Privacy Policy

This Privacy Policy explains how PersonaSend ("PersonaSend," "we," "us," or "our"), collects, uses, shares and protects personal information when you use PersonaSend.com and related services (the "Service").

1. Information we collect

Information you give us

Depending on how you use PersonaSend, you may give us:

• your name, email address and password (passwords are stored only as a secure hash);
• your company name and the mailing address you add to your emails;
• the email accounts you connect for sending, and for accounts connected with mail server settings, the server details and password;
• contacts you import or type in, such as email addresses, names, companies, job titles, websites and notes;
• your campaign instructions, offers, templates, prompts and edits to email drafts;
• messages you send to our support team; and
• other content you choose to submit.

Payment information

Payments are processed by third-party payment processors. Crypto payments are handled by NOWPayments.

PersonaSend receives information about your transaction, such as the plan, amount, currency or coin, payment status, transaction and invoice identifiers, and the amount actually received. We do not receive or store your card details or your crypto wallet's private keys.

Information collected automatically

When you use PersonaSend, we automatically collect information such as your IP address, browser and device type, login times and security events (for example sign-ins, password resets and failed attempts), the features you use, how many emails and AI drafts you use, and diagnostic information when something goes wrong.

2. Information about your recipients

PersonaSend users give us information about people they intend to contact, such as a recipient's email address, name, job, company and notes used to personalize an email.

The PersonaSend user who submits this information is responsible for making sure they are allowed to collect, provide and use it. For this information, the user decides what is collected and why, and we process it on their behalf to provide the Service.

To provide the Service, PersonaSend may also:

• check email addresses, by looking at the public mail settings (DNS records) of the address's domain;
• read a company's public website (its homepage and About page) when the user turns on website research, to give the AI writer a short note about the business. This is public information about a business; the note is saved with that campaign, and we read the same website again at most once every 30 days;
• record opens and clicks: emails may contain a small tracking image and tracked links. When a recipient opens an email or clicks a link, we record the time, the link, their IP address and their browser type, and show the user that the email was opened or clicked;
• detect replies and bounces for inboxes connected with mail server settings, by checking that inbox for recent replies and bounce messages linked to emails sent through PersonaSend. This is read-only: nothing is marked as read, moved or deleted. We do not do this for Gmail inboxes; and
• keep an unsubscribe list, so people who unsubscribed or whose address bounced are not emailed again by that user.

If you received an email sent with PersonaSend, it was sent by one of our users from their own inbox. You can stop their emails with the unsubscribe link at the bottom of the email. For questions about how they got your details, please contact the sender. You can also contact us, and we will help where we can.

3. Google user data

PersonaSend offers two separate ways to use a Google account. Each asks Google only for what that feature needs.

Sign in with Google

If you choose "Continue with Google" to sign up or log in, Google shares your name, email address and basic profile information with us (the "openid", "email" and "profile" permissions). We use your email address to create and identify your account, and your name for your account and as the suggested sender name of your first inbox. We do not store your Google password, and we do not keep an access token for this sign-in.

Connecting a Gmail inbox for sending

If you connect a Gmail or Google Workspace inbox as a sender, we ask for permission to send email on your behalf (the "gmail.send" permission) and to see that inbox's email address. We use this permission only to send the emails that you create and approve in PersonaSend, from your inbox, at the times you schedule, and to keep follow-up emails in the same conversation thread.

With this permission PersonaSend cannot read, search, change or delete the email in your Gmail account, and we do not access your contacts, calendar or files.

We store the inbox's email address and the access and refresh tokens Google gives us, encrypted. For each email we send we keep the details of that email as it was created in PersonaSend (recipient, subject, text and send time) and the message ID Google returns, so you can see your campaign history.

How we protect, share and delete Google user data

• We use Google user data only to provide and improve the features described above, which you can see in the app.
• We do not sell Google user data, use it for advertising, or use it to train or improve AI or machine learning models, our own or anyone else's.
• We do not share Google user data with anyone, except where necessary to provide the Service (for example our hosting provider stores our encrypted database), to comply with the law, or as part of a merger or sale of the business with the same protections in place.
• No person at PersonaSend reads your Google user data unless you ask us to (for example for support), it is needed for security or to investigate abuse, or the law requires it.
• You can disconnect a Gmail inbox in PersonaSend at any time; its tokens are deleted. Deleting your PersonaSend account also deletes the tokens and asks Google to revoke our access. You can also remove PersonaSend's access at any time in your Google Account at myaccount.google.com/permissions.

PersonaSend's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use information

We use personal information to:

• create and run your account, and confirm your email address;
• write personalized email drafts with AI;
• send your emails from the inboxes you connect, follow up, and stop sending where needed;
• show you opens, clicks, replies, bounces and other campaign results;
• process payments and manage your plan, its limits and its end date;
• send you account emails, such as sign-up codes, password resets, receipts, plan reminders and alerts about your inboxes or campaigns;
• give you support;
• prevent fraud, spam, abuse and security threats, and enforce our Terms and Spam Policy;
• fix problems and maintain and improve the Service;
• comply with legal obligations, and establish, exercise or defend legal claims.

Where the law requires a legal basis for processing, our basis depends on the situation and may be performance of our contract with you, our legitimate interests (such as keeping the Service secure and preventing abuse), compliance with legal obligations, or your consent.

5. AI service providers

PersonaSend uses OpenAI to write email drafts and website research notes. To write a draft, we send OpenAI the information needed for that email: your instructions and offer, your name and company, and the recipient details and notes you provided.

We do not use your content, your recipients' information or Google user data to train AI models. Under OpenAI's API terms, information sent through its API is not used to train OpenAI's models by default, and may be kept by OpenAI for a limited time (up to 30 days) to detect abuse before it is deleted.

6. Who we share information with

We share personal information only with service providers that help us run PersonaSend, and only what they need for their job:

• Contabo: hosts our servers and database;
• OpenAI: writes email drafts and research notes (see section 5);
• Google: Sign in with Google, and sending through Gmail inboxes you connect;
• The email providers of inboxes you connect (for example Outlook or Zoho): to send your emails through them;
• Resend: delivers our account emails, such as sign-up codes, password resets and receipts;
• NOWPayments: processes crypto payments;
• Zoho: hosts our support mailbox, which receives your messages to us.

We may also share information with professional advisers; with authorities when the law requires it; with parties involved in a merger, acquisition, financing, restructuring or sale of assets; and when reasonably necessary to protect PersonaSend, our users, recipients or others, investigate abuse, enforce our agreements, or establish or defend legal claims.

If we add or change a service provider that handles personal information, we will update this list.

7. Payment disputes and fraud prevention

If a transaction is disputed or suspected to be fraudulent, we may share relevant information with payment processors, banks, card networks, fraud prevention providers and other parties involved in investigating or resolving it.

This may include account information, transaction records, login and usage information, IP or device information, records of accepting our policies, support messages, and evidence showing whether the purchased service was used.

8. No selling, no ads

PersonaSend does not sell personal information, and does not share it for targeted advertising. We do not use advertising pixels or third-party analytics trackers on our site or in the app.

9. How long we keep information

• Your account, contacts, campaigns and their results: while your account is open. You can delete contacts, lists and campaigns at any time, and deleting your account deletes them.
• Connected inbox passwords and Google tokens: until you disconnect the inbox or delete your account.
• Unsubscribes and bounces: while your account is open. When an account is deleted we keep only a one-way fingerprint of those addresses, which cannot be turned back into an email address, so an opt-out is still respected if the same person signs up again and re-imports them.
• Payment records: kept after account deletion for as long as needed for accounting, tax and dispute handling.
• Public company website summaries (from website research): shared between users because they describe public businesses, not people, and refreshed after 30 days.
• Backups: our daily database backups are kept for 14 days, so deleted information disappears from backups within that time.

When information is no longer needed, we delete or anonymize it, subject to legal requirements.

10. Deleting your account

You can delete your account yourself in Settings. This permanently deletes your account, contacts, lists, campaigns, sending history, connected inboxes and their saved passwords and Google tokens, templates, and login records, and asks Google to revoke our access.

We keep only what is described in section 9 (payment records and unsubscribe fingerprints), and information we must keep for security, fraud prevention, legal compliance or legal claims.

11. Security

We use reasonable technical and organizational safeguards to protect information, including:

• passwords stored only as a secure hash (Argon2), never in plain text;
• connected inbox passwords and Google tokens encrypted before they are stored;
• HTTPS for all connections to PersonaSend;
• a database that is not reachable from the internet, and access limited to the people who run the Service;
• limits on login and code attempts, and security logs.

No online service, transmission method or storage system can be guaranteed to be completely secure. Please keep your login details safe and tell us promptly if you believe your account has been compromised.

12. International data transfers

PersonaSend and its service providers may process information in countries other than the one you live in, including the United States (for example OpenAI and Google) and the European Union.

Where the law requires safeguards for international transfers of personal information, we rely on legally recognized mechanisms, such as the standard contractual clauses offered by our providers.

13. Your privacy rights

Depending on where you live and which privacy laws apply, you may have the right to:

• access the personal information we hold about you;
• correct it;
• delete it;
• receive a copy of it (you can export your contacts as a CSV file in the app at any time);
• object to or restrict certain processing;
• opt out of certain sales, sharing or targeted advertising (we do none of these);
• withdraw consent where we rely on it; and
• appeal our decision about a privacy request, or complain to your local data protection authority.

These rights are subject to legal exceptions and conditions. We will not discriminate against you for using them.

14. Privacy requests

Send privacy requests to help@personasend.com, or use our contact form and choose "Privacy request". We reply within 30 days.

We may need to confirm your identity before we act on a request, and we may decline or limit a request where the law allows. Authorized agents may make requests where the law allows, after verification.

If you are a recipient of a PersonaSend user's emails, we may pass your request to that user, because they decide how your information is used.

15. Cookies and similar technologies

PersonaSend uses only what is needed to run the Service:

• your login is kept in your browser's local storage, so you stay signed in;
• short-lived security cookies protect the Google sign-in and inbox connection steps, and expire within minutes;
• a few settings, such as remembered choices in the app, are kept in your browser.

We do not use advertising or analytics cookies, so we do not show a cookie banner. Our pages load fonts from Google Fonts, which means your browser connects to Google's servers to download them.

16. Children's privacy

PersonaSend is not intended for children under 18. We do not knowingly offer accounts to children under 18. If you believe a child has given us personal information, contact help@personasend.com and we will delete it.

17. Third-party websites

PersonaSend may link to websites or services run by others, such as NOWPayments' payment page or Google's sign-in page. Their own privacy policies apply to them, and PersonaSend is not responsible for their practices.

18. Changes to this Privacy Policy

We may update this Privacy Policy as our Service, technology, providers or legal obligations change. We will change the "Last updated" date when we do, and give more notice, such as an email, when changes are significant or the law requires it.

19. Contact us