Legal

Privacy Policy

Epistolē is a Canadian email platform. This policy explains what we collect, where it lives, and the rights you and your subscribers have.

What we collect

• Account information you give us (name, work email, organization).
• The subscriber contacts and consent records you import or collect through your forms.
• Basic usage needed to run the service (logins, sends, delivery events).

Where your data lives

Contacts, campaigns, and consent logs are stored in a Canadian data centre and are not replicated to a server outside the country. Your data does not leave Canada.

How we use it

We use your data only to run the service you signed up for. We do not sell it, we do not rent it, and we do not share it with advertising networks. There are no third-party tracking pixels.

Consent

We record express and implied consent per contact, with a timestamped audit trail, in line with Canada's anti-spam legislation (CASL) and the European Union's GDPR. Contacts can withdraw consent at any time, and we honour it on the next send.

Your rights

You and your subscribers can request access to, correction of, or deletion of personal information. We track access and erasure requests against the 30-day window required by Canadian privacy law.

Retention

We keep data only as long as needed to provide the service or meet a legal obligation. Unsubscribed and suppressed contacts are kept out of sends and can be deleted on request.

Contact

For privacy questions or requests, send us a message.

Last updated: working draft, 2026.