Legal

Privacy Policy

Last updated: 26 September 2026 · Applies to the TrueMails website, web app, desktop app, and related services.

1. Who we are

TrueMails (“we”, “us”) provides software for permission-based bulk email campaigns, including a web portal, desktop client, API, and background delivery worker. Contact: Contact form.

2. Information we collect

Account data — name, email, password hash, role, and subscription status.
Billing data — plan selection, invoices, and payment references processed via Cashfree (we do not store full card numbers).
Campaign data — contacts, lists, templates, SMTP settings, campaign content, and delivery logs you upload or create.
Device & usage data — device registrations for license limits, email usage counters, and basic product analytics (e.g. feature usage).
Technical data — IP address, browser type, cookies needed for authentication and security, and server logs.

3. How we use information

Provide and improve the service (campaigns, imports, billing, support).
Enforce plan limits (emails, contacts, devices) and prevent abuse.
Process payments, invoices, and subscription renewals.
Send service notices (security, billing, product changes). Marketing emails only with consent where required.
Comply with law and protect our rights, users, and infrastructure.

4. Your campaign contacts

You are the controller of contact lists you import. You must have a lawful basis (e.g. consent or legitimate interest under applicable law) to message those addresses. We process contact data only to provide the features you use (storage, sending, suppression, analytics).

5. Sharing

We share data with:

Payment providers (e.g. Cashfree) to complete checkout.
Infrastructure providers (hosting, email transport you configure via your own SMTP).
Authorities when legally required.

We do not sell your personal data.

6. International transfers

Data may be stored or processed in regions where our infrastructure or payment partners operate. We take reasonable steps to protect data in line with this policy.

7. Retention

We retain account and billing records for the life of the account and as required for tax and legal purposes. You may request deletion of account data subject to legal retention obligations. Campaign data is retained until you delete it or close the account.

8. Security

We use industry-standard measures including hashed passwords, encrypted transport (HTTPS), access controls for App Admin, and subscription/device checks. No method of transmission is 100% secure.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, or object to certain processing. Contact us via the site contact form. You may also lodge a complaint with a supervisory authority where applicable.

10. Cookies

We use essential cookies for login sessions and security. Analytics cookies, if enabled, can be controlled via your browser settings.

11. Children

The service is not directed to children under 16. We do not knowingly collect their personal data.

12. Changes

We may update this policy. Material changes will be indicated by updating the date above or notifying account holders when required.