Privacy policy

When you sign in with GitHub or Google we receive your name, email address and profile picture from that provider. We use them to create your account and workspace and to show who is signed in. We never see your password.

We set a session cookie to keep you signed in. It is required for the product to work and is not used for advertising.

We store the templates, components, variables, version history, API keys (hashed) and domain settings you create, so the product can render and send your emails.

When you send an email, we process the recipient address, the subject and the data you pass in order to render and deliver it. We keep a record of each send, such as the template, time and outcome, to power your analytics and limits.

Emails sent through emiit include a small tracking image and rewritten links. When a recipient opens an email or clicks a link, we record the time, IP address and user agent so you can see opens and clicks per template.

When an address hard bounces, complains, or unsubscribes, we add it to your workspace's suppression list so it is not emailed again. You can view and remove entries from the API.

For recipient data, you are the controller and we act as your processor. You are responsible for having a lawful basis to email the people you send to.

When you use the AI assistant in the builder, the prompt you write and the current template are sent to a third-party AI provider to generate a draft. Don't put personal data in prompts you would not want shared with that provider.

We use a small number of providers to run emiit: cloud hosting and databases, email delivery infrastructure, error monitoring, and an AI model provider. They process data only to provide their service to us. A current list is available on request.

Error monitoring may capture technical details of a failing request, including your IP address, and a recording of the page session that led to the error.

We do not sell personal data or use it for advertising.

We keep account data and workspace content for as long as your account exists. Send records and open and click events are kept to show your analytics. Suppression entries are kept until you remove them, because deleting them would let a bounced or unsubscribed address be emailed again.

When you delete your account, we delete your workspace content and personal data, except where we need to keep something to meet a legal obligation.

You can ask to access, correct, export or delete your personal data by emailing contact@emiit.dev. Recipients of emails sent through emiit should contact the sender first, since the sender controls that data; we will help them respond.

If we change this policy in a way that matters, we will update the date above and tell account holders by email before the change takes effect.

Questions about privacy: contact@emiit.dev.