Privacy Policy

The Short Version

• We collect what we need to run the service, nothing more
• We don't sell your data or your customers' data
• We connect to Square to track revenue, not to mine your sales data
• Your subscriber lists belong to you
• You can delete your account and data anytime

What We Collect

Account Information

When you sign up, we collect:

• Your name and email address
• Your business name
• Payment information (processed securely by Stripe)

Your Subscriber Data

When you import or add subscribers, we store:

• Email addresses of your subscribers
• Names (if provided)
• Any tags or segments you create
• Unsubscribe status and dates

Your subscriber data belongs to you. We process it only to send emails on your behalf and track campaign performance. We will never use your subscriber list to send our own emails or share it with third parties.

Square Integration Data

When you connect your Square account, we access:

• Promo code redemption data (which codes were used and when)
• Transaction amounts associated with promo code usage

We do not access your full transaction history, customer information from Square, inventory data, or any other Square data beyond promo code redemptions. The integration is specifically limited to tracking campaign performance.

Email Campaign Data

For each campaign you send, we track:

• Who received the email
• Who clicked links in the email
• Who unsubscribed
• Revenue attributed via promo codes

We intentionally do not track open rates. They're unreliable since Apple Mail Privacy Protection launched, and we'd rather show you metrics that actually mean something.

Technical Data

Like most websites, we collect:

• IP addresses
• Browser type and version
• Pages visited and actions taken

This helps us maintain security and improve the product.

How We Use Your Data

• To provide the service: sending emails, tracking performance, managing your account
• To charge you: processing payments for campaigns
• To communicate with you: account notifications, support responses, occasional product updates
• To improve the product: understanding how people use Cherub Email to make it better

What We Don't Do

• We don't sell your data or your subscribers' data
• We don't share data with third parties for advertising
• We don't use your subscriber lists for our own marketing
• We don't build profiles of your customers

Third-Party Services

We use a few third-party services to run Cherub Email:

• Postmark: for sending emails
• Stripe: for payment processing
• Square: for revenue tracking (only with your authorization)

Each of these services has their own privacy policies and handles only the data necessary for their specific function.

Data Retention

• Account data: kept while your account is active, deleted within 30 days of account deletion
• Subscriber data: kept while your account is active, deleted within 30 days of account deletion
• Campaign data: kept for 2 years for your reference, then archived
• Payment records: kept for 7 years as required by tax law

Your Rights

You can:

• Access your data: Download your subscriber list and campaign history anytime from your dashboard
• Correct your data: Update your account information in settings
• Delete your data: Delete your account, and we'll remove your data within 30 days
• Export your data: Download everything in standard formats (CSV, JSON)

If you're in the EU or California and want to exercise additional rights under GDPR or CCPA, email privacy@cherubemail.com.

Your Subscribers' Rights

Your subscribers can unsubscribe from any email using the unsubscribe link we automatically include. When they unsubscribe, they're removed from your active list and won't receive future campaigns.

You are responsible for complying with privacy laws regarding your subscribers. This means getting proper consent before adding people to your list and honoring unsubscribe requests.

Security

We take reasonable measures to protect your data:

• All data is encrypted in transit (HTTPS) and at rest
• Access to production systems is restricted and logged
• We don't store full credit card numbers (Stripe handles that)
• Regular security reviews and updates

No system is 100% secure, but we take this seriously.

Cookies

We use cookies for:

• Keeping you logged in
• Remembering your preferences
• Basic analytics (how people use the site)

We don't use tracking cookies from ad networks or social media platforms.

Children

Cherub Email is not intended for use by anyone under 18. We don't knowingly collect data from minors.

Changes to This Policy

If we make significant changes to this policy, we'll notify you by email. Minor clarifications or updates won't be announced but will be reflected in the "last updated" date.

Contact

Questions about privacy? Email us at privacy@cherubemail.com.