Scope
This policy applies to Traffsite accounts, the dashboards, the email API, hosted mailboxes and the Traffsite Analytics service. When you send email to your own users through Traffsite Email, or measure traffic on your own site with Traffsite Analytics, you decide what data is involved. For that data you are the controller and we process it on your behalf.
What we collect
- Account data: name, email address, a hashed password, and sign-in details if you use Google.
- Security data: sessions with device, browser and IP address, sign-in attempts and an audit log of sensitive actions.
- Sending data (Email): recipient addresses, subject lines, message bodies, attachments, delivery status, bounce reasons and suppression entries.
- Mailbox data (Email): the mail stored in the mailboxes you create.
- Analytics data (Analytics): page views, referrer and UTM tags, and per-visit details such as IP address, approximate location, ISP and device, collected from the sites where our customers install the tracking script.
- Billing data: wallet balance, top-ups, subscriptions, invoices and payment references. Card and bank details are handled by Razorpay and never reach us.
- Usage data: API requests, rate limit counters and error logs.
How we use it
We do not sell personal data and we do not use message content or analytics data for advertising.
- To deliver the services, keep message logs and analytics dashboards, and show them to you.
- To protect accounts and other customers, detect abuse and keep sending reputation healthy.
- To bill you and meet tax and accounting rules.
- To email you about your account, security events and service changes.
How long we keep it
- Attachments are kept for 7 days after sending, then removed.
- Message logs, bounce records and analytics data are kept while the relevant account is active so you can review them.
- Billing records are kept as long as the law requires.
- When you close your account we delete or anonymise your personal data, except records we must keep by law.
Your choices
You can view and edit your name and see your active sessions from your profile, sign out other devices, turn on two-factor sign-in, and delete your account. To ask for a copy of your data, a correction or deletion, write to us and we will respond within a reasonable time.
Security
Passwords are stored as hashes. Connections use TLS. API keys are shown once and stored hashed. Access to production systems is limited and logged. No system is perfectly secure; tell us at once if you notice a problem.
Children
Traffsite is not meant for anyone under 18 and we do not knowingly collect data from children.
Changes
If we change this policy in a way that matters, we will tell you by email or in the dashboard.
Contact
Privacy questions and requests: [email protected].
Last updated 18 October 2026.