, contact us at:

• Email: praneetbrar7@gmail.com
• Subject Line: "Privacy Rights Request"

We will respond to your request within 30 days. In some cases, we may need to verify your identity before fulfilling your request.

We use various tracking technologies to enhance your experience and collect usage data:

7.1 Types of Cookies We Use

7.2 Email Tracking

We embed tracking pixels in emails to monitor:

• Email opens (including time, location, and device)
• Link clicks and click-through rates
• Email client and rendering information
• Engagement patterns and timing

Recipients can disable tracking pixels by disabling images in their email client or using privacy-focused email services.

7.3 Third-Party Tracking

Third-party services may use their own tracking technologies:

• Payment processors (Stripe, PayPal)
• Analytics providers (Google Analytics, Mixpanel)
• Customer support tools (Intercom, Zendesk)
• Social media platforms (for social login and sharing)

Nurturing Mail operates globally, and your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your country.

8.1 Transfer Mechanisms

When we transfer data internationally, we use appropriate safeguards:

• Standard Contractual Clauses (SCCs) approved by relevant authorities
• Data Processing Agreements with third-party processors
• Adequacy decisions for transfers to countries with equivalent protection
• Binding Corporate Rules (where applicable)

8.2 EU-US and Swiss-US Data Transfers

For users in the European Union and Switzerland, we comply with applicable data transfer frameworks and regulations, including GDPR requirements for international data transfers.

8.3 Your Consent

By using our services, you acknowledge and consent to the transfer and processing of your information in the United States and other countries where we or our service providers operate.

Nurturing Mail is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18 years of age.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at praneetbrar7@gmail.com. We will take steps to delete such information from our systems.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take immediate steps to delete that information.

10.1 GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have specific rights under GDPR:

• Legal Basis: We process your data based on consent, contract performance, legitimate interests, and legal obligations
• Right to Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing
• Right to Lodge a Complaint: File a complaint with your local supervisory authority

10.2 CCPA Compliance (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act:

• Right to Know: Request disclosure of data collected about you in the past 12 months
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: Equal service and pricing regardless of privacy rights exercised
• Authorized Agent: Designate an authorized agent to make requests on your behalf

Categories of Personal Information We Collect:

• Identifiers (name, email, IP address)
• Commercial information (payment history, subscription details)
• Internet activity (browsing history, interactions with platform)
• Professional information (business details, company name)

10.3 CAN-SPAM Compliance

We comply with the CAN-SPAM Act for email marketing:

• Clear identification of emails as advertisements (where applicable)
• Valid physical postal address in all commercial emails
• Clear and conspicuous unsubscribe mechanism
• Processing of unsubscribe requests within 10 business days
• Monitoring of third-party email senders acting on your behalf

10.4 Other Privacy Laws

We also comply with other applicable privacy laws including but not limited to UK GDPR, LGPD (Brazil), PIPEDA (Canada), and other regional data protection regulations.

In the event of a data breach that affects your personal information, we will:

• Notify affected users via email within 72 hours of discovering the breach
• Provide details about the nature of the breach and data affected
• Explain the steps we are taking to address the breach
• Offer recommendations for protecting your information
• Notify relevant supervisory authorities as required by law
• Cooperate with law enforcement and security experts

We maintain an incident response plan and conduct regular security drills to minimize the risk and impact of data breaches.

Our platform may contain links to third-party websites, services, and integrations that are not operated by us. We are not responsible for the privacy practices of these third parties.

12.1 Third-Party Integrations

If you choose to integrate third-party services with Nurturing Mail:

• You authorize us to share necessary data with those services
• Third-party privacy policies will govern their use of your data
• We are not responsible for third-party data handling practices
• You should review the privacy policies of integrated services

12.2 ProductHunt

We scrape publicly available data from ProductHunt. Our use of this data is subject to ProductHunt's Terms of Service and robots.txt directives. Users are responsible for ensuring their use of scraped data complies with applicable laws and ProductHunt's policies.

12.3 Recommendation

We encourage you to review the privacy policies of any third-party services you interact with through our platform. We do not control and are not responsible for the privacy practices of third parties.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

13.1 Notification of Changes

• Material changes will be notified via email to your registered email address
• Prominent notice will be displayed on our platform before changes take effect
• Updated privacy policy will be posted on this page with a revised "Last Updated" date
• For significant changes, we may require your explicit consent

13.2 Your Continued Use

Your continued use of Nurturing Mail after privacy policy changes take effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you should discontinue use and may delete your account.

13.3 Version History

We maintain a version history of our privacy policy. You can request previous versions by contacting us at praneetbrar7@gmail.com.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15.1 Automated Decision-Making

We use automated systems and AI algorithms to generate email content and personalize campaigns. While these systems make recommendations, you maintain full control over what emails are sent and to whom. You have the right to:

• Request human review of automated decisions
• Opt out of automated content generation
• Manually review and approve all AI-generated content before sending

15.2 Do Not Track (DNT)

Some browsers have a "Do Not Track" feature that signals websites you visit that you do not want to have your online activity tracked. Currently, our platform does not respond to DNT signals. We will update this policy if our DNT response changes.

15.3 Account Closure

When you close your account:

• Your account will be deactivated immediately
• Personal data will be deleted within 30 days
• Some data may be retained in backups for up to 90 days
• Legally required data (payment records) may be retained longer
• Anonymized data may be retained indefinitely for analytics

15.4 Business Transfers

If Nurturing Mail is involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.