Legal
Plain language about what we collect and what we do with it. Last updated August 2026.
CraftNudge is a hosted cold-email sending service operated at craftnudge.com. This policy explains what we collect and why. Questions: hello@craftnudge.com.
Account details (your name, email, password — stored only as a hash). The inboxes you connect, including the app password for each, which is encrypted with AES-256-GCM before storage and never shown again. The contacts you upload and the campaigns you build. Email metadata read from your inbox to detect replies and bounces: sender, subject, a short snippet, and delivery status. Tracking events (opens, clicks, unsubscribes) when you enable them.
Solely to run the service: to send your campaigns, detect replies and bounces, report deliverability, and operate your account. We do not sell your data, we do not share it with advertisers, and we do not use your contacts, copy or replies to train any model.
You are the controller of the contact data you load into CraftNudge; we process it on your behalf. You are responsible for having a lawful basis to email those contacts. We provide one-click unsubscribe on every send and honour it automatically.
We host the service on infrastructure we operate. When billing is enabled, payments are handled by Stripe, who receive only what is needed to process a payment. We do not use third-party advertising or analytics trackers on the application.
Mailbox credentials are encrypted at rest. Every workspace is isolated so one customer cannot access another's data. Access to production is limited to the operator. See the trust page for specifics.
Your data lives as long as your account does. Delete a campaign, an inbox or your workspace and the associated records are removed. To delete your account entirely, write to us and we will remove your data promptly.
Revoke inbox access at any time by deleting the inbox here or revoking the app password in your Google account. Request a copy or deletion of your data by email.