Who this covers
Bobb serves two kinds of people, and we handle data differently for each:
- Customers — the businesses and individuals who sign up for a Bobb account to send newsletters.
- Subscribers — the people who receive newsletters sent through Bobb by our customers. For most subscriber data, our customer is the data controller and Bobb is the processor acting on their instructions.
What we collect
From customers: name, email, company, billing details (processed by our payment provider — we do not store full card numbers), the contacts and content you upload, and usage data about how you use the product.
From subscribers: email address, any name or company provided, how the subscription was created (the signup source), engagement events (clicks, replies, and opens), and consent metadata such as the timestamp, IP address, and browser used at signup. We keep one profile per email so we can honor opt-outs reliably and make recommendations relevant.
How we use it
- To send the newsletters and recommendations a subscriber asked for.
- To operate, secure, and improve the product.
- To maintain deliverability and protect against abuse, fraud, and spam.
- To verify email addresses at import so dead and disposable addresses are dropped.
- To provide support and communicate with customers about their account.
- To meet legal, tax, and compliance obligations.
What we do not do
We do not sell personal data.We don't rent your contacts, and we don't use one customer's list to benefit another customer beyond the opt-in recommendation network described below. A subscriber only ever joins another newsletter by their own action — clicking subscribe or confirming.
The recommendation network
Bobb runs an opt-in recommendation network: subscribers can discover related newsletters with one click, and a customer's newsletter can be recommended back. Every add is engagement-gated and carries one-click opt-out. No one is added to a list without an explicit action of their own.
Service providers we use
We rely on a small set of trusted infrastructure providers to run Bobb, including email delivery (e.g. Resend and Amazon SES), data storage and database hosting (e.g. Supabase and AWS), payment processing, and product analytics. These providers process data only to provide their service to us and are bound by their own data-protection terms.
Data retention
We keep customer and subscriber data for as long as the account is active or as needed to provide the service. When a customer closes their account, we delete or anonymize their data within a reasonable period, except where we must keep records to meet legal obligations. Suppression records (unsubscribes and complaints) may be retained to keep honoring opt-outs.
Your rights and controls
Every email Bobb sends includes one-click unsubscribe. A preference center lets a subscriber pause or leave individual newsletters, export their data, or delete it entirely. Depending on where you live, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. Customers can exercise these for their own account in-app or by contacting us. Subscribers should contact the newsletter that emailed them, or reach us and we'll route the request.
Security
We use encryption in transit, access controls, and reputable infrastructure providers to protect data. No system is perfectly secure, but we work to limit access to personal data to what's needed to run the service.
International transfers
Bobb is operated from the United States, and data may be processed there and in the regions our providers operate. Where required, we rely on appropriate safeguards for cross-border transfers.
Children
Bobb is a business tool and is not directed to children under 16. We don't knowingly collect their personal data.
Changes to this policy
We may update this policy as the product evolves. When we make material changes, we'll update the date above and, where appropriate, notify customers.
Contact
Questions about privacy or a data request? Email nathan@trybobb.com. See also our Terms of Service.