top of page
Scubamail logo for white bg.png

Privacy Policy

Last updated: April 24, 2026

1. Introduction

Scubamail ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email marketing platform and services (the "Service"). By accessing or using Scubamail, you agree to the collection and use of information in accordance with this policy.

​

If you have any questions about this Privacy Policy, please contact us at support@scubamail.io.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Name, email address, and password

  • Company name and business information

  • Billing address and payment information

  • Profile picture and contact preferences

2.2 Contact and Subscriber Data

As part of our email marketing services, we collect and store:

  • Email addresses and contact information of your subscribers

  • Contact metadata (name, phone number, addresses, custom fields)

  • Subscriber preferences and segmentation data

  • Email engagement data (opens, clicks, bounces, unsubscribes)

2.3 Usage and Technical Data

We automatically collect:

  • IP address, browser type, and device information

  • Pages visited, time spent, and navigation patterns

  • Log files and error reports

  • Cookies and similar tracking technologies

2.4 Campaign and Content Data

We store:

  • Email campaign content, templates, and designs

  • Automation workflows and triggers

  • Campaign performance metrics and analytics

  • Integration data from connected services

3. How We Use Your Information

We use the collected information for the following purposes:

  • Service Delivery: To provide, maintain, and improve our email marketing platform

  • Account Management: To process your registration, manage your account, and provide customer support

  • Email Processing: To send, track, and deliver emails on your behalf to your subscribers

  • Analytics and Reporting: To generate insights, reports, and performance metrics

  • Communication: To send service-related notices, updates, and promotional communications

  • Security: To detect, prevent, and address technical issues, fraud, and abuse

  • Legal Compliance: To comply with legal obligations and enforce our terms of service

  • Business Operations: To conduct research, analyze trends, and improve our services

4. Information Sharing and Disclosure

We do not sell your personal information or subscriber data. We may share information in the following circumstances:

4.1 Service Providers

We may share data with trusted third-party service providers who assist us in:

  • Email delivery and infrastructure (e.g., AWS SES, SendGrid)

  • Payment processing (e.g., Stripe, Razorpay)

  • Data analytics and monitoring

  • Customer support tools

4.2 Legal Requirements

We may disclose information if required by law or to:

  • Comply with legal processes, court orders, or government requests

  • Protect our rights, property, or safety

  • Prevent fraud or security threats

  • Enforce our terms of service

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4.4 With Your Consent

We may share information with your explicit consent or as directed by you.

5. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit (TLS/SSL) and at rest

  • Secure authentication and access controls

  • Regular security audits and vulnerability assessments

  • Firewall protection and intrusion detection

  • Employee training on data protection

  • Regular backups and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

  • Provide our services to you

  • Comply with legal obligations

  • Resolve disputes and enforce agreements

  • Maintain business records for analytics and improvement

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes. Subscriber data may be retained longer if required for email deliverability and compliance purposes.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

7.1 General Rights

  • Access: Request a copy of your personal data

  • Correction: Update or correct inaccurate information

  • Deletion: Request deletion of your personal data

  • Portability: Receive your data in a structured, machine-readable format

  • Objection: Object to processing of your personal data

  • Restriction: Request restriction of processing

  • If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to:

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority

  • Receive information about data processing activities

7.2 GDPR Rights (EU/EEA Users)

7.3 CCPA Rights (California Users)

  • If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

  • Right to know what personal information is collected

  • Right to delete personal information

  • Right to opt-out of the sale of personal information (we do not sell your data)

  • Right to non-discrimination for exercising your rights

  • To exercise any of these rights, please contact us at support@scubamail.io. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

  • We use cookies and similar tracking technologies to:

  • Remember your preferences and settings

  • Authenticate your session

  • Analyze usage patterns and improve our service

  • Provide personalized content and features

  • Track email opens and clicks for campaign analytics

  • You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our service. For more information, please see our Cookie Settings page.

9. Third-Party Services and Integrations

  • Our platform integrates with various third-party services. When you connect these services:

  • We may receive data from these services (e.g., contact lists, e-commerce orders)

  • We may send data to these services based on your configurations

  • Each third-party service has its own privacy policy governing their use of your data

  • You are responsible for reviewing and accepting third-party privacy policies

  • We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies before connecting them to your account.

10. International Data Transfers

  • Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

  • For transfers from the EU/EEA, we rely on standard contractual clauses and other approved transfer mechanisms to ensure your data is protected.

11. Children's Privacy

Our service is not intended for individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at support@scubamail.io, and we will take steps to delete such information.

12. Your Responsibilities as a Data Controller

When using our email marketing platform, you act as a data controller for your subscriber data. You are responsible for:

  • Obtaining proper consent from your subscribers before adding them to your lists

  • Complying with applicable email marketing laws (CAN-SPAM, GDPR, CASL, etc.)

  • Honoring unsubscribe requests promptly

  • Maintaining accurate and up-to-date subscriber information

  • Protecting subscriber data and using it only for legitimate purposes

  • Having a privacy policy that discloses how you use subscriber data

We act as a data processor and will process subscriber data only in accordance with your instructions and this Privacy Policy.

13. Email Marketing Compliance

We help you comply with email marketing regulations by providing:

  • Unsubscribe links in all emails sent through our platform

  • Opt-in/opt-out management tools

  • Complaint handling and blacklist monitoring

  • Sender authentication (SPF, DKIM, DMARC) support

  • Compliance reporting and audit trails

However, you are ultimately responsible for ensuring your email campaigns comply with all applicable laws and regulations.

14. Data Breach Notification

In the event of a data breach that may affect your personal information, we will notify affected users and relevant authorities as required by applicable law. We will provide information about the nature of the breach, the data affected, and steps we are taking to address it.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by:

  • Posting the updated policy on this page with a new "Last updated" date

  • Sending an email notification to your registered email address

  • Displaying a prominent notice on our platform

Your continued use of our service after such changes constitutes acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@scubamail.io

Subject: Privacy Policy Inquiry

We will respond to your inquiry within 30 days. For data protection requests, please include your account information and a clear description of your request.

17. Data Protection Officer

For users in the EU/EEA, you can contact our Data Protection Officer (DPO) at support@scubamail.io with the subject line "Data Protection Officer" for matters related to GDPR compliance.

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy will be subject to the exclusive jurisdiction of the courts in India.

18. Governing Law

bottom of page