Nexus Mail Mail

← Back to home · Privacy · Terms

Privacy Policy

Last updated: October 26, 2026

This Privacy Policy describes how Nexus Mail (“we”, “us”, “the service”) at https://mail.logiclayerhq.com collects, uses, and protects information when you create an account, connect your mailbox, and send email through the product.

We built Nexus Mail so you send from your own email account. We are not a bulk email provider; we provide software that acts on your instructions using credentials you authorize.

Contact

Questions or requests about privacy: support@logiclayerhq.com

Information we collect

Account information

  • Email address, display name, and password (stored as a salted hash, not plain text).
  • Subscription and billing status (via Stripe when enabled).
  • Session identifiers to keep you logged in (HTTP-only cookie).

Mailbox connection (Gmail or SMTP)

When you connect Gmail, we use Google OAuth with scopes to send mail, read mail (for reply detection), and confirm your email address. We store:

  • Your connected mailbox address.
  • OAuth refresh and access tokens, encrypted on our servers using application secrets.
  • For custom SMTP: server settings and credentials, also encrypted at rest.

We do not sell your mailbox credentials. You can disconnect your mailbox from the dashboard at any time.

Content you create and send

  • Campaign names, draft recipients, subject lines, and message bodies you enter or import (e.g. from spreadsheets).
  • Send status (draft, sent, failed), errors, and daily send counts.
  • Suppression list entries when someone unsubscribes.

Engagement and tracking

If tracking is enabled for your deployment:

  • We may embed a tracking pixel in outbound HTML so you can see whether a message was opened (approximate; opens can be blocked by mail clients).
  • We may check your mailbox (Gmail API or IMAP) to detect replies to messages you sent through the service.

Each sent message can include an unsubscribe link. When a recipient uses it, we record their address on your suppression list so you do not email them again from this workspace.

Technical logs

  • Basic server logs (IP address, user agent, timestamps) for security and debugging.
  • We do not intentionally log your email passwords or unencrypted OAuth secrets.

How we use information

We use data to:

  • Provide the service (authenticate you, connect your mailbox, send approved drafts, show analytics).
  • Enforce one seat per subscription and sender lock (only your connected identity may send).
  • Process payments through Stripe.
  • Comply with law and respond to valid legal requests.

We do not use your Gmail data to train generalized AI models or for advertising unrelated to operating Nexus Mail.

Where applicable, we rely on: contract (providing the service you signed up for), legitimate interests (security, abuse prevention, product improvement), and consent where required (e.g. connecting Google account via OAuth).

Third-party services

Provider Purpose
Google Gmail OAuth and Gmail API when you choose Google connect
Stripe Subscription payments and customer billing portal
Your SMTP host Sending mail when you use custom SMTP
Hosting provider Running the application and database you deploy

Each third party has its own privacy policy. Google’s use of data from Gmail APIs is also subject to the Google API Services User Data Policy.

Data retention

  • Account data is kept while your account is active and for a reasonable period afterward for legal and backup purposes.
  • Disconnecting your mailbox removes active use of tokens; encrypted token data is deleted or overwritten as part of disconnect flows.
  • You may request deletion of your account by contacting support@logiclayerhq.com; we will delete or anonymize personal data except where we must retain records for law, tax, or dispute resolution.

Security

  • Mailbox tokens and SMTP secrets are encrypted at rest.
  • Sessions use HTTP-only cookies.
  • You are responsible for keeping your account password confidential and for activity under your seat (including imported contact lists).

No method of transmission or storage is 100% secure; we work to protect data using reasonable industry practices.

Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object or withdraw consent where processing is consent-based.

  • Disconnect mailbox — Setup & mailbox in the app.
  • Unsubscribe handling — Recipients use the link in your emails; you manage outreach content and lists.
  • Account deletion — Email support@logiclayerhq.com.

We will respond to verified requests within a reasonable time.

Children

Nexus Mail is not directed at children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect data from children.

International transfers

If you use the service from outside the country where our servers run, your data may be processed in that hosting location. We take steps appropriate to the risk when transferring data.

Changes

We may update this policy. We will post the new version at https://mail.logiclayerhq.com/privacy and update the “Last updated” date. Continued use after changes means you accept the updated policy where permitted by law.

California (CCPA) notice

We do not sell personal information. California residents may contact support@logiclayerhq.com to request access to or deletion of personal information we hold about them, subject to exceptions under law.