Privacy Policy

1. Our Core Privacy Commitment

At RackCRM (operated by RackCRM Inc.), we protect your outbound infrastructure, sending credentials, and contact lists. We do not sell your personal data, we do not mine your email contents for advertising, and we never share your recipient data with third parties.

2. Information We Collect

We collect information necessary to operate our cold email sequencing and delivery platform:

• Account Data: Name, work email address, company name, and encrypted authentication tokens.
• Email Account Connections: OAuth tokens, IMAP/SMTP credentials, or AWS SES API keys necessary to send and inspect reply activity on your behalf. All credentials are encrypted at rest using AES-256.
• Campaign Data: Prospect lists, email sequence templates, open/click events, and delivery timestamps.

3. How We Use Connected Mailbox Data

RackCRM accesses your connected mailboxes solely for:

• Transmitting approved cold email sequences according to your scheduled pacing.
• Detecting incoming prospect replies and bounce notices to immediately pause sequences.
• Displaying conversation threads in your unified Unibox interface.

4. Data Security & Encryption

All data in transit is encrypted using TLS 1.3. Credentials and sensitive configuration tokens are encrypted at rest using industry-standard AES-256 encryption. We host our infrastructure in SOC2-compliant cloud facilities.

5. Contact Our Data Protection Team

If you have questions about your privacy rights or wish to exercise your rights under GDPR or CCPA, contact us at privacy@rackcrm.com.