Trust

Safe to send, and built to stay that way.

Email comes with real obligations: people have to be able to opt out, your list has to stay clean, and the data behind it has to be handled properly. Inventory Mailer is built so that part is handled for you, on every plan.

Your data is yours

  • We never sell your data, and we never share it for anyone else's marketing.
  • Ask us for a copy of your data, or to close and delete your account, and we do it within 45 days at no charge. Deletion keeps a 30-day grace window before the purge.
  • Your data is stored in the United States. Routing and bot protection run on global edge networks; every vendor's location is in the table below.
  • Every account is isolated at the database level, enforced by row-level security on every read rather than by application logic.

Email that stays compliant

  • A working one-click unsubscribe in every email, and it sticks even if the contact is re-imported.
  • Bounces and spam complaints are suppressed automatically, so you stop mailing addresses you should not.
  • Send from your own domain, with its sending health monitored for you.
  • You are the data controller for your contacts; we process them on your behalf and help you meet CAN-SPAM and GDPR obligations.

Proven infrastructure

  • Built on SOC 2 Type II certified infrastructure (Supabase and Vercel).
  • Payments run through Stripe, a PCI Level 1 provider. Your card details never touch our servers.
  • The AI assistant runs through a gateway configured for zero data retention at the model layer.
  • A full audit history records who changed what, and when.

Who processes your data

We rely on a short list of vendors to run the service. Each one sees only the data it needs.

Supabase
Database, authentication, and file storage
United States
Vercel
Application hosting and compute, and cookieless page-view analytics on the public website
United States, global edge
SendGrid (Twilio)
Email delivery
United States
Stripe
Payments and billing. Stripe holds card details; we never see them
United States (global processing)
Vercel AI Gateway
Routes AI assistant requests. Retains nothing
Provider-dependent
Cloudflare
Bot protection (Turnstile) on signup and login
Global edge

Our Data Processing Addendum is part of the Terms and applies to every account, on every plan, with no request needed. If your compliance team needs a countersigned copy, email support@inventorymailer.com. Our full Privacy Policy and Subprocessors list cover the detail.