Legal

Privacy Policy

Last updated: 9 September 2026

This policy explains what data Email.biz.pk collects, why we collect it, how it is stored, and what control you have over it. It covers two distinct groups of people: our customers, who hold an account with us, and your recipients, whose contact details you upload in order to send campaigns.

1. Who we are

Email.biz.pk provides bulk email marketing software. We act as a data controller for the account information of our own customers, and as a data processor for the recipient data our customers upload and send to. For that recipient data, our customer is the controller and is responsible for having a lawful basis to contact those people.

2. Data we collect from customers

  • Account details. Name, email address, company name, and a hashed password. We never store passwords in a recoverable form.
  • Billing details. Subscription plan, billing history and currency. Card details are handled entirely by Stripe and never touch our servers.
  • Sending credentials. The SMTP host, port, username and password for each sending account you connect.
  • Technical logs. IP address, browser user agent and timestamps for authentication events, retained for security and abuse investigation.

3. How sending credentials are protected

SMTP credentials are the most sensitive data we hold, and they are treated accordingly:

  • Credentials are encrypted at rest with AES-256 in a dedicated vault, separate from your account record.
  • They are decrypted only in memory, at the moment a message is being relayed, and are never written to logs.
  • All SMTP connections enforce STARTTLS on port 587, so credentials are never transmitted in the clear.
  • They are never displayed back to you in full after they are saved, and are permanently deleted when you remove a sending account.

4. Recipient data you upload

When you upload a contact list, we store the email addresses and any merge fields you include, for as long as the list exists in your account. We process this data solely to deliver the campaigns you configure. We do not sell it, share it with third parties, use it to build any profile, or use it to market to your recipients ourselves.

Deleting a list removes the underlying records. Closing your account removes all lists associated with it.

5. Suppression lists and unsubscribes

Every campaign we send includes an RFC 8058 one-click unsubscribe header, as required of bulk senders by Gmail and Yahoo. When a recipient unsubscribes, or when an address hard-bounces, that address is added to a suppression list and excluded from all future campaigns on your account.

Suppression entries are stored as SHA-256 hashes rather than plain addresses. This means we can reliably check whether an address has opted out without retaining a readable copy of the address of somebody who has already asked not to be contacted.

6. Tracking data

Where you enable open and click tracking, campaigns include a 1×1 tracking pixel and wrapped redirect links. When a recipient opens a message or clicks a link, we record the event timestamp, the user agent, and an approximate geographic location derived from the IP address.

We do not retain the full IP address alongside these events beyond what is needed to resolve location, and we do not use this data for any purpose other than reporting results back to you, the sender. Tracking can be disabled per campaign.

7. Third-party processors

We use a small number of sub-processors, each for a specific purpose:

  • Stripe — payment processing and subscription management. Stripe receives your billing details directly.
  • Your chosen email providers — Google Workspace, Microsoft 365 or your own SMTP host. Messages are relayed through infrastructure you control and connect yourself.
  • Our hosting and CDN providers — for serving the application and running the sending queues.

8. Data retention

  • Account and billing records: for the life of the account, plus any period required by tax law.
  • Contact lists and campaign content: until you delete them, or until the account is closed.
  • Campaign analytics: retained so historical reporting stays available; removed with the account.
  • Suppression hashes: retained indefinitely, because deleting them would risk re-contacting someone who has opted out.
  • Authentication logs: a rolling window sufficient for security investigation.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict its processing, and to lodge a complaint with a supervisory authority. You can exercise most of these directly in your dashboard settings; for anything else, contact us and we will respond within 30 days.

If you are a recipient of a campaign sent through our platform and you want your data removed, the fastest route is the unsubscribe link in the message, which suppresses you immediately. You may also contact us and we will pass the request to the sender responsible.

10. Security

Data is encrypted in transit with TLS and at rest. Sessions use short-lived tokens with server-side revocation, so signing out or a password reset invalidates existing sessions immediately. Access to production systems is limited to staff who need it.

No system is perfectly secure. If a breach affects your data, we will notify you and the relevant authority without undue delay.

11. Acceptable use

This platform is for permission-based email marketing. Sending to purchased, scraped or harvested lists is prohibited under our Terms of Service and is grounds for immediate account termination. We may investigate accounts that generate abnormal complaint or bounce rates.

12. Changes to this policy

We will update this page when our practices change, and revise the date at the top. Material changes will be communicated to account holders by email.

13. Contact

Questions about this policy, or about data we hold, can be sent through our contact page.