Inbox Hearth

Privacy Policy

Last updated: July 2, 2026

This policy describes what Inbox Hearth ("we", "us") collects, why, and what we do with it. The short version: we collect what we need to run your sending infrastructure and bill you, we don't sell any of it, and the assets we manage belong to you.

1. What we collect

  • Contact and business details — your name, email, company name and physical address, provided when you book a call or become a customer. We need these to register domains truthfully in your name and to configure compliant mailboxes.
  • Billing information — handled by our payment processor (Stripe). We never see or store full card numbers.
  • Infrastructure and operational data — the domains, DNS records, mailboxes, and warmup metrics we manage for you, plus audit logs of every provisioning action we take on your behalf.
  • Basic web logs — our site is static and carries no analytics trackers; our hosting provider (AWS CloudFront) keeps standard access logs.

2. What we do NOT collect

We do not read, store, or analyze the content of your outreach email or your recipients' replies. Warmup traffic is generated between managed warmup mailboxes and contains no customer or recipient data. We do not buy, sell, or provide prospect lists.

3. How we use it

  • To provision and operate your infrastructure — domain registration, DNS, mailbox creation, warmup, and monitoring.
  • To bill you and communicate about your service.
  • To meet legal obligations, including registrar and mailbox-provider requirements.

We do not sell personal information, and we do not use your data for advertising.

4. Who we share it with

Only the vendors required to deliver the service, each receiving the minimum needed:

  • Domain registrar and DNS (AWS Route 53) — registrant details for domains registered in your name, with WHOIS privacy enabled.
  • Mailbox provider (Google Workspace) — mailbox names and display names on your sending domains.
  • Payment processor (Stripe) — billing details.
  • Scheduling — if you book a call, the booking runs through our scheduling provider and is governed by its own privacy terms.

We disclose information if required by law, and we'll tell you when we're allowed to.

5. Retention and deletion

We keep customer records while your subscription is active and for as long as needed for tax and accounting afterward. Provisioning audit logs are retained because they document actions taken on assets you own. If you cancel, credentials for your mailboxes are handed to you and our administrative access is removed. You can request deletion of your contact records at any time by emailing us.

6. Security

Credentials for infrastructure we manage are stored in encrypted secret storage (AWS SSM), never in plain text or email. Access is limited to the operators who run your service. Every mutation to your infrastructure is written to an append-only audit log.

7. Your rights and contact

You can request a copy, correction, or deletion of the personal information we hold about you at hello@inboxhearth.com. If we make material changes to this policy we'll post them here with a new "last updated" date.