Seamailer Corp ("Seamailer", "we", "us", "our") provides email marketing software at seamailer.app (the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, and the choices and rights you have.
Seamailer Corp is a Delaware corporation. Our postal address is 233 Gilman Avenue, Cincinnati, OH 45219, United States. You can reach us about anything in this policy at support@seamailer.app.
1. Who this policy covers
This policy covers:
- Visitors to seamailer.app and our other websites.
- Customers: people and businesses who create a Seamailer account, and the team members they invite.
It does not mainly cover the people on our customers' mailing lists ("Contacts"). For Contact data, our customer decides what is collected and why, and Seamailer processes it on the customer's behalf. See section 3.
2. Our role: controller and processor
- Account data. For information about our Customers and Visitors, Seamailer is the controller: we decide how and why it is used.
- Contact data. For the lists, contacts and campaign data our Customers upload or collect through the Service, the Customer is the controller and Seamailer is the processor. We handle that data only to provide the Service and on the Customer's instructions, as set out in our Data Processing Addendum.
3. If you are on a Seamailer customer's mailing list
If you received an email sent through Seamailer, the sender is one of our Customers, not Seamailer. To unsubscribe, use the unsubscribe link in that email. To access, correct or delete your data, contact the sender directly. If you cannot reach them, email us at support@seamailer.app and we will pass on your request and help where we can.
4. Information we collect
4.1 Information you give us
- Account details: name, email address, password (stored only as a secure hash), company name, and answers you give during onboarding.
- Google Sign-In: if you sign in with Google, we receive your name, email address and profile picture from Google.
- Billing details: billing name, email, plan, and transaction records. Card details are entered on and stored by our payment processor, Paystack; we do not see or store full card numbers.
- Support messages: messages you send us by email or live chat.
- Customer Content: email templates, images, forms, landing pages, automations, and the Contact lists you upload or import (by file or from another email platform).
- AI inputs: prompts you enter into Seamailer's AI features and the content you ask them to work on.
4.2 Information we collect automatically
- Device and log data: IP address, browser type, operating system, device type, pages visited, and the date and time of access.
- Approximate location: country and city derived from your IP address, used to show the right currency and to prevent fraud.
- Product usage: which features you use and how, collected through analytics tools (see section 7).
- Email engagement: for campaigns sent through the Service, we record deliveries, opens, clicks, bounces, complaints and unsubscribes on our Customers' behalf.
4.3 Information from others
- Payment processor: payment status and limited card details (such as card type and last four digits).
- Referrals: if another Customer refers you, we record the referral to apply rewards.
- Integrations and imports: data you choose to bring in from another platform.
5. How we use information, and our legal bases
| Purpose | Examples | Legal basis (where GDPR, UK GDPR or NDPA apply) |
|---|---|---|
| Provide the Service | Create your account, send your campaigns, store your content | Performance of our contract with you |
| Billing | Charge your plan, issue receipts, handle refunds | Contract; legal obligation (tax records) |
| Security and fraud prevention | Detect abuse, spam, fake accounts and referral fraud; protect sending reputation | Legitimate interests |
| Support | Answer your questions | Contract; legitimate interests |
| Improve the Service | Understand which features are used and fix problems | Legitimate interests; consent where required for cookies |
| Service messages | Security alerts, billing notices, changes to terms | Contract; legal obligation |
| Marketing to you | Product news and offers from Seamailer | Consent or legitimate interests; you can opt out at any time |
| Legal compliance | Respond to lawful requests; enforce our Terms | Legal obligation; legitimate interests |
We do not sell your personal data, and we do not use Contact data for our own marketing.
6. AI features
Seamailer's AI features are powered by third-party AI providers, currently Anthropic and Google (Gemini). When you use an AI feature, we send your prompt and the content needed to answer it (for example, a draft email or campaign details) to that provider.
- We use these providers through their paid, commercial API services, under business terms that do not allow them to train their models on the data we send.
- Do not enter sensitive personal data (for example, health or financial information about your Contacts) into AI features.
- AI output can be inaccurate. Review it before you send or publish it.
7. Cookies and similar technologies
We use cookies and similar technologies on our website and in the app.
| Tool | Provider | Purpose | Type |
|---|---|---|---|
| Session and login cookies | Seamailer | Keep you signed in; remember preferences | Essential |
| reCAPTCHA | Protect forms from bots | Essential | |
| Google Analytics | Website traffic analytics | Analytics | |
| PostHog | PostHog | Product usage analytics | Analytics |
| Amplitude | Amplitude | Product usage analytics | Analytics |
| Live chat | tawk.to | Support chat widget | Functional |
Where the law requires it, we ask for your consent before setting non-essential cookies, through our cookie banner. You can change your choice at any time and can also block cookies in your browser settings. Blocking essential cookies may stop parts of the Service from working.
8. How we share information
We share personal data only as described here.
Service providers (subprocessors) help us run the Service, under contracts that limit their use of the data. Current providers:
| Provider | Purpose |
|---|---|
| Amazon Web Services | Hosting, file storage |
| Paystack | Payment processing |
| Anthropic; Google (Gemini) | AI features |
| Sign-in, reCAPTCHA, analytics | |
| PostHog; Amplitude | Product analytics |
| tawk.to | Live chat support |
| Cloudinary | Image hosting |
| ipdata | IP-based location |
| Sentry; Bugsnag; Better Stack | Error monitoring and logs |
Subprocessors that handle our Customers' Contact data are listed in Annex III of our Data Processing Addendum.
We may also share personal data:
- Integrations you choose: when you connect or import from another platform, we exchange data with it at your direction.
- Legal reasons: to comply with law, a court order or a lawful government request; or to protect the rights, property or safety of Seamailer, our Customers or the public.
- Business transfers: if Seamailer is involved in a merger, acquisition or sale of assets, personal data may transfer as part of that deal, subject to this policy.
- With your consent: in any other case you agree to.
9. International transfers
Seamailer is based in the United States, and our providers process data in the United States and other countries. When we transfer personal data from the European Economic Area, the United Kingdom, Switzerland or Nigeria to countries without an adequacy decision, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and the transfer bases available under Nigeria's Data Protection Act 2023.
10. How long we keep information
| Data | How long |
|---|---|
| Account data | While your account is open, and for 6 months after it is closed, then deleted |
| Contacts you delete | Removed from our active systems within 30 days and from backups within 90 days |
| Suppression list (unsubscribed, bounced and complained addresses) | As long as needed to make sure those people are not emailed again |
| Billing and tax records | 7 years, as required for tax and audit |
| Support conversations | While your account is open, and for 6 months after it is closed |
| Security logs | Up to 12 months |
We may keep data longer if the law requires it or to resolve a dispute.
11. Security
We protect personal data with technical and organisational measures, including encryption in transit, hashed passwords, access controls limited to staff who need them, and monitoring for unauthorised access. No system is perfectly secure. If a data breach affects your personal data, we will notify you and the relevant authorities as the law requires.
12. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you and get a copy.
- Correct data that is wrong or incomplete.
- Delete your data.
- Restrict how we use your data in certain cases.
- Data portability: receive your data in a structured, machine-readable format, or have it sent to another service.
- Object to processing based on our legitimate interests, and to direct marketing at any time.
- Withdraw consent where we rely on it, without affecting earlier processing.
- Complain to your data protection authority.
To use these rights, email support@seamailer.app. We may need to verify your identity first. We respond within 30 days, or sooner where the law requires. You can also update most account details, export your contacts and close your account yourself in the app's settings.
13. Region-specific information
European Economic Area, United Kingdom and Switzerland
The legal bases for each purpose are in section 5. You may complain to the data protection authority where you live or work.
California
We do not sell or share personal information for cross-context behavioural advertising, and we have not done so in the past 12 months. In the past 12 months we collected the categories listed in section 4 (identifiers, commercial information, internet activity, approximate geolocation, and content you provide) for the purposes in section 5, and disclosed them to the service providers in section 8. California residents may request to know, delete or correct their personal information, and will not be discriminated against for doing so. You may use an authorised agent to make a request.
Other US states
Residents of other US states with privacy laws (such as Virginia, Colorado, Connecticut and Texas) have similar rights, and may appeal a decision on their request by replying to our response.
Nigeria
We process personal data of people in Nigeria in line with the Nigeria Data Protection Act 2023. You have the rights set out in section 12 and may complain to the Nigeria Data Protection Commission.
14. Children
The Service is not for anyone under 18, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
15. Changes to this policy
We may update this policy. For material changes, we will notify you by email or in the app before they take effect. The date at the top shows when this policy was last updated.
16. Contact us
Seamailer Corp 233 Gilman Avenue, Cincinnati, OH 45219, United States support@seamailer.app