Privacy Policy

1. Introduction

BUSINESSPRIZM (referred to as "we", "us", or "our") operates the MMP Mail Merge Pro application, including the Google Sheets add‑on, website at https://mailmergepro.app, and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We respect your privacy and comply with applicable data protection laws, including India's Information Technology Act and, where applicable, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

2. Data Controller

BUSINESSPRIZM
Ghari Ashraf Ali, Jasmai Darwaza, Farrukhabad (209625), India
Contact: connect@mailmergepro.app
DPO: Abhishek – dpo@mailmergepro.app

3. Information We Collect

3.1 Information You Provide Directly

• Account Information: When you sign up or log in, we collect your email address, first and last name.
• Web Dashboard Accounts: If you choose to create an account directly on our web dashboard (outside of Google Workspace), we collect your name, email, and a securely hashed password (we do not store plain-text passwords). System notifications (like password resets and OTPs) are sent from our verified service account (noreply@mailmergepro.app), completely separate from your personal Gmail data.
• Communication Data: If you contact support or request OTP verification, we process the email address and content of your messages.

3.2 Information Collected from Google / Gmail

When you connect MMP Mail Merge Pro to your Google account, we may access the following with your consent:

• Gmail Drafts: Subject and body of drafts you select for campaigns.
• Gmail Sending: We use Gmail's gmail.send scope to send emails on your behalf.
• Gmail Modify/Labels: We create and apply labels to track sent campaigns and replies.
• Email Metadata: For reply and bounce detection, we may read email headers (From, Subject, Message-ID) from threads associated with your campaigns.

We do not read, store, or process the content of your incoming or outgoing emails beyond what is necessary to provide campaign sending, tracking, and follow‑up features.

3.3 Recipient Data

When you send a campaign, we process recipient email addresses and any personalization fields (e.g., name, company) from your Google Sheet. We also collect tracking events such as:

• Email opened
• Link clicked
• Unsubscribed
• Bounced

3.4 Payment Information

Payments are processed by third‑party payment processors Razorpay and PayPal. We do not collect or store full credit/debit card numbers. We may receive transaction IDs, payment status, and email address for order verification and subscription management.

3.5 Technical Data

We automatically collect certain technical information when you use our Service, including:

• IP address
• Browser type and version
• User agent
• Timestamps of requests
• Log data

This information helps us maintain security, prevent fraud, and improve performance.

4. How We Use Your Information

We use the collected information to:

• Provide, operate, and maintain the Service.
• Create and manage your account.
• Send email campaigns through your Gmail account.
• Track opens, clicks, bounces, and unsubscribes.
• Enforce suppression lists and comply with unsubscribe requests.
• Process payments and manage premium subscriptions.
• Send OTP codes for email verification and password reset links.
• Respond to support requests.
• Improve and secure the Service.

5. Gmail API Limited Use Disclosure

MMP Mail Merge Pro uses Google APIs when you connect your Google Account. Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We limit our use of data to providing or improving user-facing features that are prominent in the requesting application's user interface.
• We do not allow humans to read your data unless we have your affirmative agreement for specific messages, doing so is necessary for security purposes such as investigating abuse, to comply with applicable law, or for the App's internal operations and even then only when the data have been aggregated and anonymized.
• We do not use or transfer the data for serving ads, including retargeting, personalized, or interest-based advertising.
• We do not transfer Gmail data to third parties except as necessary to provide or improve these user-facing features, comply with applicable law, or as part of a merger, acquisition, or sale of assets.

6. Sharing of Information

We may share your information in the following limited circumstances:

• With Your Consent: We may share data when you explicitly permit us.
• Service Providers: We use trusted third parties to operate the Service, including:
  • Google (for Gmail API and authentication)
  • Razorpay and PayPal (for payment processing)
  • Google Cloud (for hosting, Datastore, and Secret Manager)
• Legal Obligations: We may disclose information if required by law, court order, or government regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

We do not sell your personal data.

7. Data Retention & Account Deletion

We retain your personal data only for as long as necessary to provide the Service and fulfil the purposes described in this policy. Specifically:

• Account Information: Retained while your account is active.
• Campaign Data: Tracking events and suppression lists are retained for as long as needed to provide analytics and follow‑up functionality, unless you delete your account.
• Payment Records: Retained as required by tax and accounting laws.
• Logs: Retained for a limited period for security and debugging. (Error logs sent to our servers contain cryptographic hashes of user identifiers to prevent PII exposure).

You may revoke MMP Mail Merge Pro's access to your Google Account at any time via your Google Account Security Settings. You may also request complete deletion of your account and all associated data at any time by emailing connect@mailmergepro.app.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit (HTTPS/TLS)
• Secure storage using Google Cloud services
• Access controls and authentication (OAuth 2.0, CSRF tokens)
• HMAC signature verification for tracking links
• Secret management via Google Cloud Secret Manager

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States and India, where our servers and service providers are located. By using the Service, you consent to such transfers. We take reasonable steps to ensure that your data receives an adequate level of protection.

10. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Delete your account and associated data.
• Restriction: Restrict processing under certain conditions.
• Portability: Receive your data in a structured, machine‑readable format.
• Objection: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at connect@mailmergepro.app. We will respond within the time required by law.

11. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to enhance user experience and analyze site traffic. Web sessions are secured using encrypted cookies (Secure and SameSite policies enforced) and CSRF tokens. You can control cookies through your browser settings.

12. Children’s Privacy

MMP Mail Merge Pro is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the effective date. Your continued use of the Service after such changes constitutes acceptance.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

BUSINESSPRIZM
Ghari Ashraf Ali, Jasmai Darwaza, Farrukhabad (209625), India
Email: connect@mailmergepro.app
DPO: Abhishek – dpo@mailmergepro.app