Privacy Policy

1. Who is responsible

Neslife Research Private Limited, A-1107 Kailash Business Park, V S Road, Parksite, Vikhroli West, Mumbai – 400079, operates Emlyra. This policy follows the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

• Your account data (people who use Emlyra): we decide how it is used, as a data fiduciary.
• Your recipients' data (contacts, addresses you send to, replies you receive): our customer decides how it is used, and we process it only on the customer's behalf and instructions. Recipients should contact the sender first; we help our customers answer.

2. What we collect

• Account: name, email address, password (stored only as a hash), two-factor settings, Google account identifier if you sign in with Google, organization name, website and postal address, team roles.
• Billing: plan, invoices and payment status. Card and bank details are handled by our payment provider; we do not store them.
• Use of the service: sign-in times, IP addresses and browser information for security, and an audit log of important actions.
• Email you send: sender, recipients, subject, content (for a limited time), delivery events, bounces, complaints, unsubscribes and, if you enable tracking, opens and clicks.
• Email you receive on reply domains: the message as received, its sender and the results of spam and authentication checks.
• If you write to us through the contact form: your name, email address, company, message and IP address, used to reply and to keep the form free of abuse.
• Contacts you upload: email addresses and the fields you add, with their consent source and subscription status.

3. Why we use it

• To provide the service: sign you in, send and receive email, show logs and analytics, deliver webhooks.
• To protect recipients and the platform: verify domains, enforce limits, suppress bounced and unsubscribed addresses, detect spam and abuse.
• To bill you and meet tax and accounting duties.
• To contact you about your account, security and changes to the service. We do not send you marketing without your consent.
• To meet legal obligations and answer lawful requests from authorities.

4. Cookies and tracking

The dashboard uses one essential session cookie to keep you signed in. We do not use advertising or third-party analytics cookies. Open and click tracking in your emails is off by default and, when you enable it, measures your recipients on your behalf; you must tell them in your own privacy notice.

5. Who we share it with

We do not sell personal data. We share it only with service providers that help us run Emlyra, under contracts that limit their use of it:

• Hostinger (servers that run the platform).
• Cloudflare (encrypted off-site backups; the data is encrypted before it leaves our server).
• Google (only if you choose Sign in with Google).
• Razorpay (payments, when you buy a paid plan).
• Mailbox providers of your recipients, who receive the email you send.

We may also disclose data when the law requires it or to protect the rights and safety of users and recipients. Some providers may process data outside India, with safeguards required by law.

6. How long we keep it

• Email logs and stored message content: for the retention period of your plan (shown on the Billing page), then deleted.
• Mail received on reply domains: 30 days.
• Suppressions (unsubscribes, complaints, hard bounces): as long as the account exists, so that people who opted out stay opted out.
• Account and billing records: while the account is active, and invoices for as long as tax law requires.
• Backups: up to 35 days, after which they are deleted automatically.

7. Security

Data is encrypted in transit (TLS) and secrets such as DKIM keys and webhook secrets are encrypted at rest. Access is limited to staff who need it, protected by two-factor authentication and recorded in an audit log. Backups are encrypted before they are stored off-site. If a breach affects your personal data we will notify you and the authorities as the law requires.

8. Your rights

You may ask to access, correct or erase your personal data, to withdraw consent, and to nominate someone to act for you. Most account data can be changed in your account settings. For anything else write to support@nesliferesearch.com; we answer within 30 days. Erasure may be limited where we must keep records by law.

If you received email sent through Emlyra, use the unsubscribe link in it, or contact the sender; you may also write to support@nesliferesearch.com and we will stop the sender from emailing you through our platform.

9. Grievance Officer

Grievance Officer, Neslife Research Private Limited, A-1107 Kailash Business Park, V S Road, Parksite, Vikhroli West, Mumbai – 400079. Email: admin@nesliferesearch.com. We acknowledge complaints within 24 hours and resolve them within 15 days. If you are not satisfied you may approach the Data Protection Board of India.

10. Children

Emlyra is a business service and is not meant for people under 18. We do not knowingly collect their data.

11. Changes

We will post any change here with a new effective date and, for material changes, email account owners first.