Privacy Policy

1.1 Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

1.2 Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for You to access our Service or parts of our Service.

• Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to bettermerge.com (formerly mailway.in), India.

• Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.

• Country refers to: India

• Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.

• Personal Data is any information that relates to an identified or identifiable individual.

• Service refers to the Website.

• Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.

• Third-party Social Media Service refers to any website or any social network website through which a User can log in or create an account to use the Service.

• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

• Website refers to bettermerge.com (formerly mailway.in), accessible from https://bettermerge.com/

• You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

2.1. Types of Data Collected

2.2. Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• To provide mail merge services: To enable you to create and send personalized email campaigns using your Gmail account and Google Sheets data.

• To manage Your Account: to manage Your registration as a user of the Service and provide access to campaign management, email templates, and tracking features.

• To process email campaigns: To render email templates with your Google Sheets data and send personalized emails through your Gmail account.

• To provide email tracking: To track email opens, clicks, and campaign performance to help you measure the effectiveness of your email campaigns.

• To contact You: To send important service notifications, security updates, and respond to your support requests via email.

• To improve our Service: To analyze usage patterns, identify bugs, and enhance the functionality and user experience of our mail merge tools.

• For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.

• For analytics and optimization: We may use Your information for data analysis, identifying usage trends, and evaluating the effectiveness of our features to continuously improve our Service.

We may share Your personal information in the following situations:

• With Service Providers: We share limited information with trusted service providers who help us operate our Service:

  • Paddle (payment processing) - only payment-related information
  • Firebase Analytics - anonymized usage analytics
  • Sentry - error tracking and debugging information
  • Google Cloud Logging - system logs (retained for 30 days)

  We do not share your campaign data, email templates, or Google Sheets data with any third-party service providers.

• For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.

• For legal compliance: We may disclose your information when required by law, court order, or government regulation, or to protect our rights and the safety of our users.

• With Your consent: We may disclose Your personal information for any other purpose with Your explicit consent.

Important: We never sell, rent, or trade your personal information to third parties for marketing purposes.

2.3 Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Specific Retention Periods:

• Account Data: Retained until you request account deletion or close your account
• Campaign Data and Email Templates: Retained until you delete them or request account deletion
• OAuth Tokens: For Google Sheets add-on users, tokens are valid for 1 hour and refreshed as needed. For web app users, tokens are automatically refreshed and securely stored.
• System Logs: Retained for 30 days in Google Cloud Logging for debugging and security purposes
• Analytics Data: Anonymized usage data may be retained indefinitely for service improvement

Data Deletion: You can request deletion of your account and associated data by contacting us at support@bettermerge.com or through our support ticketing system. We will process deletion requests manually and confirm completion within 30 days.

2.4 Transfer of Your Personal Data

Your information, including Personal Data, is processed on servers located in the United States. While our company is based in India, all data processing and storage occurs in secure US-based data centers.

If you are located outside the United States, this means that your information may be transferred to — and maintained on — computers located in a different country where data protection laws may differ from those in your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

We take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy. We implement appropriate safeguards to protect your personal data during international transfers, including:

• Standard contractual clauses for EU data subjects
• Robust encryption and security measures
• Regular security assessments of our data centers
• Compliance with applicable data protection frameworks

2.5 Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of Users of the Service or the public
• Protect against legal liability

2.6. Security of Your Personal Data

The security of Your Personal Data is important to Us. We implement multiple layers of security to protect your information:

• Authentication: All user access is managed through secure Google OAuth authentication - we do not store passwords
• Data Encryption: OAuth tokens are encrypted at rest using our own encryption keys and decrypted only in memory when needed
• Secure Infrastructure: Our backend is hosted on secure servers located in the United States with enterprise-grade security measures
• Network Security: Protected by Cloudflare Web Application Firewall (WAF) and DDoS protection
• Access Controls: Server access is restricted to SSH key authentication only, with proper firewall configurations
• Monitoring: We use Sentry for error tracking and security monitoring

While We strive to use commercially acceptable means to protect Your Personal Data, remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data with industry-standard security practices.

Data Breach Notification: In the unlikely event of a data breach that affects your personal information, we will notify affected users within 72 hours and take immediate steps to secure the affected systems.

4.1 General User Rights

Regardless of your location, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete personal data
• Right to Deletion: You can request deletion of your account and associated personal data
• Right to Data Portability: You can request a copy of your data in a machine-readable format
• Right to Withdraw Consent: You can revoke Google OAuth permissions at any time through your Google Account settings

4.2 GDPR Rights (For EU Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: We process your data based on legitimate business interests (providing mail merge services) and your consent (Google OAuth permissions)
• Right to Object: You can object to processing of your personal data for direct marketing or legitimate interests
• Right to Restrict Processing: You can request limitation of processing under certain circumstances
• Right to Lodge a Complaint: You can file a complaint with your local data protection authority

International Data Transfers: While we are based in India, our servers are located in the United States. For EU users, this means your data is transferred outside the EU. We ensure this transfer is protected by appropriate safeguards including standard contractual clauses and robust security measures to maintain the same level of protection required by GDPR.

4.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

• Email: support@bettermerge.com
• Submit a ticket through our support portal

We will respond to your request within 30 days. For verification purposes, we may ask you to confirm your identity before processing certain requests.