Privacy Policy

Last updated: May 15, 2026 · Effective immediately

VisibleMail ("we", "us", "our") operates the email outreach platform available at mail.chaudharygrowth.com (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use the Service.

1. Information We Collect

• Account information: username, email address, and hashed password when you register.
• Google OAuth data: if you connect a Gmail account, we receive your Gmail address and OAuth access/refresh tokens. We do not access, read, or store your email content beyond what is necessary to send campaigns you create.
• Campaign data: email subject lines, body content, and recipient lists you upload.
• Usage data: open and click tracking events associated with emails you send, including recipient IP addresses and user-agent strings collected by tracking pixels.
• Log data: standard server logs including IP address and browser type.

2. How We Use Your Information

• To authenticate you and operate your account.
• To send email campaigns on your behalf using the connected email accounts you authorise.
• To display open, click, and reply analytics in your dashboard.
• To enforce plan limits and prevent abuse.
• We do not sell, rent, or share your data with third parties for marketing purposes.

3. Google API Scopes

When you connect a Gmail account via Google OAuth, we request the following scopes:

• https://mail.google.com/ — required to send emails via Gmail SMTP on your behalf.
• email and profile — to identify which Gmail address you connected.

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Retention

Your account data, campaigns, and contact lists are stored for as long as your account is active. You may delete campaigns and contacts at any time from your dashboard. Account deletion can be requested by contacting us at the address below.

5. Data Security

All data is stored on servers located in Germany (Hetzner Cloud). Passwords are hashed with bcrypt. OAuth tokens are encrypted at rest. All traffic is encrypted via TLS/HTTPS.

6. Cookies

We use a single session cookie (vm_token) to keep you logged in. No third-party tracking or advertising cookies are used.

7. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights or to disconnect a Google account, please contact us or use the account management options in your dashboard.

8. Third-Party Services

• Google OAuth 2.0 — for Gmail account connection.
• Cloudflare — for DNS and DDoS protection.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy from time to time. Continued use of the Service after changes constitutes acceptance of the revised policy.