Privacy Policy

What Punchline does

Punchline is an email marketing tool that connects to your Brevo account, analyzes your campaign performance, and helps you create better emails. This policy explains what data we collect and how we use it.

What data we collect

• Account information: Your email address and password (or Google account details if you sign in with Google). We use this to create and manage your account.
• Brevo API key: You provide your Brevo API key so we can access your campaign data. This key is encrypted (AES-256-GCM) before being stored in our database. We never store it in plain text.
• Campaign data: We sync your Brevo campaign statistics (subject lines, open rates, click rates, send dates) and — for your top- and bottom-performing campaigns — the email HTML. This data is used to analyze what works and generate better emails for you.
• Business profile: Any information you provide about your business (description, website URL, target audience, topics to avoid) to help us personalize generated emails.
• Generated content: The email drafts, analysis insights, and brand settings we create for you are stored in your account.

How we use your data

• To analyze your campaign performance and generate actionable insights.
• To create email drafts tailored to your brand, audience, and goals.
• To save your drafts, templates, and settings so they're available when you come back.
• To improve the quality of generated emails over time.

Third-party services

• Anthropic (Claude API): We send campaign summaries and your business context to Anthropic's Claude API to generate analysis and email drafts. We do not send your full campaign HTML unless necessary for analysis. Anthropic does not use API inputs to train their models.
• Brevo: We interact with Brevo's API using your API key to sync campaigns, create templates, and send test emails — only when you explicitly request it.
• Crisp: We use Crisp for live chat support. When you use the chat widget, Crisp may collect your messages and basic browser information (device type, page URL) to facilitate the conversation. Crisp's privacy policy applies to data processed through their chat service.
• Sentry: We use Sentry for error monitoring to identify and fix bugs. When an error occurs, Sentry collects technical information about the error (stack trace, browser type, URL) but no personal data. Sentry's privacy policy applies to data processed through their service.
• Supabase: We use Supabase for authentication and database storage. Your data is stored in Supabase's infrastructure with row-level security enabled.
• Vercel: The application is hosted on Vercel's platform. We use Vercel's privacy-friendly web analytics to understand general usage patterns (page views, visitor counts). This does not use cookies and does not track individual users across sites.

Cookies

We use cookies strictly for authentication — to keep you logged in between visits. We do not use tracking cookies, advertising cookies, or third-party analytics. A locale preference cookie may be set if you dismiss the language suggestion banner.

We don't sell your data

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data is used solely to provide and improve the Punchline service.

Data retention and deletion

Your data is retained as long as your account is active. If you want to delete your account and all associated data, you can request deletion through the in-app chat or by emailing hi@punchline.email. Account deletion removes all your data including campaigns, drafts, analyses, and settings.

Security

We take reasonable measures to protect your data: API keys are encrypted at rest, all database access uses row-level security scoped to your account, and all connections use HTTPS. No system is perfectly secure, but we do our best.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we'll notify you through the app or by email. The “Last updated” date at the top reflects the most recent revision.

Contact

Questions about this policy? Email us at hi@punchline.email.