Privacy Policy

Last updated: May 2025

EmailMachine ("we", "our", or "us") provides an automated transactional email service for Shopify merchants. This Privacy Policy explains how we collect, use, and protect information in connection with our service.

1. What We Do

EmailMachine sends transactional emails on behalf of Shopify merchants to their customers. These emails are strictly transactional in nature and include:

• Order confirmation emails — sent when a customer places an order
• Shipping notification emails — sent when an order is marked as fulfilled

We do not send promotional, marketing, or unsolicited bulk email of any kind.

2. Information We Collect

When a Shopify merchant installs EmailMachine, we receive and store:

• The merchant's Shopify store domain
• An OAuth access token used to communicate with the merchant's Shopify store
• Email sending preferences configured by the merchant (sender name, reply-to address)

When processing orders on behalf of a merchant, we temporarily handle:

• Customer email addresses (used solely to deliver the transactional email)
• Customer first name and order details (used to personalize the email content)

We do not store customer personal data beyond what is necessary to send and log each individual email.

3. How We Use Information

Information is used exclusively to:

• Authenticate with the merchant's Shopify store
• Send transactional emails triggered by order events
• Log delivery status (sent or failed) for the merchant's dashboard

We do not sell, rent, or share merchant or customer data with any third parties for marketing purposes.

4. Email Delivery

Emails are delivered via Amazon Simple Email Service (Amazon SES), a cloud-based email sending service operated by Amazon Web Services, Inc. Amazon SES processes email content transiently for the purpose of delivery. For more information, see Amazon's Privacy Notice.

5. Opt-Out / Unsubscribe

Because EmailMachine sends only transactional emails (order confirmations and shipping notifications directly related to a purchase the recipient made), these emails are necessary to fulfill the customer's order. Recipients who wish to stop receiving transactional emails should contact the merchant directly.

If you are a merchant and wish to stop EmailMachine from sending emails on your behalf, you may uninstall the app from your Shopify admin at any time.

6. Data Retention

Email send logs (recipient address, template name, delivery status, timestamp) are retained to provide merchants with delivery reporting. Merchants may request deletion of their store data by contacting us at support@emailmachine.app.

When a merchant uninstalls EmailMachine, their shop record and associated data are deleted from our systems automatically.

7. Security

We use industry-standard security practices, including encrypted connections (TLS) for all data in transit and access controls on our infrastructure. OAuth tokens are stored securely and are only used to process webhook events from Shopify.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date.

9. Contact

If you have questions about this Privacy Policy, please contact us at support@emailmachine.app.