indiecast

Privacy Policy

Last updated June 28, 2026

indiecast ("we", "us") is an email marketing tool for independent developers. This policy explains what data we store, why, and how you can control it. It covers two kinds of people: account holders who sign up to send email, and contacts whose details account holders upload in order to email them.

Data we collect

For account holders, we store the email address you sign in with and your workspace settings (sending name, reply-to address, sending domain, branding, and billing status).

For contacts, we store the data you import or add: email address, optional name, tags, and any custom fields you choose to include. We also record sending activity: when a message was sent, whether it was opened (via a tracking pixel embedded in the email), and whether it bounced, was marked as spam, or was unsubscribed.

Where your data is stored

Contact records and all account data are stored in a Supabase (PostgreSQL) database. The application runs on Cloudflare Workers. We use these subprocessors to operate the service:

  • Supabase: database and authentication for account and contact data.
  • Amazon Web Services (SES): delivery of the email you send.
  • Cloudflare: application hosting and content delivery.
  • Stripe: subscription billing (we never store your card details; Stripe does).

Bulk email sending

When you send a campaign or sequence, we transmit each recipient's email address and the message content to Amazon SES for delivery. Every email we send on your behalf includes a one-click unsubscribe link and a standards-compliant List-Unsubscribe header. When a contact unsubscribes (through the link, the header, or because they marked a message as spam), we suppress them and exclude them from all future sends.

As an account holder, you are the controller of your contact data and are responsible for having a lawful basis and the consent required to email the people you upload. See our Terms for details.

How we use data

  • To deliver the email you create and send.
  • To show you delivery, open, bounce, and unsubscribe statistics.
  • To protect deliverability, e.g. pausing sending when bounce or complaint rates are unhealthy.
  • To operate billing and provide support.

We do not sell personal data, and we do not use the contacts you upload for any purpose other than running the service for you.

Retention and deletion

We keep account and contact data for as long as your workspace is active. You can delete individual contacts at any time from the Contacts page, which removes them from our database. To close your account and have all associated data deleted, email us at the address below.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. If you are a contact who received email through indiecast and want to be removed, use the unsubscribe link in that email, or contact the sender directly. For any other request, email us and we will respond.

Security

Data is encrypted in transit. Access to the production database is restricted, and unsubscribe links are signed so they cannot be forged. No system is perfectly secure, but we take reasonable measures to protect your data.

Contact

Questions about this policy or your data? Email son@sonokinetic.com.