Privacy Policy

Last updated: June 20, 2026

This Privacy Policy explains how Synthfy LLC, operating the Mailexs platform ("Mailexs", "we", "us", or "our") collects, uses, and protects information when you use mailexs.com and the Mailexs application at app.mailexs.com (the "Service").

1. Information We Collect

We collect information you provide directly and information generated through your use of the Service.

• check_circleAccount data: name, email address, company, and authentication identifiers (including Google sign-in profile data when you use SSO).
• check_circleBilling data: subscription tier and payment status processed through our third-party payment provider. We do not store full card numbers on our servers.
• check_circleSending account credentials: SMTP/IMAP and OAuth tokens for mailboxes you connect, stored encrypted at rest (AES-256-GCM).
• check_circleCampaign and lead data: contact lists, email content, sequences, and engagement events (sends, opens, replies, bounces) that you upload or generate.
• check_circleTechnical data: IP address, browser type, device information, and usage logs.

2. How We Use Information

We use information to operate, secure, and improve the Service, including:

• check_circleAuthenticating users and provisioning accounts.
• check_circleSending and rotating outbound email through the inboxes you connect or purchase.
• check_circleDetecting replies, bounces, and unsubscribes to manage your campaigns.
• check_circleProcessing billing and preventing fraud and abuse.
• check_circleProviding support and sending service-related notices.

3. Legal Bases (GDPR)

Where the GDPR applies, we process personal data on the bases of contract performance, our legitimate interests in operating the Service, your consent (where required), and compliance with legal obligations. For lead data you upload and send to, you act as the data controller and Mailexs acts as a processor — see our Data Processing Agreement.

4. Sharing & Sub-processors

We do not sell your personal data. We share data only with sub-processors who help us run the Service, including Google Cloud Platform (hosting), email mailbox and domain providers (e.g., Titan/ResellerClub, Porkbun), and our payment processor. Each is bound to appropriate data-protection terms.

5. Data Retention & Security

We retain account and campaign data for as long as your account is active and as needed to comply with legal obligations. Credentials and tokens are encrypted at rest; access is restricted and logged. You may request deletion of your data at any time.

6. Your Rights

Depending on your location, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact [email protected]. California residents have additional rights under the CCPA/CPRA, including the right to know and delete, and the right not to be discriminated against for exercising those rights.

7. Changes

We may update this Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date.