Privacy policy

Who operates Shopemail

Shopemail is independently operated by an individual in Pakistan. This is a prelaunch policy draft. The operator’s legal identity must be finalized before this draft is replaced. Privacy requests can be sent to privacy@shopemail.app.

Information the service handles

Account data includes your email address, sign-in identity, sessions and workspace memberships. Design data includes theme copies, brand settings, authored content, rules, linked image references, uploaded images and sample data that you enter. Uploaded images are publicly accessible by their unguessable URL so they can appear in customer emails. Do not upload private or sensitive files. Security records can include sign-in time, browser information, approximate network information and account changes.

Use fictional customer and order details in preview samples. The editor does not require a live customer database to design notification templates.

How data is used

Account data supports authentication, account notices and workspace access. Design data supports saving, previewing, editing and exporting your themes. Security and activity records support abuse prevention, troubleshooting and reviewing changes.

Claude and other services

Connecting Claude is optional. After you authorize a theme, Claude can read the permitted design information and, if you grant checked editing, request supported changes. Those requests are processed by Anthropic under its own terms and policies. Revoke access from Connections.

The service runs on Cloudflare infrastructure. Email previews may load Google Fonts and images from the URLs used by your designs; those providers receive the network information needed to deliver their assets. Signing in with Google uses Google’s identity service when configured.

Optional email measurement

Tracking settings control optional image-load collection and UTM parameters. Image loads are estimates, not proof that a person read an email. No customer pixel is added unless tracking is enabled and an appropriate collector is configured.

Merchants are responsible for deciding which measurement is appropriate for their recipients and for providing the required notices.

Retention and account choices

Security and audit records have a scheduled one-year retention policy. Ended session records are scheduled for removal after 90 days. Tracking retention is configurable. Active theme data remains available while it is retained in the workspace; archiving a theme is not deletion.

You can revoke sessions and agent connections from your account. A verified request process for access, export and deletion, including backup handling, must be finalized before launch. Contact privacy@shopemail.app for requests.

International processing and updates

Service providers may process information outside Pakistan. The production provider list, transfer arrangements, contact process and final policy date must be confirmed before this draft becomes the published policy. Changes to this notice will be listed on this page.