Privacy Policy

Neuctra Mailer is run by Neuctra. This policy covers the Neuctra Mailer website, dashboard, API and SDK. "You" means the person or company with a Neuctra Mailer account.

When you sign up we store your name, email address and password. Accounts are handled by Neuctra Authix, which stores passwords securely; we never see them in plain text.

We also store your plan and how many emails you sent each month, to apply your plan's limits.

• SMTP settings: host, port, username, From address and name. Your SMTP password is encrypted with AES-256-GCM and never sent back to the browser.
• API keys, also encrypted.
• Security settings, brand details (company name, logo link, address, footer text) and templates you create.
• If you turn on the captcha, your Cloudflare Turnstile secret key, encrypted.

For each contact you add, or who subscribes through your app, we store their email address, name if given, subscription status, signup and unsubscribe dates, and how they were added.

When you send from the Send tab, we store for each contact whether each template was sent or failed, when, and the error. Addresses that unsubscribe or bounce are kept on your service's do-not-send list so they aren't emailed again.

You decide who is on your lists and must have their permission to email them. For this data you are the controller and we process it for you.

• No log of the emails you send: we don't keep their content, subject or recipients after sending.
• No tracking of opens or clicks.
• No advertising or analytics cookies.

The dashboard keeps your sign-in token and your light or dark theme choice in your browser's local storage. Nothing else is stored in your browser, and there are no cookies for tracking.

• Neuctra Authix stores accounts and all Neuctra Mailer data.
• Your own SMTP provider (for example Google, Zoho or Amazon) delivers your emails under its own terms.
• Cloudflare checks captcha tokens, only if you turn the captcha on.
• Our hosting providers run the website and API.

We don't sell personal data.

We keep your data while your account is active. Deleting a service deletes its lists, contacts, templates and do-not-send list. To delete your whole account and its data, contact us.

Depending on where you live, you can ask to see, correct, export or delete your personal data. Contacts on your lists who want their data removed can unsubscribe, and can ask you as the list owner to delete it.

To make a request, contact us: neuctra.com/contact.

Secrets are encrypted at rest, connections use HTTPS, and keys can be rotated at any time. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.

If we change this policy, we will update the date at the top and, for important changes, let account holders know.