Privacy Policy

Last updated: March 2026 · Operated by OrbitBuilds AI · support@orbitbuilds.ai

This Privacy Policy explains how MailCraft AI ("we", "our", or "us") collects, uses, and shares your information when you use mailcraftapp.com. We are committed to being transparent about how your data is handled.

1. What Data We Collect

Account Information

Your name and email address (when you sign up)
Your password (stored as a one-way encrypted hash — we cannot read it)
Your subscription plan and usage count

Prospect Data You Enter

When you generate a cold email, you provide information about your sales prospects such as:

Prospect's first name, last name, company, job title
Industry, pain points, recent news
LinkedIn URL (optional)

We do not permanently store this prospect data. It is sent to the AI to generate your email and then discarded. We do not build profiles on your prospects.

Payment Information

We do not store your card, UPI, or bank details. Payments are handled entirely by Razorpay. We only store your Razorpay subscription ID and subscription status.

2. How We Use Third-Party AI (DeepSeek & Anthropic)

Important: AI Processing Disclosure

When you click "Generate Email", the prospect information you entered — masked through our Trust Layer to strip direct identifiers — is sent to DeepSeek's API to generate a personalized cold email. This means your prospect data temporarily passes through DeepSeek's servers.

When a LinkedIn URL is provided (or recent news isn't), we additionally use Anthropic's API to perform web research on the prospect before generation, so your data may also pass through Anthropic's servers for that step.

DeepSeek's data processing is governed by their Privacy Policy. Anthropic's data processing is governed by their Privacy Policy and Usage Policy; Anthropic states that API inputs and outputs are not used to train their models by default.

What is sent to DeepSeek:

Prospect name, company, job title, industry
Any pain points or context you provide

What is sent to Anthropic (web research step only):

Prospect name, company, job title
LinkedIn URL (if provided)

What is NOT sent to either provider:

Your account email or password
Your payment information
Any previously generated emails

3. Infrastructure & Data Storage

Our application runs on Cloudflare's global network. Your account data (email, name, subscription status) is stored in a Cloudflare D1 database. Cloudflare's data practices are governed by their Privacy Policy.

We do not sell, rent, or share your personal data with advertisers or third-party marketers.

4. Third-Party Services We Use

Service	Purpose	Data Shared
DeepSeek	Generate personalized emails	Prospect info you enter (masked)
Anthropic (Claude AI)	Web research on prospect (when LinkedIn URL provided)	Prospect name, company, job title, LinkedIn URL
Razorpay	Payment processing	Email, billing details
Cloudflare	Hosting, database, CDN	Account data
Resend	Transactional emails	Your email address

5. Your Rights (GDPR & CCPA)

If you are located in the European Union, United Kingdom, or California, you have the following rights:

Access: Request a copy of the data we hold about you
Correction: Ask us to correct inaccurate data
Deletion: Request that we delete your account and all associated data
Portability: Request your data in a machine-readable format
Objection: Object to how we process your data

To exercise any of these rights, email us at support@orbitbuilds.ai. We will respond within 30 days.

6. Data Retention

Account data is retained as long as your account is active
If you cancel and request deletion, we will remove your data within 30 days
Prospect data entered for email generation is not stored after the email is generated
Usage counts reset monthly and are not linked to specific prospect names

7. Security

We take security seriously:

Passwords are hashed using PBKDF2 with 100,000 iterations — never stored in plain text
All traffic is encrypted via HTTPS (TLS)
Authentication uses signed JWT tokens with 30-day expiry
API keys are stored as encrypted secrets, never exposed in code

8. Cookies & Local Storage

We do not use tracking cookies or advertising cookies. We use browser localStorage only to keep you logged in between sessions (storing your authentication token). This data never leaves your device.

9. Children's Privacy

MailCraft AI is a B2B tool intended for professionals aged 18 and over. We do not knowingly collect data from anyone under 18.

10. Changes to This Policy

We may update this policy as our product evolves. If we make significant changes, we will notify you by email. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related questions or requests:

Email: support@orbitbuilds.ai
Website: mailcraftapp.com