MailThur Privacy Policy

MailThur (mailthur.com) is operated by Pdigital Marketstore Ltd (RC 8015428), Lagos, Nigeria. This Privacy Policy explains how we collect, use, and protect your information when you use our cold email outreach platform.

Account information: your email address when you create an account or sign in.

Connected inbox information: when you connect a Gmail or Google Workspace account, we store an OAuth access token and refresh token that allow us to send emails and read email threads on your behalf. We do not store the content of your emails.

Campaign data: campaign names, email sequence content you write, contact lists you import, and sending activity logs.

Usage data: IP addresses, browser type, pages visited, and timestamps for security and analytics purposes.

MailThur requests the following Google OAuth scopes: gmail.send (to send outreach emails from your connected inbox on your behalf) and gmail.readonly (to detect replies to emails we sent by checking Gmail thread activity).

We use these permissions exclusively to operate the cold email sequencing features you explicitly configure. We do not read, scan, analyze, store, or share the content of your emails or your contacts' emails beyond what is strictly necessary to send messages you have written and detect replies in threads we initiated. We do not use Gmail data for advertising, profiling, or any purpose beyond the core sending and reply detection features.

Your Gmail access tokens are encrypted at rest and never shared with third parties except Google's own API infrastructure.

Contacts you import via CSV or from LeadThur are stored in our database solely to enable campaign sending. We do not sell, share, or use this data for any purpose other than executing the campaigns you configure.

We do not sell your personal data. We share data only with: Supabase (database infrastructure), Google (OAuth authentication and Gmail API), Paystack (payment processing for Nigerian users), and Cloudflare (CDN and security). Each of these providers has their own privacy policy governing their data handling.

We retain your account data for as long as your account is active. You may request deletion of your account and all associated data by contacting support@mailthur.com. Upon deletion, we revoke your Gmail OAuth tokens, delete your campaign data, contact lists, and sending history within 30 days.

We use industry-standard encryption for data in transit (TLS) and at rest. OAuth tokens are stored encrypted. We do not store Gmail passwords. Access to your Gmail account is governed entirely by Google's OAuth 2.0 protocol which you can revoke at any time from your Google Account security settings at myaccount.google.com/permissions.

You may access, correct, or delete your personal data at any time by contacting us at support@mailthur.com. You may disconnect your Gmail inbox at any time from your MailThur dashboard, which immediately revokes our access. You may cancel your subscription at any time.

MailThur is not intended for users under 18 years of age. We do not knowingly collect data from minors.

We will notify users of material changes to this policy via email and by updating the Last Updated date above.

Pdigital Marketstore Ltd
RC 8015428
Lagos, Nigeria
support@mailthur.com