Product
Audience
Customer Database HubSpot
CRM Workspace
Company Management Deal Pipeline Tasks & Follow-up
Campaign Creation
Advanced Email Sequencing
Sending Health
Advanced Deliverability Sender Rotation
Pricing Free Tools
Resources
Resource Directory Free Email Tools Insights Blog Knowledge Base Contact Support
Login

Privacy Policy

Last updated: August 26, 2026

Introduction

Welcome to BuffSend, operated by BUFFSEND ("us", "we", or "our"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about our policy or our practices with regards to your personal information, please contact us at support@buffsend.com.

This Privacy Policy governs the privacy policies and practices of our Website, located at buffsend.com. It outlines how we collect, use, disclose, and safeguard your information when you visit our website and use our services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We collect personal information that you voluntarily provide to us when registering at the Service, expressing an interest in obtaining information about us or our products and services, when participating in activities on the Service, or otherwise contacting us.

The personal information that we collect depends on the context of your interactions with us and the Service, the choices you make, and the products and features you use. The personal information we collect can include the following:

  • Name and Contact Data: We collect your first and last name, email address, postal address, phone number, and other similar contact data.
  • Credentials: We collect passwords, password hints, and similar security information used for authentication and account access.
  • Payment Data: We collect data necessary to process your payment if you make purchases, such as your payment instrument number (e.g., credit card number), and the security code associated with your payment instrument. All payment data is stored and processed by our third-party payment processor (e.g., Stripe). We do not store full payment card details. You should review the payment processor's privacy policies.
  • Account and Profile Data: Information you provide when you create an account, such as username and preferences.
  • Communications: Information you provide when you contact us with questions, feedback, or otherwise correspond with us online.
  • User Content: Content you upload or submit through the Service, such as email templates, contact lists, and campaign details.
  • Marketing Data: Your preferences for receiving marketing communications and details about your engagement with them.

We also automatically collect certain information when you visit, use, or navigate the Service. This information does not reveal your specific identity but may include device and usage information:

  • Usage Data: Information about how you use our Service, such as the features you use, the pages you visit, links clicked, the time spent on those pages, and other statistics.
  • Device Data: Information about your computer or mobile device, such as your IP address, device identifiers, browser type, browser version, operating system, and language settings.
  • Location Data: We may approximate your location based on your IP address.
  • Tracking & Cookies Data: We use cookies and similar tracking technologies (like web beacons and pixels) to track the activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Use of Google User Data

If you connect a Gmail or Google Workspace account, BuffSend accesses Google user data only to provide the email sending and Inbox features you choose to use. Before you connect, BuffSend shows what data will be accessed and asks for your permission.

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google permissions and data we access

  • https://www.googleapis.com/auth/gmail.send (Send email on your behalf): BuffSend uses this permission to send campaign messages and tests that you create and initiate through the Service. Sending a message creates the corresponding sent message in your Google account.
  • https://www.googleapis.com/auth/gmail.readonly (Read Gmail messages and settings): BuffSend reads recent incoming messages so replies, spam classifications, and delivery-failure notices can appear in your BuffSend Inbox and be matched to campaigns. The data may include Google message and thread identifiers, labels, sender and recipient addresses, dates, subject lines, snippets, message headers, and the readable text of message bodies. BuffSend does not store file attachments and does not use this permission to modify or delete messages in Gmail.
  • openid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/userinfo.profile (Basic account info): BuffSend uses these permissions to verify the Google account, confirm that its email address matches the sender you are connecting, and display the account name and profile image.

How Google data is used and shared

Google user data is used only to provide and support the sending, reply-sync, delivery-status, and account-connection features described above. Synced Gmail content is visible to active, authorized members of the BuffSend workspace in which the sender is connected. Workspace administrators can remove the connection.

BuffSend does not sell Google user data, use it for advertising, use it to build advertising profiles, or use it to train general-purpose artificial intelligence or machine-learning models. We do not allow people to read synced Gmail content except when you have asked for support and given permission, when access is necessary to investigate abuse or a security incident, or when required by law. Service providers may process the data only as needed to host, secure, maintain, or support BuffSend and under obligations to protect it. Google user data is not shared with analytics or advertising providers.

Storage, security, retention, and deletion

BuffSend stores the connected account identifier, encrypted access credentials, and the synced message fields described above. Data is transmitted over encrypted connections. Access is limited by authenticated account and workspace controls, and application logs are designed not to record message bodies or access credentials.

Synced Gmail content is retained in BuffSend while the sender connection and BuffSend account remain active so the Inbox and reply history continue to work. If you remove a Gmail sender, BuffSend sends a revocation request to Google, deletes the locally stored access credentials, and deletes the messages synced through that sender from active systems. Closing your BuffSend account performs the same deletion for every Gmail sender you own. You can also revoke BuffSend directly from your Google Account security settings; after revocation, BuffSend can no longer retrieve new Gmail data.

If deleted data remains temporarily in a protected backup, it is isolated from routine use and removed through the backup-retention process. If a backup must be restored for disaster recovery, applicable deletion requests are reapplied. You may request access to, correction of, or deletion of your Google user data by using the controls in BuffSend or emailing legal@buffsend.com.

How We Use Your Information

We use personal information collected via our Service for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.

  • To Provide and Maintain our Service: Including monitoring usage, troubleshooting, and providing support.
  • To Manage Your Account: To facilitate account creation, authentication, and management.
  • To Perform Contracts: To develop, comply, and undertake the purchase contract for products or services you have purchased or any other contract with us through the Service.
  • To Contact You: To contact you by email, telephone calls, SMS, or other equivalent forms of electronic communication regarding updates or informative communications related to the functionalities, products, or contracted services, including security updates, when necessary or reasonable for their implementation.
  • To Send Marketing Communications: To send you marketing and promotional communications, if this is in accordance with your marketing preferences. You can opt-out at any time.
  • To Respond to Inquiries: To attend and manage your requests to us.
  • For Business Transfers: We may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.
  • For Data Analysis: To identify usage trends, determine the effectiveness of our promotional campaigns, and to evaluate and improve our Service, products, services, marketing, and your experience.
  • To Comply with Legal Obligations: To comply with applicable laws, lawful requests, and legal process, such as responding to subpoenas or requests from government authorities.
  • For Security and Fraud Prevention: To monitor and prevent fraud, enforce our terms, and protect our rights and the rights of others.

Will Your Information Be Shared With Anyone?

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations.

Specifically, we may need to process your data or share your personal information in the following situations:

  • Vendors, Consultants, and Other Third-Party Service Providers: We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work (e.g., payment processing [Stripe], email delivery infrastructure, hosting services [Hetzner, AWS], customer service tools, analytics providers [Google Analytics], marketing automation). These third parties are contractually obligated to protect your data and use it only for the services they provide to us.
  • Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).
  • Vital Interests: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.
  • With Your Consent: We may disclose your personal information for any other purpose with your consent.

International Transfer of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside Turkey and choose to provide information to us, please note that we transfer the data, including Personal Data, to Turkey and process it there. Our service providers may also process data in other countries, including the United States.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

How Long Do We Keep Your Information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

How Do We Keep Your Information Safe?

We aim to protect your personal information through a system of organizational and technical security measures designed to protect the security of any personal information we process. We implement appropriate technical and organizational measures such as encryption for data in transit and at rest where appropriate, access controls, and regular security assessments.

However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Service is at your own risk. You should only access the service within a secure environment.

Your Privacy Rights (GDPR & UK Residents)

If you are a resident in the European Economic Area (EEA) or the United Kingdom (UK), you have certain data protection rights. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

Your rights under the GDPR include:

  • The right to access: You have the right to request copies of your personal data.
  • The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
  • The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
  • The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
  • The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
  • The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you wish to exercise any of these rights, please contact us using the contact details provided below. We may need to verify your identity before responding to such requests.

You also have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the EEA or UK.

Children's Privacy

Our Service does not address anyone under the age of 13 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Updates to This Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last updated" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.

Contact Us

If you have questions or comments about this policy, you may email us at legal@buffsend.com