WarmySender ("we," "us," or "our") operates warmysender.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cold email outreach platform.
By using WarmySender, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
Email address
Name and profile information (via Replit authentication)
Workspace details and team member information
Payment information (processed securely through Stripe)
2.2 Email Account Credentials
To provide our email warmup and sending services, you grant us access to your connected email accounts through:
OAuth connections: Gmail and Outlook accounts (we store access tokens, not passwords)
IMAP/SMTP credentials: Encrypted using AES-256-GCM encryption for custom email providers
2.3 Campaign and Prospect Data
We store:
Email templates and campaign sequences
Prospect lists and contact information
Email content, subject lines, and personalization variables
Campaign performance metrics and analytics
2.4 Email Message Data
For warmup and deliverability tracking purposes, we access and store:
Email headers and metadata
Delivery status and folder placement (Inbox, Spam, Promotions)
Open rates, click rates, and reply data
Warmup conversation history between connected mailboxes
2.5 Usage Information
We automatically collect:
IP addresses and device information
Browser type and operating system
Pages visited and features used
Session duration and interaction patterns
3. How We Use Your Information
We use the collected information to:
Provide core services: Email warmup, campaign management, deliverability tracking
Process payments: Handle subscription purchases through Stripe
Improve deliverability: Monitor inbox placement and adjust warmup strategies
Customer support: Respond to inquiries and troubleshoot issues
Analytics: Understand usage patterns and improve our Service
Legal compliance: Comply with applicable laws and regulations
4. Data Security
We implement industry-standard security measures to protect your data:
Encryption in transit: All data transmitted using HTTPS/TLS
Encryption at rest: Email credentials encrypted with AES-256-GCM
Database security: PostgreSQL with role-based access controls
OAuth security: Secure token storage with automatic refresh
Session management: Secure cookies with 1-week expiration
Infrastructure: Hosted on secure Replit infrastructure
However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
5. Third-Party Services
We use the following third-party services:
5.1 Authentication
Replit Auth: User authentication and identity management via OpenID Connect (OIDC)
Authentication: Session cookies to keep you logged in
Preferences: Remember your settings (theme, workspace selection)
Analytics: Understand how users interact with our Service
Security: Prevent fraud and unauthorized access
You can control cookies through your browser settings, but this may limit functionality.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
11. Children's Privacy
WarmySender is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by email or through a prominent notice on our Service. Continued use after changes constitutes acceptance of the updated policy.
13. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
Right to know what personal information is collected
Right to know whether personal information is sold or disclosed
Right to say no to the sale of personal information
Right to delete personal information
Right to equal service and price
We do not sell personal information. To exercise your CCPA rights, contact us at privacy@warmysender.com
14. GDPR Compliance (EU Users)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation:
Legal basis: We process data based on contract performance, legal obligations, and legitimate interests