Who we are
FlackEmail is an email marketing product operated by Empowered Founders. When this policy says "we", "us", or "FlackEmail", we mean Empowered Founders.
You can reach us at hi@flackemail.com for any privacy question, request, or complaint. A real human reads that inbox.
Information we collect
Account data. When you sign up we collect your name, email address, password (hashed), company name, and billing details. Billing details are processed by Stripe; we never see your full card number.
Usage data. We log how you use the product: pages visited, features used, campaigns sent, API calls, error traces, IP address, and browser type. This helps us run, debug, and improve the service.
Cookies and similar technologies. We use a small number of cookies for sessions, preferences, and analytics. See our Cookie Policy for the full list.
Customer content. To send email on your behalf we store the content you create (campaigns, sequences, templates) and the contact lists you upload (subscriber email addresses, names, custom fields, engagement history). You are the controller of that data; we are the processor. See our DPA.
How we use your data
We use your data to provide the service you signed up for, to send the emails you ask us to send, to monitor and improve deliverability, to bill you, to keep the platform secure, and to prevent abuse such as spam and phishing.
We also use it to send you transactional and product-related email (receipts, security alerts, important changes). You can opt out of optional marketing email at any time; you cannot opt out of mandatory transactional email while you have an active account.
Legal bases (GDPR Article 6)
We rely on three legal bases under GDPR Article 6.
Contract (Art. 6(1)(b)): processing necessary to deliver the FlackEmail service you signed up for.
Legitimate interests (Art. 6(1)(f)): running, securing, and improving the service, preventing abuse, and limited product communications. You can object at any time.
Consent (Art. 6(1)(a)): where we ask for it specifically, for example optional analytics or marketing email. You can withdraw consent at any time.
Sharing and subprocessors
We do not sell your data. We share it only with subprocessors that help us run the service (hosting, email delivery, payments, customer support tooling, error monitoring) and only to the extent each one needs.
The full, current list lives at /legal/subprocessors. We notify customers in advance of material changes.
Data retention
Account and customer content are kept while your account is active and for up to 30 days after cancellation, so you can export or restore it.
After that we delete or anonymise it, except where we are legally required to keep records (for example invoices, which we keep for the period required by tax law).
You can request immediate deletion at any time by emailing hi@flackemail.com.
Your rights
If you are in the EU, UK, or another jurisdiction with similar laws, you have the right to access your data, correct it, delete it, restrict or object to processing, and receive a portable copy.
Most of these you can do yourself from your account settings. For anything else, email hi@flackemail.com and we will respond within 30 days.
International transfers
We are based in Germany. Some of our subprocessors are in the United States or other countries outside the EEA.
Where data leaves the EEA we rely on Standard Contractual Clauses (SCCs) and, where relevant, additional safeguards. The current list of subprocessors notes where each one operates.
Children
FlackEmail is a business product. We do not knowingly collect data from anyone under 16. If you believe a child has provided us data, email hi@flackemail.com and we will delete it.
Changes to this policy
We update this policy when the product or the law changes. The "Last updated" date at the top reflects the most recent change.
For material changes we email active customers at least 30 days before the change takes effect.
Contact
Questions, requests, or complaints: hi@flackemail.com.
You also have the right to complain to your local data protection supervisory authority. In Germany that is the Berliner Beauftragte fuer Datenschutz und Informationsfreiheit.