Effective date: March 2026
OnyxSend respects your privacy. This policy explains what data we collect, how we use it, and your rights.
1. Data We Collect
We collect the following categories of information:
- Account data: Name, email address, password (hashed), and company information you provide during signup or onboarding.
- Campaign data: Ideal customer profile definitions, value propositions, and targeting criteria you configure.
- Prospect data: Names, email addresses, company information, roles, and publicly available professional data collected during prospect research.
- Campaign metrics: Email open rates, reply rates, meeting counts, and engagement data generated by your campaigns.
- Billing data: Payment method and billing history processed by Stripe. We do not store full credit card numbers on our servers.
- Usage data: Login timestamps, feature usage, and platform interaction data.
2. How We Use Your Data
- To operate your outreach campaigns (prospect discovery, email personalization, sending, reply handling, meeting booking)
- To improve platform performance, deliverability, and features
- To communicate about your account, billing, and service updates
- To enforce our terms of service and prevent abuse
3. Third-Party Services
- Stripe: Payment processing and subscription management. Stripe's privacy policy governs billing data they process.
- MailEngine: Email sending infrastructure for outreach delivery.
We do not sell your data to third parties. We do not share your campaign data or prospect lists with other customers.
4. Data Ownership
You own your prospect data and campaign data. You may export your data at any time by contacting support. Upon account termination, data is retained for 30 days and then permanently deleted unless you request an export.
5. Data Retention
Account data is retained for as long as your account is active. Campaign and prospect data is retained for the duration of your subscription plus 30 days after cancellation. Billing records are retained as required by law.
6. Data Security
We use industry-standard encryption for data in transit (TLS) and at rest. Access to production systems is restricted to authorized personnel. Passwords are stored using bcrypt hashing.
7. Your Rights (GDPR)
If you are in the European Economic Area, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing of your data
- Request data portability
To exercise these rights, contact us at the address below.
8. Cookies
We use session cookies to maintain your login state. We do not use third-party tracking cookies or advertising cookies.
9. Changes
We may update this policy. Material changes will be communicated via email.
10. Contact
Privacy questions: info@onyxsend.com