Dry run by default
Check the workflow before any real Email reaches a recipient.
Safety and data
Safeguards you can understand.
Decisions you can inspect.
A practical look at how sending and data handling work in this codebase. These are product controls, not a security certification.
Before an Email leaves
Human approval
Drafts need approval. Safety checks still apply after you approve.
Unsubscribe and suppression always win
Do-not-contact rules take priority over campaigns and automations.
No open or click tracking
Follow sent Emails, Replies and checked links without tracking pixels or click redirects.
Your data stays yours
Workspace access is scoped. Export your work and control the providers you connect.
Sending can be blocked or slowed by authentication, verification, health and capacity checks. Approval does not override a blocked safeguard. Receiving providers still decide placement.
How data is handled
Workspace boundaries
Application repositories scope records to a workspace and check membership before access. This is application-layer isolation, not database row-level security.
Passwords and sessions
Passwords use Argon2id hashing. Stored session tokens are hashed; session cookies are HttpOnly and Secure in production. Sessions expire and can be revoked.
Connected Mailbox credentials
IMAP and SMTP credentials use sealed-box encryption before storage. Background sending jobs decrypt them when needed. This does not protect against a compromised application.
Contact sources and removals
The public business-contact directory stores source evidence and verification dates. It does not copy private workspace notes, messages or consent records into the directory. Suppression and permanent removal checks apply when results are served.
Optional providers
Connected email and AI providers process the information required for their tasks. You choose the providers you connect. Review their terms and your workspace settings before enabling them.
Deliberate measurement
There are no open-tracking pixels or click-tracking redirects. Sending health and placement tests are evidence, not a promise about a future recipient’s inbox.
Questions about your data?
Ask your workspace administrator about access, exports and removal requests. The privacy and terms pages currently carry a legal-review notice; they must be reviewed before launch.