Privacy Policy

What We Do

OnboMail helps businesses send onboarding emails to their users. We are a data processor - we process email addresses on behalf of our customers who are the data controllers.

Data We Collect

• Email addresses from our customers' Supabase projects
• Customer account information (name, email, company)
• Usage analytics and performance metrics
• Payment information (processed securely by Stripe)

How We Use Data

• Send onboarding emails on behalf of our customers
• Manage customer accounts and billing
• Improve our service and user experience
• Provide customer support

Data Security

• All data encrypted in transit and at rest
• Access controls and secure authentication
• Regular security updates and monitoring
• SOC 2 compliant infrastructure via Supabase

Your Rights

If you received emails through our platform, contact the business that sent them. They control your data as the data controller.

For OnboMail account holders, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data
• Object to processing

Data Retention

We retain customer data for as long as your account is active. Subscriber email data is retained according to your preferences and applicable legal requirements.

Third-Party Services

We use the following trusted third-party services:

• Supabase: Database and authentication
• Stripe: Payment processing
• Resend: Email delivery
• Vercel: Hosting and deployment

International Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place for international data transfers.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through our service.