Privacy policy

Last updated: 31 October 2026

This policy describes how Crestmail (“we”) processes personal data when you use Crestmail. Governing focus: businesses in India contacting prospects in markets such as the US and UK.

Controller

Crestmail · Contact: support@crestnova.in

Data we process

• Account: email, auth identifiers, workspace profile fields.
• Workspace content: contacts, campaign drafts, send outcomes, replies classified by the product, suppressions.
• Mailbox integration: OAuth tokens (encrypted), send metadata, optional reply sync when you reconnect with read scopes.
• Billing: plan, entitlement usage, Razorpay order/payment references (card data is handled by Razorpay, not stored by us).
• Optional open/click signals when you enable tracking (approximate; default off).

Processors

Infrastructure and payments typically include Supabase (database/auth), Google (Gmail API when connected), and Razorpay (payments). Each processes data under their terms and our instructions.

Your choices

• Export contacts / workspace data from Settings (privileged roles).
• Delete individual contacts (owner/admin).
• Delete the workspace (owner) — see Danger zone in Settings.
• Disable open/click tracking anytime; no open signal ≠ definitely unopened.

Retention periods: Retention policy.