Privacy Policy

Last updated: 14 November 2026

1. Who is responsible

DJINN FOUNDRY, S.L., tax ID (NIF) B88711726, Plaza Julio Pardo 10, 46625 Cofrentes (Valencia), Spain. For anything about your data, write to founders@djinnfoundry.com.

This policy covers two kinds of data: the data of people who have a Djinnletter account, and the data of the subscribers our customers email through Djinnletter.

2. If you have an account

We are the controller of this data.

• What we hold: your name and email address, a protected form of your password, your workspaces and what you do in them, your billing details and payment history, and technical records of your requests such as IP address and time.
• Why: to provide the service and bill for it (the contract with you); to keep it secure and stop abuse (our legitimate interest); and to meet tax and accounting duties (the law).
• Emails we send you: about your account and the service, such as confirmations, security notices and billing. We do not send you marketing unless you ask for it.
• How long: while your account is open. After it closes we delete it, except invoices and payment records, which we keep for as long as tax and accounting law requires.

3. If you are a subscriber of one of our customers

The customer whose email you receive decides what data is held about you and why. That customer is the controller, and we process the data on their behalf.

• What is held: your email address, any fields the customer adds such as your name, the tags they give you, and what happened to the emails sent to you: delivery, bounce, complaint and unsubscribe, and opens and clicks when the customer measures them.
• Unsubscribing: every email has an unsubscribe link, and it works at once. To access or delete your data, write to the sender of the email. If you cannot reach them, write to us and we pass it on.
• How long: until the customer deletes you or closes their account. Per-recipient delivery detail is removed after 24 months; the address of a person who unsubscribed, bounced or complained is kept so that they are not emailed again.

4. Who we share data with

We do not sell personal data. These providers process it for us, each under a data processing agreement:

• Cloudflare: hosting, database, file storage and protection of the sign-up form.
• Resend and Amazon Web Services: sending email and reporting its delivery.
• Stripe: payments, invoices and tax.
• Sentry: error reports, from which addresses and other personal data are removed before they are sent.

Some of them may process data outside the European Economic Area. Where they do, the transfer is covered by the European Commission's standard contractual clauses or an adequacy decision.

5. Cookies

We use only the cookies the service needs: one that keeps you signed in to the dashboard, and one that remembers the language you chose on this website. Stripe sets its own cookies on the payment pages to prevent fraud. We run no analytics and no advertising trackers.

6. Your rights

You can ask to access, correct, delete or export your data, to restrict or object to its use, and to withdraw a consent you gave. Write to founders@djinnfoundry.com. You can also complain to the Spanish data protection authority (AEPD, aepd.es) or to the authority of your country.

7. Changes

When this policy changes in a way that matters, we tell account holders by email or in the dashboard. The date at the top says when it last changed.