Privacy Policy
This policy explains what personal data Onlymails collects, why we use it, who we share it with, and the choices and rights you have.
1. Who we are
Onlymails, available at onlymails.co and app.onlymails.co (the “Service”), is operated by SuperGrowth (“Onlymails”, “we”, “us”, or “our”). We are the controller of the personal data described in this policy. For any privacy question or request, contact us at support@onlymails.co.
2. The data we collect
We only collect what we need to run the Service:
• Account data: your email address, your name if you provide it, and your password, which we store in hashed form. If you sign in with Google, we receive your name, email address, and profile picture from your Google account.
• Profile and activity in the app: the answers you give during onboarding (such as your role), the brands you follow, the emails you save, your folders, and your settings.
• Billing data: if you subscribe to a paid plan, payment is handled by Stripe. We receive your name, email address, billing country, and subscription status, but never your full card details.
• Technical and usage data: your IP address when you create your account, the type of device and browser you use, and how you use the app (pages viewed, features used, searches), which we measure to keep the Service secure and to improve it.
• Communications: the messages you send us, and whether you agreed to receive product updates by email.
3. Why we use your data
• To create and manage your account and provide the Service you signed up for (performance of our contract with you).
• To process payments and manage your subscription (performance of our contract), and to keep invoices and accounting records (legal obligation).
• To send you service emails, such as sign-in links, password resets, receipts, and important changes to the Service (performance of our contract).
• To keep the Service secure, prevent abuse and fraud, and understand how features are used so we can improve them (our legitimate interests).
• To send you product updates and tips, only if you agreed to receive them (your consent). You can unsubscribe at any time from the link in each email.
4. Who we share your data with
We do not sell your personal data. We share it only with the service providers that help us run Onlymails, each acting on our instructions and bound by data protection terms:
• MongoDB Atlas and Amazon Web Services, for hosting our database, files, and processing (Amazon Web Services in Ireland and Germany).
• Stripe, for payments and subscription management.
• Loops, for sending service and product emails.
• PostHog (EU cloud), for product analytics in the app.
• Google, if you choose to sign in with your Google account.
• Framer, which hosts our website onlymails.co.
We may also disclose data when required by law, or to protect our rights, our users, or the public.
5. International transfers
Some of our providers are based in, or may access data from, countries outside the European Economic Area, including the United States. When this happens, we rely on recognized safeguards, such as the EU-U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
6. How long we keep your data
We keep your account data for as long as your account is open. When you close your account, we delete or anonymize your personal data within 30 days, except where we must keep it longer: billing and accounting records are kept for 10 years, as required by French law. Usage and analytics data are kept for up to 25 months.
7. Cookies and similar technologies
The app uses storage on your device that is strictly necessary to keep you signed in and remember your preferences. We also use PostHog to measure how the app is used. Our website onlymails.co is hosted by Framer, which provides us with aggregated visitor statistics. You can delete or block cookies at any time in your browser settings; blocking strictly necessary storage will prevent you from signing in.
8. Your rights
Under the GDPR and applicable law, you can ask us to access, correct, or delete your personal data, to restrict or object to its use, or to send it to you in a portable format. Where we rely on your consent, you can withdraw it at any time. You can also delete your account from the app.
To exercise these rights, email support@onlymails.co. We will answer within one month. If you think we have not handled your data properly, you can lodge a complaint with the French data protection authority (CNIL, cnil.fr) or with the authority of the country where you live.
9. Emails in the library
The library contains marketing emails that brands send to their subscribers. We receive them with our own email addresses, so they do not contain the personal data of other subscribers. Some emails may include the names of people who work for these brands, such as a founder’s signature, exactly as the brand published them. If you appear in an email and would like it removed, write to support@onlymails.co.
10. Security
We use appropriate technical and organizational measures to protect your data, including encrypted connections, hashed passwords, and restricted access to our systems. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires it.
11. Children
The Service is not intended for anyone under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. If we make material changes, we will let you know by email or through the Service before they take effect.
13. Contact
Questions about this policy or your personal data can be sent to support@onlymails.co.
SuperGrowth, operator of Onlymails.
Last updated: October 13, 2026