Last updated: October 30, 2026
This policy explains how AguMail LLC ("AguMail", "we", "us") collects, uses and shares personal data. It covers two groups of people:
We do not sell personal data. We use the advertising tools in Section 3 to measure our own ads and show them to people who visited agumail.com, which some US state laws call "sharing" for targeted advertising. You can turn this off with Cookie choices in Section 3.
Staying signed in. We keep you signed in with a session token stored in your browser's local storage.
Google Tag Manager. Our website, blog and template gallery load our analytics and advertising tools through Google Tag Manager, which decides which tool runs on which page.
Analytics. We use Google Analytics to understand how people use agumail.com: which pages they view and which features they use, where they came from, and their device, browser and approximate location. It sets cookies named _ga and _ga_ followed by an ID, which last up to two years. It does not tell us who you are.
Advertising. To measure our ads on Meta (Facebook and Instagram), Reddit and Google, and to show our ads to people who visited, we use the Meta Pixel, the Reddit Pixel and Google Ads. They count visits to our public pages and the moments you sign up, start a checkout or buy a plan, and see nothing else of what you do in your account. When you sign up or buy a plan, they receive your email address in hashed form, scrambled so it cannot be read, which lets each platform match the sign-up to an ad you saw there if you have an account with them. They set cookies such as _fbp (Meta), _rdt_uuid (Reddit) and _gcl_au (Google), which last up to 13 months, and the platforms process the data under their own privacy policies.
Your choice. We ask before using analytics or advertising where the law requires, including in the EU and the UK. Elsewhere they are on until you decline. If your browser sends Global Privacy Control, we treat it as a no to advertising. You can change your answer here at any time, and it applies to agumail.com, our blog and our template gallery:
You can also block these tools in your browser settings, or Google Analytics with Google's opt-out add-on.
Fonts. Our website and app load fonts from Google Fonts, so your browser sends your IP address to Google when a page loads.
We process subscriber data only to provide the Service to the customer who controls it, and only on that customer's instructions. Depending on how the customer uses AguMail, it can include:
Signup forms and hosted pages. Forms collect the fields the customer chooses, and we record the subscriber's IP address to prove consent and to block automated signups. The customer can turn on double opt-in for a form, so a new subscriber is asked to confirm by email. If the customer turns on Google Analytics or Meta Pixel for a hosted page, those tools load only after the visitor accepts the page's consent banner, unless the customer turns the banner off, and the data they collect goes to Google or Meta under the customer's own account.
Unsubscribing. Every marketing email sent through AguMail includes an unsubscribe link and supports one-click unsubscribe in email apps. The same page lets a subscriber choose topics or pause emails for 30 days. When someone unsubscribes, complains or bounces, we keep their address on that customer's suppression list, even if the customer later deletes the contact, so they are not emailed again by mistake. The entry is lifted only if that person subscribes again and confirms by email, or undoes the unsubscribe on the page where they made it. A bounced address stays blocked. The suppression list is deleted when the customer deletes their account.
Your rights as a subscriber. To access, correct or delete your data, or to stop receiving emails, contact the business that emails you, since it controls your data. We help our customers answer these requests. If you contact us directly, we will pass your request to the right business where we can identify it.
We never sell subscriber data, never use it to market AguMail, and never send customers' contact lists to AI providers.
When a customer uses the writing assistant or another feature that generates content, we send our AI providers the context that feature needs. That can include the business name and description, the text being edited, the website's text and screenshots, product names and prices, the names of tags, segments and forms, and the size of the audience. We do not send contact lists. Our providers are Anthropic (Claude), Google (Gemini) and DeepSeek, depending on the feature. DeepSeek processes data in China. We do not use customer content to train AI models, and our providers handle it under their own terms for business use of their services.
These providers process personal data for us:
We also use services that receive no personal data from us: Pexels, for stock photos found by topic, and Cloudflare, for our domain name servers.
Beyond these providers, we share personal data only when a customer tells us to (for example, email goes to the recipient's mailbox provider, and data goes to the integrations, webhooks and analytics tools a customer connects); when the law requires it or it is needed to protect our rights, our users or the public; and to a buyer or successor if AguMail is involved in a merger, acquisition or sale of assets.
AguMail is based in the United States, and we and our providers process personal data in the United States, and in China for DeepSeek. These countries may not protect personal data in the same way as the country you live in. Where our providers offer safeguards such as the EU Standard Contractual Clauses, we rely on them. Customers who need a transfer mechanism for subscriber data should see our Terms of Service.
We keep customer data for as long as the account is open. A customer can delete their account at any time from Settings → Account → Danger zone. Deletion cancels billing and permanently erases the account, contacts, campaigns, templates, automations, forms, tracking data, suppression list, uploaded files and API keys. After deletion we keep only:
When a customer deletes a single contact, we erase the contact record but keep its suppression entry, as described in Section 4.
When someone signs up on a form with double opt-in and does not confirm within 30 days, we delete the contact their signup created.
We protect personal data with measures such as encryption in transit over public networks, access limited to the people who need it, hashed passwords, and logging of administrative actions. No system is completely secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, and to withdraw consent. Customers can edit most account details in Settings and export their contacts from the app. For anything else, email us from the address on your account and we will respond within the time the law requires. If you are in the EU or the UK, you can also complain to your data protection authority. We will not treat you differently for exercising these rights.
AguMail is a service for businesses and is not meant for anyone under 18. We do not knowingly collect personal data from children, and our Terms do not allow customers to upload data about children under 16.
We may update this policy from time to time. The date at the top shows the current version, which applies from that date.
AguMail LLC, Seattle, Washington, United States. Privacy questions and requests: mihai@agumail.com.