Get Pro 0

Privacy Policy for NimblyMail

Effective Date: April 29, 2026

Last Updated: May 27, 2026 (Updated Google OAuth Disclosures)

At NimblyMail (“we,” “our,” or “us”), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you purchase our software, visit our website, or use our plugin.

1. Information We Collect

When you purchase NimblyMail Pro or interact with our site, we collect specific data necessary to process your digital download and provide ongoing service:

  • Personal Identification Information: Name, email address, billing address, and phone number.
  • Payment Information: All financial transactions are handled securely via third-party processors (e.g., Stripe, PayPal). We do not store raw credit card details on our servers.
  • License Verification Data: To combat piracy and deliver updates, our plugin periodically checks in with our server. This transmits your license key, plugin version, and site URL.
  • Technical Usage Data: IP addresses, browser types, and interaction data via WooCommerce cookies.

2. Google User Data (OAuth)

If you connect your Gmail or Google Workspace account using the integration within the NimblyMail plugin, we collect and process data via the Google OAuth 2.0 service. The backend operations for this integration are managed by the NimblyMail OAuth Proxy.

A. What We Access and Collect:

When you authorize the NimblyMail OAuth Proxy to connect to your Google Account, we receive an OAuth 2.0 access token and refresh token. We also retrieve your primary Google email address to display the connected email address in your local plugin settings dashboard.
Specific Data Usage & Purpose:
 The NimblyMail OAuth Proxy accesses your Gmail account solely to authenticate and send outgoing emails from your WordPress site on your behalf (via the `gmail.send` API scope). The proxy operates as a secure, stateless pass-through relay. We do not collect, read, or store your raw email messages, email body content, or email attachments on our central servers. All emails are transmitted immediately to Google’s API infrastructure for delivery.
Gmail API (gmail.send): Used exclusively to send outbound transactional and marketing emails from your WordPress site on your behalf.
OpenID & Email Profile: Used to retrieve your primary email address, profile name, and profile picture to identify and label the connected account in your local plugin settings dashboard.
OAuth Credentials: We receive an OAuth 2.0 access token and refresh token upon successful authorization.
Data Protection and Storage:
Your sensitive OAuth access and refresh tokens are stored locally on your own WordPress site’s database using industry-standard AES-256-CBC encryption. They are not stored permanently on NimblyMail’s central servers. The proxy only holds short-lived cryptographic flow data in secure, ephemeral memory (Cloudflare KV with a strict 10-minute automated TTL expiration) to facilitate the initial secure handshake and prevent CSRF attacks.
Data Sharing:
We do not sell, rent, trade, or share your Google user data with third parties. We do not transfer or disclose your information to third parties for purposes other than the ones provided to run the email sending services.
Limited Use Disclosure:
NimblyMail OAuth Proxy’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data Deletion:
You can completely delete all stored OAuth credentials from your WordPress site at any time by clicking the disconnect button in the plugin settings or by uninstalling the plugin. This action instantly removes the tokens from your database. You can also revoke access permanently via your Google Account Security Settings.
To request the deletion of any license-related customer account data we hold, please contact us at [email protected], and we will fulfill your request in accordance with relevant privacy laws.

3. How We Use Your Information

We use your data solely to support your customer journey, specifically to:

  • Process and fulfill digital software purchases.
  • Generate and manage your premium license keys.
  • Deliver automated plugin updates and critical security patches.
  • Provide technical support through our helpdesk.
  • Comply with legal and accounting obligations (e.g., sales tax).

4. Cookies and Tracking

We use essential WooCommerce cookies to track your cart contents while browsing our store and login cookies to maintain your account session. You can manage cookie preferences via your browser settings.

5. Third-Party Data Sharing

We never sell your personal data. We share information only with essential service providers necessary to operate our business, including:

  • WooCommerce: Our primary e-commerce platform.
  • Payment Gateways: For secure payment authorization.
  • Email Infrastructure: To deliver purchase receipts and license codes (e.g., Postmark or Brevo).

6. Data Security & Retention

We implement strict administrative and technical security measures to protect your data. Transactional records are retained for as long as legally required for tax compliance. Credentials stored within the plugin (including API keys and OAuth tokens) are encrypted at rest using industry-standard methods.

7. Your Rights (GDPR / CCPA)

Depending on your location, you have the right to access, correct, or erase the personal information we hold about you. You can also revoke NimblyMail’s access to your Google account at any time via your Google Account Security Settings.

Contact Us

For data requests or privacy questions, please contact us at [email protected] or visit our Support Page.