Privacy Policy
Last updated 18 October 2026
This Privacy Policy explains how CapiMail handles personal data. It covers two roles: data about our customers (the people who run a workspace) and recipient data that customers process through CapiMail to send their own email.
Customer data we collect
- Account and organization details you provide (name, email, company, website, sending use case).
- Authentication and security data needed to operate your workspace.
- Billing and credit-ledger records for purchases and usage.
- Operational logs used to run, secure, and support the service.
Recipient data you process
When you import contacts and send email, CapiMail processes recipient data on your behalf as a processor. Recipient email addresses are stored hashed for suppression and matching where possible, and message content and raw recipients are retained only as long as needed to deliver and reconcile a send, then purged on a defined schedule. You remain the controller of your recipient data.
How we use data
- To provide and secure the service, deliver email, and enforce consent, suppression, and sending limits.
- To monitor deliverability and protect the shared sending reputation.
- To bill accurately and maintain an auditable credit ledger.
- We do not sell personal data, and we do not use your recipient lists for our own marketing.
Subprocessors
We use a small set of infrastructure and email-delivery subprocessors (including a cloud host and the email sending provider) to operate CapiMail. A current list of subprocessors and regions is available on request through our support contact.
Retention and your choices
- Message content and recipient payloads are retained for a limited window, then purged.
- Consent history, suppression records, and billing records are retained for audit and compliance.
- You can export or request deletion of data; some records are kept where law or legitimate audit needs require.
Contact
For privacy questions or data requests, contact us at gaweloka@gmail.com.