Privacy Policy for MailFleet Desktop Email Campaign Software

Introduction and data controller

Secuno LLC operates MailFleet and is the data controller for personal data described in this policy, except where we process data solely on behalf of enterprise customers under a separate agreement.

This Privacy Policy should be read with our Terms of Service, Acceptable Use Policy, Anti-Spam Policy, and Security documentation. Those documents explain licensing, permitted conduct, and security architecture.

If you do not agree with this policy, do not use our website or services except where applicable law permits limited use.

• Controller: Secuno LLC
• Address: 30 N Gould Street, Sheridan, Wyoming, USA 82801
• Privacy contact: [email protected]
• General contact: [email protected]

Scope of this policy

This policy covers personal data processed when you browse mailfleet.app, use free diagnostic tools, submit contact or abuse reports, purchase or validate MailFleet licenses, receive support, or interact with our licensing and update services.

It also explains MailFleet desktop application architecture: what stays on your device versus what may be transmitted to Secuno LLC or subprocessors for legitimate operational purposes.

This policy does not govern third-party SMTP providers, API vendors, payment processors, or webhook endpoints you configure. Those parties have their own privacy practices.

Desktop-first data architecture

MailFleet is designed as desktop email campaign control software. Campaign contact lists, message templates, delivery logs, campaign reports, proxy profiles, and SMTP/API credentials are stored locally on devices running MailFleet unless you explicitly export data elsewhere.

Outbound email is sent through providers you configure. MailFleet does not operate a shared SMTP pool and does not upload campaign message bodies or recipient lists to MailFleet servers for routine sending operations.

This architecture gives operators direct control over backups, access, and retention on their workstations or agency environments. It also means you — not MailFleet — are typically the controller for recipient personal data in your campaigns.

• Local by default: lists, templates, logs, provider credentials.
• You choose exports, webhooks, and backup locations.
• Provider traffic flows directly between MailFleet and your SMTP/API endpoints.

Data we collect on the website

When you use mailfleet.app, we may collect personal data you provide and technical data generated by your visit.

Contact form submissions are processed through our contact API (hosted on Vercel infrastructure) and may include name, email address, company, phone, inquiry type, subject, message content, and captcha verification metadata. We may also process IP address and request metadata for rate limiting, abuse prevention, and security monitoring.

If you use free tools on the website, you may enter domains, email addresses, or diagnostic inputs. Treat tool inputs as you would any third-party diagnostic service — do not submit sensitive personal data unnecessarily.

• Identity and contact details from forms and support email.
• Inquiry content and license interest selections.
• Technical logs: IP address, user agent, timestamps, request paths (where logged).
• Anti-abuse signals: rate-limit counters, captcha validation events.

License validation, downloads, and updates

MailFleet desktop software may contact Secuno LLC services over encrypted connections (HTTPS/TLS) to validate license keys, deliver updates, and retrieve version metadata. These requests may include license identifier, application version, operating system type, and network metadata necessary for validation.

License validation does not require uploading campaign content, contact lists, or message bodies. We design validation to confirm entitlement while minimizing data transfer.

Download pages may log standard web server or CDN metrics. Installer files are distributed from infrastructure we or our providers operate.

Payments and billing data

When you purchase a MailFleet license, payment processing is typically handled by third-party payment processors. We receive transaction confirmations, billing contact details, and limited payment metadata needed for fulfillment, support, fraud prevention, and accounting.

We do not store full payment card numbers on MailFleet systems. Card data is entered directly with the processor subject to their privacy policy and PCI obligations.

We may retain invoices, license purchase records, and support correspondence related to billing for the periods described in the retention section.

Cookies and similar technologies

mailfleet.app uses essential cookies and local storage for site functionality, security, and preference persistence (for example, captcha workflows). These are required for core site operation.

We use Google Tag Manager (GTM), Google Analytics 4, Google Ads, and the Meta (Facebook) Pixel to measure site usage and advertising performance. Through GTM, additional marketing tags such as LinkedIn and Microsoft Advertising (Bing UET) may also run. These tags load with the page; the on-site cookie notice acknowledges this and is not a consent gate. Page visit signals may include pages viewed, page URL, referrer, browser and device type, and approximate location derived from IP address.

We use this data to understand site usage and improve MailFleet. We do not sell your personal data.

You can limit or block these technologies using your browser cookie controls, tracking-protection features, platform opt-out tools (including Meta Ad Preferences and the Google Analytics Opt-out Browser Add-on). Blocking essential cookies may affect security features such as captcha.

For more detail on subprocessors and your rights, see the sharing and rights sections below.

How we use personal data

We use personal data for legitimate purposes including: providing and improving MailFleet software and website; validating licenses and delivering updates; responding to sales, support, security, and abuse inquiries; processing payments and refunds; enforcing Acceptable Use and Anti-Spam policies; detecting fraud and abuse; complying with law; and maintaining operational security.

We do not sell your personal data. We do not buy or resell email contact lists. MailFleet business model is software licensing — not data brokerage.

We may aggregate or de-identify usage statistics where individuals cannot reasonably be re-identified, for product planning and reliability monitoring.

• Operate website, APIs, licensing, and support.
• Prevent spam submissions, credential abuse, and policy violations.
• Communicate about orders, security issues, and service changes.
• Improve documentation, tools, and software quality.

Legal bases for processing (EEA/UK)

Where GDPR or UK GDPR applies, we rely on appropriate legal bases including: contract performance (licenses, support, fulfillment); legitimate interests (security, abuse prevention, product improvement, B2B communication, and measuring website and advertising performance via analytics and advertising tags described in the Cookies section) balanced against your rights; consent where required for optional email marketing or similar outreach when separately offered; and legal obligation where applicable.

Site analytics and advertising tags (GTM, GA4, Google Ads, Meta Pixel, and tags loaded through GTM) load with the website. The cookie notice acknowledges this; it is not a consent gate. You may object to certain processing based on legitimate interests, use browser and platform opt-out tools, or request restriction where conditions are met. Contact us using the details below.

How we share personal data

We share personal data with service providers that help us operate MailFleet under contractual safeguards, including hosting (e.g., Vercel for contact API infrastructure), email delivery for contact notifications (e.g., Mailers.io), payment processors, and support tooling when used.

We may disclose information when required by law, court order, or governmental request; to protect rights, safety, and security; to investigate abuse involving MailFleet; or in connection with merger, acquisition, or asset sale with notice where practicable.

We do not share campaign lists or message content from your desktop installation with advertisers. Operators who configure webhooks export event metadata to endpoints they control — that transmission is your responsibility.

Data retention

We retain personal data only as long as needed for the purposes described in this policy, unless a longer period is required by law or legitimate business needs such as dispute resolution.

Contact form and support records are typically retained for a period necessary to respond, follow up, and maintain an audit trail of abuse or security investigations. Billing records are retained per tax and accounting requirements.

Rate-limit and security logs may be kept for shorter operational windows. Local campaign data on your device is retained under your control until you delete it or uninstall MailFleet.

• Support and contact records: limited operational and legal retention.
• License and purchase records: per accounting and entitlement needs.
• Desktop campaign data: controlled by you on your devices.

Security measures

We implement administrative, technical, and organizational measures appropriate to the data we process, including HTTPS for website and API traffic, access controls on operational systems, rate limiting on public endpoints, captcha on contact forms, and structured error handling that avoids leaking sensitive internals.

No method of transmission or storage is completely secure. You are responsible for securing devices running MailFleet, including disk encryption, strong passwords, patching, and backup policies for locally stored campaign data.

Report suspected security issues through mailfleet.app/contact with inquiry type "security."

International data transfers

Secuno LLC is based in the United States. If you access MailFleet from the EEA, UK, or other regions with data transfer rules, your personal data may be processed in the United States and other countries where our providers operate.

Where required, we implement appropriate safeguards for cross-border transfers, such as standard contractual clauses or equivalent mechanisms with subprocessors.

Your privacy rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port personal data we control, and to object to certain processing. You may also withdraw consent where processing is consent-based, without affecting prior lawful processing.

Submit requests to [email protected] with enough information to verify your identity and describe your request. We respond within timeframes required by applicable law.

California residents may have additional rights under the CCPA/CPRA, including knowing categories of data collected and requesting deletion, subject to exceptions. We do not sell personal information as defined by those laws.

You may lodge a complaint with your local supervisory authority if you believe processing violates applicable law.

Operator responsibilities for recipient data

If you use MailFleet to send email campaigns, you likely act as controller (or processor for your clients) for recipients' personal data in your lists. You must provide appropriate privacy notices, obtain lawful bases for processing, honor unsubscribes, and comply with GDPR, CASL, CAN-SPAM, and other applicable laws.

MailFleet provides software tools and policy guidance. We do not audit your lists or consent records unless required for abuse investigation or legal process.

Agencies should define data processing roles with clients in contracts, including who owns lists, suppressions, and data subject requests.

Children's privacy

MailFleet is a business software product not directed to children under 16 (or the age defined by local law). We do not knowingly collect personal data from children. If you believe a child provided personal data to us, contact us and we will take appropriate steps to delete it.

Third-party links and providers

mailfleet.app may link to documentation, provider websites, regulatory resources, or tools operated by third parties. Their privacy practices govern data you provide to them.

When MailFleet connects to your SMTP or API providers, those providers process message metadata and content according to their policies. Configure providers you trust and review their data processing terms.

Changes to this Privacy Policy

We may update this Privacy Policy as our products, providers, or legal obligations evolve. Material changes will be posted on this page with an updated modification date. Where required, we will provide additional notice.

Continued use after updates constitutes acknowledgment of the revised policy where permitted by law.

Summary

MailFleet privacy posture is built around desktop-local campaign data and transparent handling of website, licensing, and support interactions. We collect what we need to operate responsibly — not your recipient lists for resale.

Secure your devices, process recipient data lawfully, and contact us with privacy questions or requests.

Privacy requests: [email protected]. General contact: mailfleet.app/contact. Secuno LLC, 30 N Gould Street, Sheridan, Wyoming, USA 82801.