Fine print

Privacy Policy

Last updated May 7, 2026


Sessionmail ("we," "us," or "the Service") provides a tool to compose marketing emails from your usesession.com booking links and send them through email service providers you connect (Mailchimp, Brevo, Constant Contact, "ESPs"). This policy explains what we collect, how we use it, and your choices.

What we collect

  • Account info — your name, email, and password hash, set when you sign up.
  • Brand info — your business name, logo URL, accent color, and selected fonts, used to style your emails.
  • ESP credentials — API keys or OAuth tokens you provide to connect Mailchimp, Brevo, or Constant Contact. These are encrypted at rest with AES-256-GCM and only decrypted in-memory when you take an action that requires them.
  • Drafts & sends log — your saved email drafts and a record of campaigns you create through Sessionmail (subject, audience, timestamps).
  • Booking content — when you paste a usesession.com link, we fetch the publicly-listed session details (titles, descriptions, dates, photos) to render in your email preview.
  • Billing info — Stripe handles your card details directly; we store only your Stripe customer ID and subscription state.

What we don't collect

  • Your subscriber list. Your audience members live inside your ESP — we never download or store them.
  • Card numbers. Stripe processes payments; we never see them.

How we use it

  • To run the Service: render previews, create drafts in your ESP, send tests, save drafts.
  • To bill you (Stripe).
  • To email you about your account (signup confirmation, password resets, important service updates).

Sharing

We share data only with subprocessors strictly necessary to operate the Service: Supabase (database + auth), Stripe (billing), Vercel (hosting), Resend (test sends). We do not sell or rent any data.

Retention

Account, brand, ESP credentials, drafts, and sends are kept while your account is active. Delete your account any time by emailing hello@trysessionmail.com and we'll erase it within 30 days.

Your rights

You can request a copy of your data, correction of inaccurate data, or deletion at any time. Email hello@trysessionmail.com.

Contact

Questions? Email hello@trysessionmail.com.