Privacy Policy

EachReader is run by Muaaz Khan, based in Pakistan. For anything in this policy, write to personapilot1@gmail.com.

There are two kinds of people whose data passes through EachReader: you, the account holder, and your readers, the contacts you upload or who sign up on your public page. For your readers' data, we act on your instructions; you decide who's on your list and what they're sent.

• Your account: your name, email address and profile picture, through our sign-in provider.
• What you create: questionnaire answers, persona strategies, segments, drafts, campaigns and the emails written for them.
• Your readers: email address, name, any other columns in a CSV you upload, the segment they're in, where they came from, and whether they've unsubscribed, bounced or complained.
• Email activity: whether each email was delivered, opened or bounced, and which links were clicked, so Analytics can show results per segment.
• Billing: your plan, its status and renewal date, and Lemon Squeezy's reference numbers for your subscription. Card details go to Lemon Squeezy and never reach us.
• Cookies: the sign-in cookies our sign-in provider needs, and one cookie that remembers which project you last opened. No advertising or analytics trackers.

Only to run EachReader for you: building segments, writing and sending your emails, showing your results, handling your plan, and contacting you about your account. We don't sell data, show ads, or use your content or your readers' data to train AI models of our own.

These services process data for us, each only for its part of the job:

• Clerk — sign-in and account security.
• Supabase — the database where everything above is stored (United States).
• Vercel — hosts the website and app.
• OpenAI — writes strategies and email copy. To place uploaded contacts into segments, their email address, name and CSV columns are sent to it. Under OpenAI's API terms, data sent this way isn't used to train its models by default.
• Resend — delivers your emails and reports deliveries, opens, clicks and bounces.
• Lemon Squeezy — takes payments and handles tax as the merchant of record.

Some of these are outside your country, mostly in the United States, so your data may be processed there.

• Your account and projects are kept while your account exists.
• Deleting a project (Settings → Danger zone) deletes its contacts, campaigns, drafts and history straight away.
• To delete your whole account and everything in it, email us from the address on your account; we'll do it within 30 days.
• A reader who unsubscribed or bounced is remembered for as long as the project exists, so they're never emailed again.

• You can see, correct and export your data in the app — contacts export as a CSV from Settings.
• You can ask us for a copy of your data, or to correct or delete it, at personapilot1@gmail.com.
• If you received an email sent through EachReader, the link at the bottom unsubscribes you in one click. To have your details removed, ask the sender who emailed you, or write to us and we'll pass it on.

Everything travels over encrypted connections, every request is checked against the signed-in account, and payment and email events are verified before we act on them. No system is perfect; if something goes wrong that affects your data, we'll tell you.

EachReader isn't meant for anyone under 18. If this policy changes, we'll update the date at the top, and email you about changes that matter.