Privacy Policy

Flaiir (“we”) helps you check a sending domain's email setup and warm it up safely. This page explains what we collect, why, and the choices you have. If anything is unclear, email mamadou@flaiir.co.

What we collect

• Free domain check. The domain you enter and the public DNS results for it (SPF, DKIM, DMARC, MX, registration date, blocklist status). These are public records. We keep results so a results link can be shared and to avoid re-checking the same domain within minutes. We store a salted, one-way hash of your IP address to prevent abuse; we never store the address itself.
• Your account. Your email address and the organisation we create for you. Sign-in uses a one-time email link or Google.
• Domains and plans you save. Domains, check reports and ramp plans you choose to keep.
• Connected mailboxes. If you connect a mailbox to the warm-up network, we store its address and display name, and the credentials needed to act on your behalf (an OAuth refresh token from Google or Microsoft, or an app password for other providers). These are encrypted with AES-256-GCM before they're stored.
• Warm-up network records. For each warm-up email: which mailboxes sent and received it, its Message-ID, subject, a one-way fingerprint of its text, when it was sent, and where it landed (inbox, other tab, spam or missing). We don't store the bodies of warm-up emails.

What we do inside a connected mailbox

Mailbox access is used only to run the warm-up network you joined:

• send a small number of ordinary emails to other members;
• find warm-up emails that other members sent you, by their exact Message-ID, check they are exactly what Flaiir sent, move them out of spam if needed, mark them read, sometimes flag or reply to them, and file them under a “Flaiir” label or folder;
• only if you turn on sending-speed watch for a mailbox: read the time each email in its Sent folder went out over the last day, to warn you about bursts that providers treat as bulk mail. We don't read who those emails went to, their subjects or their content, and we keep only the counts (emails that day, the busiest hour and the busiest ten minutes). Turning it off deletes them.

Apart from those send times, when you turn that on, we never read, list, search, store or change any other email in your mailbox. We don't use mailbox data for advertising, we don't sell it, and we don't use it to train AI models. People at Flaiir don't read your email; the rare exceptions are when you ask us to for support, when it's needed for security, or when the law requires it.

Google user data

Flaiir's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We request the Gmail permission only to provide the warm-up features described above, and use it for nothing else.

Why we use your data (legal bases)

• To provide the service you asked for: running checks, keeping your account, and operating the warm-up network you joined (contract).
• To keep Flaiir safe and working: rate limits, abuse prevention and fixing faults (legitimate interests).
• Joining the warm-up network is opt-in, and you can leave or disconnect at any time (consent, which you can withdraw).

Who processes data for us

We use a small number of providers, each only for the job listed:

• Supabase: database and sign-in (hosted in London, UK).
• Vercel: hosting the website and its servers.
• Inngest: running scheduled background jobs.
• Resend: sending account emails such as “your domain is ready”.
• Google and Microsoft: only when you connect a mailbox from them or sign in with Google.

Where a provider processes data outside the UK, it does so under the safeguards UK data protection law requires.

How long we keep it

• Disconnecting a mailbox deletes its stored credentials immediately and removes it from the network. For Google, we also ask Google to revoke our access.
• Warm-up records are kept while your account is active so your placement history stays accurate, and deleted with your account.
• Free check results and hashed IPs are kept for as long as they're useful for sharing links and preventing abuse.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, or to stop or limit how we use it. You can also complain to the UK Information Commissioner's Office (ico.org.uk). To use any of these rights, email mamadou@flaiir.co.

Cookies

We use only the cookies needed to keep you signed in and to complete a mailbox connection securely. We don't use advertising cookies.

Changes

If we change this policy in a way that matters, we'll update the date above and tell signed-in users before the change takes effect.