Privacy Policy

Last updated: January 1, 2026

At EmailOS, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email design platform. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

Information We Collect

When you use EmailOS, we collect information you provide directly: • Account information (name, email address, password hash) • Email designs and projects you create • Brand kit settings and preferences • Usage data and analytics • Communication preferences We also automatically collect certain technical information including browser type, device information, and IP address to improve our services.

How We Use Your Information

We use the information we collect to: • Provide, maintain, and improve EmailOS services • Process transactions and send related information • Send technical notices, updates, and support messages • Respond to your comments, questions, and customer service requests • Monitor and analyze trends, usage, and activities • Detect, investigate, and prevent fraudulent transactions and abuse • Personalize and improve your experience

Image Hosting & CDN

When you upload images to EmailOS: • Images are hosted on Cloudinary's CDN (Content Delivery Network) • Images are publicly accessible via URL for email compatibility • We do not claim ownership of your uploaded content • You can delete your images at any time from your dashboard • Images are automatically optimized for email delivery Cloudinary's privacy policy applies to hosted images: https://cloudinary.com/privacy

Data Security

We implement appropriate technical and organizational security measures to protect your personal information: • All data is encrypted in transit using TLS/SSL • Passwords are hashed using industry-standard bcrypt • Database access is restricted and monitored • Regular security audits and vulnerability assessments • Access controls and authentication for all systems • Secure cloud infrastructure (Supabase/AWS) While we strive to protect your information, no method of transmission over the Internet is 100% secure.

Third-Party Services

We use the following third-party services: • Supabase - Database and authentication • Cloudinary - Image hosting and CDN • Stripe - Payment processing • Vercel - Hosting and deployment Each service has its own privacy policy. We recommend reviewing them: • Supabase: https://supabase.com/privacy • Cloudinary: https://cloudinary.com/privacy • Stripe: https://stripe.com/privacy • Vercel: https://vercel.com/legal/privacy-policy

Your Rights

Depending on your location, you may have certain rights regarding your personal information: • Access: Request a copy of your personal data • Correction: Request correction of inaccurate data • Deletion: Request deletion of your personal data • Portability: Request transfer of your data • Objection: Object to certain processing of your data • Restriction: Request restriction of processing To exercise these rights, please contact us at privacy@EmailOS.dev.

Communications

We may send you: • Service-related emails (account verification, security alerts) • Product updates and new feature announcements • Marketing communications (with your consent) You can opt out of marketing communications at any time by clicking the unsubscribe link in any email or updating your preferences in your account settings.

Data Retention & Deletion

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to: • Comply with legal obligations • Resolve disputes • Enforce our agreements When you delete your account: • Your profile data is deleted immediately • Your email projects are deleted within 24 hours • Uploaded images are removed from CDN within 30 days • Backup data is purged within 90 days To request account deletion, visit Settings > Account > Delete Account.

For EU/EEA Users (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to be informed about data collection and use
  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Rights related to automated decision-making

Our legal basis for processing your data is your consent (when you create an account) and legitimate interests (improving our services).

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

View Terms of Service →

© 2026 EmailOS. All rights reserved.