Privacy Policy
Last updated: January 24, 2025
At ZebaMail, we take your privacy seriously. This policy explains how we collect, use, and protect your information when you use our email template builder for Shopify.
1. Introduction
Welcome to ZebaMail ("we," "our," or "us"). We provide an email template builder specifically designed for Shopify merchants to create professional, conversion-optimized email campaigns. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use our website, services, and applications (collectively, the "Services").
By using ZebaMail, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Services.
2. Information We Collect
We collect various types of information to provide and improve our Services:
2.1 Information You Provide
- Account Information: Name, email address, password, and company details when you create an account
- Billing Information: Payment card details and billing address (processed securely by Stripe)
- Store Information: Your Shopify store domain and related business information
- Template Data: Email templates, designs, content, and brand assets you create or upload
- Communication Data: Information you provide when contacting our support team
2.2 Information We Automatically Collect
- Usage Data: How you interact with our Services, features used, and performance metrics
- Device Information: Browser type, operating system, IP address, and device identifiers
- Log Data: Server logs including access times, pages viewed, and referring URLs
- Cookie Data: Information collected through cookies and similar tracking technologies
2.3 Information from Third Parties
- Shopify Integration: Store information and permissions when you connect your Shopify account
- Analytics Providers: Aggregated data about Service usage and performance
- Payment Processors: Transaction confirmations and dispute information from Stripe
3. How We Use Your Information
We use the collected information for various purposes:
- Service Provision: To provide, maintain, and improve our email template builder
- Account Management: To manage your account, authenticate users, and provide customer support
- Payment Processing: To process transactions and send billing-related communications
- Communication: To send service updates, security alerts, and support messages
- Marketing: To send promotional emails about new features or services (with your consent)
- Analytics: To understand how our Services are used and improve user experience
- Legal Compliance: To comply with legal obligations and protect our rights
- Security: To detect, prevent, and address technical issues and fraud
4. Information Sharing & Disclosure
We do not sell, trade, or rent your personal information. We may share your information in the following circumstances:
4.1 Service Providers
We share information with trusted third-party service providers who assist us in operating our Services:
- Supabase: Database hosting and authentication services
- Stripe: Payment processing and billing management
- Resend: Transactional email delivery
- Unlayer: Email editor functionality
- Google Analytics: Website analytics and performance monitoring
4.2 Other Disclosures
- Legal Requirements: When required by law, subpoena, or court order
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Protection of Rights: To protect the rights, property, or safety of ZebaMail, our users, or others
- With Consent: When you explicitly consent to sharing for a specific purpose
- Aggregated Data: Non-identifiable aggregated data for research or marketing purposes
5. Data Storage & Security
5.1 Data Storage
- Your data is stored on secure servers provided by Supabase
- Data may be processed and stored in multiple geographic locations
- We implement appropriate data backup and recovery procedures
5.2 Security Measures
- Industry-standard encryption for data in transit and at rest
- Regular security audits and vulnerability assessments
- Access controls limiting data access to authorized personnel
- Secure password requirements and optional two-factor authentication
- Regular security training for our team members
5.3 Data Retention
We retain your personal information for as long as necessary to provide our Services and comply with legal obligations. When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.
6. Your Rights & Choices
You have certain rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Update or correct inaccurate personal information
- Deletion: Request deletion of your personal information, subject to legal requirements
- Portability: Receive your data in a structured, machine-readable format
- Opt-out: Unsubscribe from marketing communications at any time
- Cookie Preferences: Manage cookie settings through your browser
- Do Not Track: We respect Do Not Track browser settings
To exercise these rights, please contact us at support@zebamail.com. We will respond to your request within 30 days.
7. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
7.1 Categories of Personal Information Collected
- Identifiers (name, email, IP address)
- Commercial information (transaction history, services purchased)
- Internet activity (browsing history, search history, interaction with our Services)
- Professional information (company name, job title)
7.2 Your CCPA Rights
- Right to Know: Request disclosure of personal information collected, used, and shared
- Right to Delete: Request deletion of personal information, with certain exceptions
- Right to Opt-Out: We do not sell personal information, but you can opt-out of certain sharing
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
To exercise your CCPA rights, contact us at privacy@zebamail.com or call 1-800-ZEBAMAIL. We may need to verify your identity before processing your request.
8. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):
8.1 Legal Basis for Processing
- Contract: Processing necessary to perform our contract with you
- Legitimate Interests: Processing for our legitimate business interests
- Consent: Processing based on your explicit consent
- Legal Obligation: Processing to comply with legal requirements
8.2 Your GDPR Rights
- Access: Obtain confirmation and access to your personal data
- Rectification: Correct inaccurate or incomplete personal data
- Erasure: Request deletion of personal data ("right to be forgotten")
- Restriction: Restrict processing of your personal data
- Portability: Transfer your data to another service provider
- Object: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw previously given consent at any time
8.3 International Transfers
Your data may be transferred to and processed in countries outside the EEA. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data during international transfers.
To exercise your GDPR rights or file a complaint, contact our Data Protection Officer at dpo@zebamail.com. You also have the right to lodge a complaint with your local supervisory authority.
9. Children's Privacy
ZebaMail is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information as soon as possible.
If you believe we have collected information from a child under 13, please contact us immediately at support@zebamail.com.
10. Third-Party Services
10.1 Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
10.2 Shopify Integration
When you connect your Shopify store to ZebaMail, you authorize us to access certain information from your Shopify account as necessary to provide our Services. Your use of Shopify is governed by Shopify's privacy policy and terms of service.
10.3 Analytics and Advertising
We use Google Analytics to understand how our Services are used. Google Analytics collects information using cookies and similar technologies. You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
12. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, and other factors. When we make material changes, we will:
- Update the "Last updated" date at the top of this policy
- Notify you by email (for registered users) or through a prominent notice on our Services
- Provide a summary of the key changes
- Give you the opportunity to review the changes before they take effect
Your continued use of our Services after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you should discontinue use of our Services.
13. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
We aim to respond to all privacy-related inquiries within 30 days. For urgent matters, please indicate "URGENT" in your email subject line.
Thank you for trusting ZebaMail with your data. We're committed to protecting your privacy.