Privacy Policy

This privacy policy describes how pitit - Email Marketing ("we", "us" or "our") collects, uses, and protects your personal data when you use our email marketing service.

1. Introduction

pitit - Email Marketing is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

pitit - Email Marketing is responsible for the processing of your personal data as described in this privacy policy.

2. What Data We Collect

2.1 Account Data

When you create an account, we collect:

• Name
• Email address
• Company name (if applicable)
• Password (stored encrypted)

2.2 Usage Data

During your use of our service, we collect:

• IP addresses
• Browser and device information
• Login times and activities
• Sent campaigns and statistics
• API usage and performance metrics

2.3 Analytical Data (Google Analytics)

We use Google Analytics, a web analytics service provided by Google LLC ("Google"). Google Analytics uses cookies to help us analyze how visitors use our website. The information generated by the cookie about your use of the website is generally transmitted to and stored on a Google server in the United States.

We collect via Google Analytics, among other things:

• Number of visitors and page views
• Devices and browsers used
• Geographic location (at city level)
• Referring websites
• Duration of visit and pages visited

You can prevent Google Analytics from collecting data by installing the Google Analytics opt-out browser add-on.

2.4 Mailing Lists

You upload email addresses and data of your subscribers yourself. You are the data controller for this data, and we act as a data processor.

3. How We Use Your Data

We use your data for:

4. Legal Basis

We process your data based on:

• Performance of Contract: For delivering the service you have signed up for
• Legitimate Interest: For security, fraud prevention, and improvement of our service
• Legal Obligation: For tax and administrative obligations
• Consent: For marketing communications (if you choose to opt-in)

5. Data Sharing

We share your data with:

• Amazon Web Services: For sending emails via Amazon SES
• Google LLC: For website analytics via Google Analytics (anonymized usage data)
• Payment Providers: For processing payments
• Hosting Providers: For hosting our application

We never sell your data to third parties.

All third-party service providers are required to maintain appropriate security measures and are bound by data processing agreements where applicable.

6. Data Security

We take appropriate technical and organizational measures to protect your data:

• Encrypted connections (HTTPS/TLS)
• AES-256 encryption for passwords and sensitive data
• Per-tenant data isolation
• Regular security updates
• Limited access to data
• Audit logging of important actions

7. Data Retention

After the retention period, data will be securely deleted or anonymized.

8. Your Rights

Under GDPR, you have the following rights:

To exercise your rights, please contact us using the contact details below. We will respond to your request within 30 days.

9. Cookies

We use cookies for the functioning of our service. See our Cookie Policy for more information.

10. Changes to This Policy

We may modify this privacy policy from time to time. Significant changes will be announced via email or a notification in the application.

The "Last updated" date at the top of this page indicates when this policy was last revised.

11. Contact

For questions about this privacy policy or to exercise your rights, please contact us:

If you have concerns about how we handle your personal data, you also have the right to file a complaint with your local data protection authority.