Privacy Policy
Last updated: 24 October 2026
This policy explains what personal data nusletter.dev ("we", "us") collects, why we collect it and what rights you have. It covers two groups of people: our customers, who use our API to send email, and the recipients of email sent by our customers.
1. Our customers
When you create an account we collect your name, email address, billing details and the domains you add. We also log API requests, sending activity and IP addresses to run the service, prevent abuse and keep accounts secure.
2. Email recipients
When a customer sends email through us, we process the recipient's email address, the message content and delivery events (delivered, bounced, complained, opened, clicked, unsubscribed). We act as a data processor for our customers. Each customer is responsible for having permission to email their recipients.
We keep a suppression list of addresses that have bounced, complained or unsubscribed so they are never emailed again by the customer who received that event. If you received an email sent through nusletter.dev and want to stop all email from that sender, use the unsubscribe link in the email. You can also contact us at privacy@nusletter.dev.
3. How we use data
- To deliver email and report delivery results back to the sender
- To process unsubscribes, bounces and complaints
- To detect and stop spam, fraud and abuse
- To bill customers and provide support
- To meet legal obligations
We do not sell personal data. We do not use recipient data for our own marketing.
4. Service providers
We use trusted infrastructure providers to run the service, including Amazon Web Services for email delivery, Cloudflare for hosting and security, and a payment processor for billing. They only process data on our instructions.
5. Retention
Message content is kept for up to 30 days for troubleshooting, then deleted. Delivery logs are kept for up to 90 days. Suppression list entries are kept for as long as needed to honour them. Account data is kept while your account is open and deleted within 90 days of closure, unless we must keep it for legal reasons.
6. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, and to object to or restrict how we use it. Email privacy@nusletter.dev and we will reply within 30 days. You can also complain to your local data protection authority.
7. Security
Data is encrypted in transit with TLS. Access to production systems is limited and logged. API keys are stored hashed.
8. Changes
We will post any changes on this page and update the date above. If changes are significant we will email customers.