Privacy Policy

This policy explains how CommsHarbor processes account, contact, message, delivery, and operational data.

Last updated / Última atualização: 29 August 2026

Data we process

We process verified account details, organization settings, contacts supplied by customers, consent records, templates, recipient addresses, delivery events, suppressions, API and security audit records, and billing references.

Purposes

We use data to authenticate users, deliver requested messages, enforce consent and suppressions, prevent abuse, measure reliability, provide support, and meet accounting and security obligations.

Processors and location

Cloudflare provides edge compute, database, object storage, DNS, and queues. Amazon Web Services provides SES and SNS delivery infrastructure. Data may be processed where those providers operate under their applicable safeguards.

Retention

Import and export objects expire after seven days. Raw SES feedback objects expire after thirty days. Product data remains while the organization is active. Security audit and pseudonymous billing records may be retained when necessary.

Control and deletion

Organization owners can export data and schedule deletion. A scheduled deletion has a seven-day cancellation period, then personal content and stored objects are erased while narrowly required pseudonymous records remain.

Contact

Privacy and data-rights requests may be sent to privacy@commsharbor.com.