Privacy Policy
1. Who we are
We operate this email sending platform. For your own account information we act as the data controller. For the contact lists you upload, you are the controller and we are only the processor: they are your data, collected by you, and we process them solely to send the emails you instruct.
2. What we collect
- Account details — name, company, email address, phone, and a hashed password. We never store your password in readable form.
- Sending credentials — the mailbox address and password you enter, or, if you connect a Google account, a token issued by Google. Stored so the platform can send on your instruction.
- Contact data you upload — names, company names, and email addresses in your CSV files, plus the delivery status of each message.
- Usage and technical data — sign-in sessions, actions in the app, and error logs.
- Payment data — handled entirely by PayPal or Razorpay. We never see or store your card details; we keep only your subscription reference and plan status.
3. Google account data and Limited Use
If you choose to connect a Google account for sending, we request a single permission,
gmail.send, described by Google as “send email on your behalf”.
We use it for one purpose only: to deliver the campaigns you create, from your address,
when you instruct us to send them.
We do not request, receive, or have the technical ability to read, search, download, delete or modify your email. We never see your Google password: Google holds it, and we store only a revocable token, which you can withdraw at any time in Settings or from your Google Account permissions.
DigiLucks's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer this data to others except as necessary to provide the service, we do not use it for advertising, and we do not allow humans to read it. In particular, we do not use, transfer, or sell any data received from Google APIs (including raw, aggregated, or anonymised data) to develop, improve, or train any generalised or foundational artificial-intelligence or machine-learning models.
4. Permission-based sending, anti-spam, and opt-outs
DigiLucks is strictly permission-based. Users may only email recipients who have opted in to hear from them. The platform does not send spam or unsolicited commercial email. Before each campaign is sent, the sender must confirm they have permission to email the recipients on their list.
To respect recipient opt-outs, every email we send includes a one-click unsubscribe
link and standard List-Unsubscribe / List-Unsubscribe-Post
headers, plus the sender's physical postal address. When a recipient unsubscribes,
their address is added to a permanent suppression list and is automatically excluded from
all of that sender's future campaigns. Recipients who report a bad or invalid address are
likewise suppressed.
DigiLucks does not provide, sell, or source any leads or contact lists, and we have no leads database. Every contact is imported by the user from their own lists of people who consented to receive the user's emails. The user is solely responsible for obtaining that consent; we act only as the processor of the lists they provide.
5. AI writing assistant
DigiLucks offers an optional AI writing assistant that can draft subject lines, email bodies, and email signatures. It is powered by Anthropic's Claude API, accessed directly by us (no aggregator, gateway, or model hub).
The assistant only receives text you type into the app yourself — for example a
short description of your offer, your target audience, the tone you want, and your own
name and company. It never receives any data obtained from Google APIs or from your
Gmail account. Because our only Google scope is gmail.send (send-only),
we have no access to your mailbox content, so no such content can ever be sent to any AI
service. Anthropic does not use data submitted through its commercial API to train its
models, and no Google user data is ever used to train, improve, or develop any AI/ML
model.
6. How we use it
To run your account, send the campaigns you create, show your reports, take payment, provide support, and keep the platform secure. We do not sell your data, and we do not use the contacts you upload for our own marketing or share them with other customers.
7. Who else touches your data
- Your email provider (for example Google or Microsoft) — the emails you send pass through your own mailbox under their terms.
- Anthropic — only when you use the optional AI writing assistant, and only the text you type into it (never any Google or mailbox data). Anthropic does not train its models on API data.
- PayPal and Razorpay — subscription payments (we never receive your card details).
- DigitalOcean — hosting.
8. Security
Access is over HTTPS, passwords are hashed with bcrypt, and sessions are restricted cookies. Credentials and data sit on an access-controlled server. No system is perfectly secure, so please use a strong, unique password.
9. Retention and deletion
Account and campaign data is kept while your account is open. You can delete contacts and campaigns yourself at any time, which removes them from our database. Ask us to close your account and we will delete your data, other than records we must keep for accounting or legal reasons.
10. Your rights
Depending on where you live you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Write to us and we will act on it. If a recipient on one of your lists contacts us about their data, we will point them to you, since you are the controller of that list.
11. Cookies
We set a single essential cookie to keep you signed in. There is no advertising or third-party tracking on the platform.
12. Contact
Privacy questions or requests: hello@digilucks.com