Privacy Policy

Who is responsible

Reloops is responsible for the data of the people who visit the site and hold an account. You can reach us about privacy at hello@reloops.email.

Contacts that a customer adds to Reloops are different: the customer decides what to send them and why, so the customer is the controller of that data and Reloops processes it on their behalf.

Data we handle

Depending on how you use Reloops, we handle:

• Account data: your email address, your password in hashed form and, if you sign in with Google, your Google account identifier
• Team data: team names, members, invitations, sending domains and settings
• Customer content: contacts, their properties, emails, campaigns, workflows and forms
• Email activity: sends, deliveries, opens, clicks, bounces, complaints and unsubscribes
• Billing data: plan, subscription status and the customer identifiers from Stripe. Stripe handles card details and we never see or store them
• Technical data: request logs, and security events in which the IP address is stored in hashed form
• Visit statistics: on our public pages, Ahrefs Web Analytics measures pages viewed, referrers and general device and location data

Why we use it

We use this data on these legal bases:

• To provide the service you signed up for, including sending your email, which is the performance of our contract
• To bill you and meet tax and accounting duties, which are legal obligations
• To protect the service, prevent abuse and keep sending reputation healthy, which is our legitimate interest
• To understand how people find and use our public pages, which is our legitimate interest
• To send account messages such as email confirmations, usage warnings and password resets, which are part of the service

Cookies

Reloops only uses strictly necessary cookies. A session cookie keeps you signed in and lasts 7 days, or 30 days if you choose Remember me. A short-lived cookie protects the sign-in if you use Continue with Google. We do not use analytics or advertising cookies.

Providers that process data

We share data only with the providers needed to run the service:

• Cloudflare: hosting, database and network
• Mailgun: email delivery and delivery events
• Stripe: payments, invoices and tax calculation
• Google: sign-in, only if you choose Continue with Google
• Slack: notifications, only if your team connects a webhook
• Ahrefs: visit statistics on our public pages, not inside the app

International transfers

Some of these providers process data outside the European Economic Area, including in the United States. Where that happens, the transfer relies on safeguards such as the standard contractual clauses or an adequacy decision.

How long we keep data

We keep account and customer data while the account is active. When an account is closed we delete it, except for what we must keep to meet legal, tax or accounting duties, or to resolve disputes.

Your rights

You can ask to access, correct, delete, restrict or port your data, and you can object to how we use it, by writing to hello@reloops.email. You can also complain to your data protection authority, which in Spain is the Agencia Española de Protección de Datos.

If you received an email from a Reloops customer, every marketing email includes an unsubscribe link. For anything else about that data, contact the sender, who controls it.

Security

Traffic is encrypted in transit, passwords are stored as salted hashes, and sessions are signed. No system is completely secure, so if we learn of a breach that affects you, we will tell you as the law requires.

Changes to this policy

If we change this policy, we will update the date on this page, and we will tell account holders directly about significant changes.