Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account Data: When you register, we collect your email address, full name, and password. We also store your preferences such as timezone, language, and theme settings.
• Contact Data: You upload and manage journalist and media contact information, including names, email addresses, companies, positions, phone numbers, countries, and other professional details.
• Email Content: We store the email campaigns, messages, and follow-ups you create and send through our platform, including subject lines, body content, and attachments.
• Usage Data: We collect information about how you use the platform, including pages visited, features used, campaign statistics, and interaction patterns.
• Cookies and Local Storage: We use authentication tokens stored in your browser's local storage to maintain your session. We use minimal cookies for essential platform functionality.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Neshys platform, including contact management, campaign creation, and email delivery.
• Send emails on your behalf using Amazon Simple Email Service (SES) to deliver your campaigns and follow-ups to your media contacts.
• Power AI-assisted message generation using OpenAI to help you draft personalized pitches and press communications.
• Provide campaign analytics, including delivery rates, open rates, click rates, and bounce tracking.
• Enforce subscription limits, usage tracking, and billing for your workspace.
• Send you transactional emails such as password resets, account notifications, and important service updates.

3. Email Tracking

When you send campaigns through Neshys, we use Amazon SES tracking features to provide you with campaign analytics:

• Open Tracking: Emails may contain a small transparent tracking pixel. When a recipient's email client loads this image, we record an open event.
• Click Tracking: Links in your emails may be routed through our tracking service to record click events before redirecting to the original destination.
• Delivery and Bounce Tracking: We receive notifications from Amazon SES about delivery successes, bounces, and spam complaints to maintain email deliverability and manage suppression lists.

These analytics are available to you as the campaign sender to measure the effectiveness of your outreach. Recipients are not individually identified to third parties through this tracking.

4. Data Sharing

We share your data only with the following service providers, as necessary to operate the platform:

• Amazon Web Services (AWS): We use Amazon SES for email delivery and Amazon S3 for file storage (attachments and uploads). Your email content and attachment files are processed through AWS infrastructure.
• OpenAI: When you use AI-powered message generation features, your prompts and relevant contact context are sent to OpenAI's API to generate content. We do not send your full contact database to OpenAI.

We do not sell, rent, or trade your personal data or your contacts' data to any third parties. We do not share your data with advertisers or data brokers.

5. Data Security

We take the security of your data seriously and implement appropriate technical and organizational measures to protect it:

• All data is encrypted in transit using TLS/HTTPS.
• Data at rest is encrypted using industry-standard encryption.
• User passwords are securely hashed using bcrypt and are never stored in plain text.
• Authentication is handled via secure JWT tokens with appropriate expiration policies.
• Access to your workspace data is controlled through role-based permissions (Owner, Admin, Editor, Viewer, Sender).

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure: You can request deletion of your personal data, subject to legal obligations we may have to retain certain records.
• Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format. Our contact export feature (CSV/Excel) supports this right.
• Right to Object: You can object to the processing of your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we limit how we use your data in certain situations.

To exercise any of these rights, please contact us at support@neshys.com. We will respond to your request within 30 days.

7. Data Retention

• Account Data: We retain your account information for as long as your account is active. You may request deletion of your account and associated data at any time.
• Contact Data: Contact information you upload is retained within your workspace until you delete it or request account deletion.
• Email Events: Campaign delivery data (sends, opens, clicks, bounces) is retained for analytics purposes. Suppression list entries (bounces, complaints) are retained to protect email deliverability.
• Campaign Content: Email campaign content is retained for your reference and for follow-up threading. You may delete campaigns at any time while they are in draft status.

8. Cookies and Local Storage

Neshys uses minimal browser storage for essential functionality. We store authentication tokens in your browser's local storage to maintain your login session. We do not use third-party advertising or analytics cookies. No personal data is shared with third-party cookie providers.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email or through an in-app notification.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

support@neshys.com