Legal

Privacy Policy

Effective date: August 26, 2026

Mailsoftly is an email marketing service provided by Albert Solino Corp., a California corporation doing business as Mailsoftly ("Mailsoftly", "we", "us"). This policy explains what personal information we collect, how we use it, and the choices you have. It applies to our websites, including mailsoftly.com, and to the Mailsoftly application at app.mailsoftly.com (together, the "Service").

1. Two kinds of personal information

The Service involves two different kinds of personal information, and we handle them in different ways:

• Your information. Information about you as our customer, such as your name, email address, and billing details. For this information, Mailsoftly decides how and why it is processed (under the GDPR, we act as the data controller), and this policy describes that processing in full.
• Your contacts' information. The contact lists you upload or collect, including your recipients' names, email addresses, mailing addresses, and other fields, and the content of the messages you create. This is "Customer Content" under Section 9 of our Terms of Service. You own it and you decide how it is used; we process it only on your behalf to provide the Service (under the GDPR, we act as a data processor). Section 4 below describes exactly what we do and do not do with it.

2. Information we collect

Account information

When you create an account we collect your name, email address, password, and optional details such as your company name and website. If you sign up or sign in with Google or Microsoft, we receive basic profile information such as your name and email address from that provider.

Billing information

Payments are processed by Stripe, our payment provider. Your card details are transmitted directly to Stripe; we do not store full card numbers on our servers. We keep records of your plan, invoices, and payment status.

Customer Content

The contact lists, subscriber form submissions, message designs, and message content you upload to or create in the Service, as described in Section 1.

Usage and log data

When you use the Service we record technical information such as your IP address, browser and device type, the pages you view, the actions you take in the app, and timestamps. We also collect error and diagnostic logs so we can keep the Service reliable.

Communications

When you contact us, for example through support or our contact form, we keep the correspondence and the contact details you provide so we can respond.

3. How we use information

We use your information to:

• provide, operate, and maintain the Service (legal basis: performance of our contract with you);
• set up your account, process payments, and send transactional messages such as receipts and service notices (contract);
• respond to support requests (contract);
• protect the Service and its users, including preventing spam, abuse, and fraud (legitimate interests);
• understand how the Service is used and improve it (legitimate interests);
• send you occasional product updates, announcements, and marketing about Mailsoftly, which you can opt out of at any time using the unsubscribe link in those emails (legitimate interests, or consent where required);
• comply with legal obligations (legal obligation).

4. Your contacts and message content

When you upload or sync contact lists to Mailsoftly, we process that information on your behalf to provide the Service: storing your lists, sending your campaigns, and reporting the results back to you. Your contact lists remain yours. We do not:

• sell your contacts' information;
• share your contacts with other customers;
• use your contacts' information for our own advertising;
• contact your recipients independently, except to deliver the messages you send and, where required, to process their unsubscribe and consent choices.

You are responsible for having a lawful basis to email the contacts you upload, as described in our Terms of Service.

5. Deliverability protection

To keep delivery rates high and to protect our sending infrastructure, recipients, and all senders using the Service, we process email delivery signals such as bounces, spam complaints, unsubscribes, and engagement events. We retain these signals and use them, including in aggregated form across the Service, to suppress addresses that can no longer receive mail, to detect abuse, to route and pace sending, and to estimate the deliverability risk of a list before it is sent. We also perform technical lookups on the domain portion of email addresses (such as public DNS records) to determine whether a domain can receive mail.

Where the GDPR applies, we rely on our legitimate interest in securing the Service and protecting recipients and senders as the legal basis for this processing. These signals are used only to operate and protect the Service and are never disclosed in a form that identifies another customer or their contacts.

6. AI-assisted features

Some features of the Service use large language models to help you work faster, such as subject line suggestions, email copy and template generation, and automated screening of outgoing content for spam and abuse. When you use these features, or when a message is screened, the relevant content is processed by our AI provider (OpenAI) through its business API to produce the result. Under the provider's API terms, that data is not used to train its models. We do not use your Customer Content to train models of our own.

7. Google user data

Mailsoftly accesses certain limited Google user data via the Gmail API to provide email management and sending features. Specifically, the app may access:

• the user's Gmail account, to send and manage emails on their behalf;
• basic account information such as email address, to identify the user within the app.

Mailsoftly does not access, store, or share the contents of unrelated personal emails or any data outside the scope required for these core features. Mailsoftly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Mailsoftly retains Google user data only as long as it is necessary to provide the connected services. You can revoke access to your Google account at any time by disconnecting Gmail from within the app or through your Google Account permissions page. Once access is revoked, all related tokens and stored data associated with that Google account are immediately deleted from Mailsoftly's systems, and any data processing based on that access ends.

8. Microsoft account data

If you connect a Microsoft Outlook or Microsoft 365 account, we access it in the same limited way: to send and manage the emails you initiate and to identify your account within the app. We do not read, store, or share unrelated personal emails. You can disconnect your Microsoft account at any time from within the app or through your Microsoft account settings, which ends our access and removes the related tokens from our systems.

9. Cookies and similar technologies

We use cookies that are essential to the Service, such as the session cookie that keeps you signed in and cookies used for security and abuse prevention (including Cloudflare Turnstile and Google reCAPTCHA). On our marketing website we also use analytics cookies (such as Google Analytics) to understand how visitors use the site. You can control cookies through your browser settings; blocking essential cookies may prevent parts of the Service from working.

10. When we share information

We do not sell personal information. We share it only with service providers who help us run Mailsoftly, and only for the purposes described in this policy. These providers are bound by contracts that restrict them from using the information for any other purpose. Our main providers are:

We may also disclose information if required by law or legal process, to protect the rights, safety, or property of Mailsoftly, our users, or the public, or as part of a merger, acquisition, or sale of assets, in which case this policy will continue to apply to the transferred information.

11. Data retention and deletion

We keep your account information and Customer Content for as long as your account is active. You can delete contacts, lists, and content from within the app at any time. When your account is closed, we delete or de-identify your information within a reasonable period, except where we must keep it to comply with legal obligations (for example, billing records), to maintain suppression lists that honor your recipients' unsubscribe choices, or where it persists briefly in routine encrypted backups before aging out. Google user data is deleted as described in Section 7.

12. Security

We protect your information with measures that include encryption in transit (TLS), encrypted storage, access controls that limit which staff can access customer data, and monitoring for abuse and unauthorized access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your information with commercially reasonable safeguards and we review them as the Service evolves.

13. International transfers

Our services are hosted on servers located in the United States. If you use the Service from outside the United States, your personal information is transferred to and processed in the United States. Where the GDPR applies, we rely on appropriate safeguards for these transfers, and you can contact us for more information about them.

14. Your rights under the GDPR

If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation and UK data protection law give you rights regarding your personal data. We process personal data on the legal bases described in Section 3. Your rights include:

• the right to access the personal data we hold about you;
• the right to rectification of inaccurate data;
• the right to erasure;
• the right to restrict or object to processing;
• the right to data portability;
• where processing is based on consent, the right to withdraw that consent at any time.

To exercise any of these rights, contact us at [email protected]. We respond within the timeframes required by applicable law. You also have the right to lodge a complaint with your local supervisory authority.

Note that for your contacts' information we act as a processor on your behalf. If one of your recipients contacts us directly with a privacy request, we will refer them to you as the controller of that data and assist you in responding as needed.

15. Your rights under California law

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you rights regarding your personal information. In the last 12 months we have collected the categories of information described in Section 2: identifiers (such as name and email address), commercial information (such as your plan and payment history), internet activity (such as usage and log data), and professional information you choose to provide. We collect it for the purposes in Section 3 and share it only as described in Section 10.

We do not sell personal information and we do not share it for cross-context behavioral advertising. You have the right to know what personal information we have collected about you, to request its deletion, to correct inaccurate information, and to not be discriminated against for exercising these rights. To make a request, contact us at [email protected].

16. Children's privacy

The Service is not directed to children. You must be at least 18 years old to create an account, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

17. HIPAA disclaimer

Mailsoftly is not designed for and does not claim compliance with the Health Insurance Portability and Accountability Act (HIPAA). You are solely responsible for assessing the compliance requirements of any data you choose to store or process using the Service and for ensuring that your use of Mailsoftly adheres to such legal requirements. Any data, including protected health information, uploaded to our servers is done so at your own risk, and Mailsoftly will not be held liable for any damages, liabilities, losses, or other consequences that may result from the misuse of the Service in relation to HIPAA compliance.

18. Changes to this policy

We may update this policy from time to time. When we do, we will post the updated version on this page and revise the effective date above. If a change materially affects how we handle your personal information, we will notify you by email or through the Service before it takes effect.

19. Contact us

If you have questions about this policy or about how we handle your information, contact us at [email protected].

Albert Solino Corp., doing business as Mailsoftly