Privacy Policy

1. Overview

This Privacy Policy explains how Mailburster collects, uses, stores, and protects personal data when you use our platform. Mailburster is a lightweight bulk email campaign tool built for customers who send campaigns using their own AWS SES infrastructure.

2. Data We Collect

• Account data: name, email address, authentication identifiers, and session metadata via Stack Auth.
• AWS configuration data: SES credentials, region, sender identities, configuration sets, and SNS destinations.
• Recipient data: uploaded CSV contacts, merge tag values, email addresses, and custom metadata.
• Campaign data: subject lines, HTML templates, sender details, and campaign schedules.
• Event data: deliveries, opens, clicks, bounces, complaints, unsubscribes, and suppressions.
• Usage data: device, browser, IP logs, and platform diagnostics.

3. Authentication & Account Security

Mailburster uses Stack Auth for secure authentication, session management, and identity workflows. Authentication providers may process login metadata such as device identifiers, IP addresses, and OAuth profile data. You are responsible for maintaining the confidentiality of your authentication methods and linked identity providers.

4. How We Use Data

• Authenticate users and secure accounts.
• Connect and validate your AWS SES and SNS setup.
• Process CSV uploads and merge-tag personalization.
• Queue and send campaigns through your AWS infrastructure.
• Track delivery and engagement analytics.
• Prevent spam, fraud, abuse, and unsafe sending behavior.
• Improve product performance, reliability, and support workflows.

5. AWS SES, SNS & Customer-Owned Infrastructure

Mailburster operates on top of your connected Amazon SES and Amazon SNS resources. Recipient emails, delivery events, bounce notifications, complaint signals, and tracking events may be processed through AWS services that are owned and billed by you. AWS acts as an independent service provider under its own privacy and data handling terms. All AWS charges related to SES sending, SNS notifications, and related storage or bandwidth are borne by the customer.

6. Tracking & Analytics

To provide campaign reporting, Mailburster may collect email event data including sends, deliveries, opens, clicks, bounces, complaints, unsubscribes, and suppressions. Open tracking may use tracking pixels, and click tracking may route through signed redirect URLs. Some analytics may be affected by privacy filters, proxying, bot scanners, or mailbox provider protections.

7. Data Retention

Uploaded CSV files may be automatically deleted after a retention period. Campaign summaries and aggregated analytics may remain available for longer depending on your subscription plan. Raw logs may be archived for abuse prevention, debugging, compliance, and billing dispute resolution.

8. Data Sharing

• We do not sell personal data.
• We only share data with subprocessors required to operate the platform, including authentication and cloud infrastructure providers.
• Campaign delivery data is shared with your own AWS SES and SNS services as part of core functionality.
• We may disclose information when required by law, abuse investigations, or fraud prevention obligations.

9. International Compliance

Customers are responsible for ensuring lawful collection and use of recipient data under applicable laws, including GDPR, CAN-SPAM, CASL, PECR, and the India DPDP Act. Mailburster provides the infrastructure layer, while customers remain the controller of uploaded recipient lists and campaign content.

10. Your Rights

• Request access to your stored account data.
• Request deletion of your account and associated platform data.
• Export campaign reports before account closure.
• Request correction of inaccurate profile information.

11. Contact

For privacy, compliance, or data deletion requests, contact privacy@mailburster.com.