Privacy Policy

• Account data. Your name, email address, and a hashed password, collected through our authentication provider (Better Auth) when you create an account, plus workspace and membership details.
• Mailbox OAuth tokens. When you connect a Gmail or Microsoft 365 mailbox, we store the OAuth access and refresh tokens needed to act on that mailbox on your behalf. We never see or store your mailbox password.
• Email content and metadata. Emails MailerTap sends from your connected mailbox, and inbound replies to those emails (including warmup messages), which we process to send campaigns, detect and classify replies, run warmup engagement, and honor unsubscribes.
• Lead data you upload. Contact lists (names, email addresses, and any custom fields) that you import into MailerTap to run campaigns. You are responsible for having a lawful basis to contact these people; we process this data on your behalf.
• Usage and log data. Standard operational logs (timestamps, IP addresses, actions taken) used for security, debugging, and abuse prevention.

If you connect a Gmail account, MailerTap requests the gmail.modify scope and uses it only to:

• send campaign and warmup emails from your mailbox at your direction;
• read replies to emails MailerTap sent, in order to detect responses, classify intent (interested, unsubscribe, bounce, out-of-office), and stop sequences;
• perform warmup engagement on warmup messages: opening, replying to, labeling, and moving them (for example, out of spam) to build sender reputation.

MailerTap’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In line with those Limited Use requirements:

• we do not sell Google user data;
• we do not use Google user data for advertising;
• we do not use Google user data to train, develop, or improve generalized artificial intelligence or machine-learning models;
• no human reads your mailbox content, except with your explicit consent for a support request, where necessary for security or abuse investigation, or where required by law.

The same commitments apply to Microsoft mailbox data accessed via the Mail.Send and Mail.ReadWrite Microsoft Graph permissions.

When you use MailerTap’s AI assistance, the relevant text is sent to Anthropic (our AI subprocessor) to generate a result: the content of a reply you received when drafting or classifying a response, and the campaign brief you write when generating campaign copy. This processing happens only to provide the feature you invoked. We do not use your data, including Google user data, to train AI models, and our agreement with Anthropic does not permit them to train on it.

• Mailbox OAuth tokens are encrypted at rest with AES-256-GCM.
• All data is encrypted in transit with TLS.
• Access to production systems is restricted and logged.

We never sell your data. We share data only with the service providers below, and only as needed to run MailerTap:

• Render — cloud hosting and managed database infrastructure where the application and its data run.
• Anthropic — AI processing for reply drafting, reply classification, and campaign copy generation, as described above.
• Google / Microsoft — your mailbox provider, which we call at your direction through the OAuth connection you granted.

• Disconnect a mailbox: its OAuth tokens are deleted and MailerTap stops accessing that mailbox.
• Close your account: your account data, mailbox tokens, lead data, and stored email content are deleted within 30 days, except where we must retain limited records to comply with law.
• You can also revoke MailerTap’s access at any time from your Google account permissions or Microsoft account settings.
• To request deletion or a copy of your data, email privacy@mailertap.com.

For contact lists you import, you (or your organization) are the data controller and MailerTap is a processor acting on your instructions. We use lead data only to run your campaigns, maintain suppression lists, and provide reporting back to you. We do not use one customer’s lead data for any other customer or purpose.

We will post any changes to this policy on this page and update the date above. Material changes will be announced in the app or by email. Contact: privacy@mailertap.com.