Privacy Policy
Last updated: October 12, 2026
1. Introduction
DomainMailer ("we", "us", or "our") is a SaaS platform for domain sellers to send safe, tracked email outreach campaigns through their own Gmail accounts. This policy describes how we collect, handle, and protect your data.
2. Information We Collect
- Account Credentials: Email and hashed password for authentication.
- OAuth Tokens: Google OAuth 2.0 access & refresh tokens when connecting Gmail.
- Campaign Data: Outbound email templates, recipient lists, schedules, and delivery logs.
3. Google API Services User Data Policy Compliance
DomainMailer's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We request the
gmail.sendscope solely to dispatch user-initiated outreach emails. - We do not read, scan, index, or store incoming inbox messages.
- We do not transfer or sell Google user data to third parties, advertising platforms, or AI/ML model training sets.
4. How We Use and Protect Data
Tokens are encrypted at rest in PostgreSQL with strict tenant isolation. Passwords are hashed via bcrypt. Network communication uses HTTPS/TLS. Sending queues apply rate limiting to safeguard sender reputation.
5. Managing & Revoking Access
You can disconnect your account at any time or revoke DomainMailer's access directly via your Google Account Security Settings. Upon account deletion, all stored tokens and personal data are permanently deleted.
6. Contact Us
If you have questions about this policy, reach us at mohammedamineelkess@gmail.com.