Privacy Policy

Last updated: March 3, 2026

1. Who We Are

Drip Campaign Agent (“we,” “us,” or “our”) provides an AI-powered email drip campaign platform for home care and service businesses. Our registered address is available on request.

2. What Data We Collect

• Account data — your name, email address, and hashed password when you sign up.
• Business data — company name, logo, brand colors, and email sending settings you configure.
• Lead data — names, email addresses, and other contact details for leads you import or add manually.
• Email engagement — open events, click events, bounces, and unsubscribe events reported by our sending provider (Postmark/SendGrid).
• Usage data — pages visited, features used, and error logs for debugging and product improvement.

3. How We Use Your Data

• To operate the email drip campaign service on your behalf.
• To send emails to leads you have designated (acting as your email processor).
• To display campaign analytics and reporting within the platform.
• To improve the platform through aggregated, anonymized usage analysis.
• To communicate with you about your account, billing, and product updates.

4. Third-Party Processors

Each processor is contractually bound to protect your data in line with applicable law.

5. Data Retention

We retain your data for as long as your account is active. If you cancel your account we will delete your organization's data within 30 days, except where required by law.

6. Your Rights (GDPR / CCPA)

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate data.
• Erasure (“Right to be Forgotten”) — request deletion of your personal data and any leads associated with your account.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing for marketing purposes at any time.

To exercise any of these rights, email us at privacy@yourdomain.com. We will respond within 30 days. Lead records can be deleted individually from within the platform at any time.

7. Security

All data is encrypted in transit (TLS 1.2+) and at rest. Passwords are stored as bcrypt hashes and are never recoverable. JWTs are short-lived and tenant-scoped. We employ row-level workspace isolation so one customer cannot access another's data.

8. Cookies

We use a single is_admin session cookie for administrator navigation. We do not use tracking cookies or third-party advertising cookies.

9. Children's Privacy

Our service is not directed at children under 13. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this policy. We will notify you by email or in-app notice at least 14 days before material changes take effect.

11. Contact

Questions? Email privacy@yourdomain.com or write to us at the address on file with your registration.