Lumail Privacy Policy

Last updated: 2025-05-11

Overview

This Privacy Policy describes how Codelynx, LLC ("we", "us", or "our") collects, uses, and shares personal information when you use our application Lumail ("the Service") available at lumail.io.

By using the Service, you consent to the data practices described in this policy.

1. Information We Collect

We collect the following categories of information:

a. Account Information

• Name, email address, organization name
• Payment data via Stripe (not stored directly on our servers)

b. Subscriber Information (provided by you)

• Email addresses, names, custom fields
• Tags and campaign data
• Interaction events: opens, clicks, unsubscribes, bounces

c. Technical Data

• IP address, browser user agent, device metadata
• Event timestamps
• DNS verification data for domains

2. How We Use Information

We use the information we collect to:

• Send transactional and marketing emails on your behalf
• Provide analytics (open/click rates, bounces, etc.)
• Maintain compliance (unsubscribe handling, suppression lists)
• Improve and monitor system performance
• Detect abuse or spam behavior

3. Data Hosting and Security

All data is hosted in the United States using:

• Vercel (frontend)
• Neon.tech (database)
• Upstash (event queues)
• Amazon SES (email delivery)

We use TLS encryption, access control policies, and role-restricted environments to protect your data.

4. Data Sharing

We share data only with the following categories of services:

• Amazon SES for sending and bounce/complaint tracking
• Stripe for billing and payment
• Sentry/PostHog for error logging and user analytics

We do not sell, rent, or trade your data with third parties.

5. Subscriber Privacy

You are responsible for collecting proper consent from your subscribers. We only process the data you provide us and enforce:

• Permanent suppression of bounced or spam-complained contacts
• Unsubscribe links in every email

6. Cookies and Tracking

We use basic cookies for session handling and anonymous analytics. We do not use third-party ad networks or behavioral profiling cookies.

7. Your Rights

Depending on your jurisdiction, you may request:

• Access to your data
• Correction of inaccurate data
• Deletion of your account
• Export of your data

Email help@codelynx.dev for any requests. We respond within 30 days.

8. Data Retention

We retain:

• Account and billing data for as long as your account is active
• Campaign and event logs for up to 12 months unless otherwise required
• Suppression list entries indefinitely to prevent resending to unsubscribed contacts

9. Children's Privacy

This service is not intended for children under 13. We do not knowingly collect or process data from minors.

10. Changes to This Policy

We may update this policy at any time. Continued use of the Service implies acceptance of the updated terms.

11. Contact

For privacy-related questions or complaints, contact: Codelynx, LLC help@codelynx.dev State of Delaware, United States