Privacy policy

Last updated 6 November 2026

This policy explains what personal data Code Craft (we, us) collects when you use ultraemailer.org and buy Ultra Email, Ultra SMS or Ultra WhatsApp, and how we use, store and protect it. We keep it in plain English on purpose.

Data we collect

We collect only what we need to serve you:

Contact details you give us: name and email when you buy, sign in or write to us.
Order details: the product, plan, price, currency, order reference and payment method (never full card numbers; payments are processed on the secure page of the payment provider you choose).
Licence data: the key issued to you and, when an app activates, the number of devices using it, so we can enforce the licence limit.
Messages you send through the contact form, and one-time sign-in codes (stored only as a hash and valid for 10 minutes).
Evidence that you authorized a purchase, recorded at checkout and described below.
Technical data in server logs, such as IP address and browser type, used for security and to limit abuse.

Evidence recorded when you buy

At checkout you sign an agreement electronically, and a signed agreement and certificate are produced for the order. We use the details below only to prove that the purchase was authorized, to handle disputes (such as a chargeback) and for record keeping. We do not use them for marketing or analytics.

A copy of the agreement PDF is stored with the order and emailed to you and to the store owner. The public /verify/<record id> page shows no personal data.

Your typed full name, as your electronic signature, and your email address.
Your IP address and your browser's user agent.
Device information: platform, language, time zone and screen size.
How many seconds you spent on the form, and whether you opened the terms.
The exact authorization text you agreed to, its version, and timestamps.

What stays on your device

The apps store your contacts, templates, campaigns and the credentials of the accounts you connect on your own device. We do not receive them. The apps contact us only to check your licence and to look for updates.

Your providers

When you send, the apps pass your messages and recipients' details directly to the provider you connected, which processes them under its own terms and privacy policy, not ours: your mail provider (Ultra Email), your SMS gateway (Ultra SMS), or Meta's WhatsApp Business Cloud API and any Business Solution Provider you use (Ultra WhatsApp). You are the controller of your recipients' data and are responsible for having a lawful basis to message them.

Our apps on Google Play

The Google Play editions are listed as Ultra SMS, Ultra Business Messenger (the Play name of Ultra WhatsApp) and Ultra Email. They work the same way as described above:

Contacts, messages, templates, history and provider keys are stored on your phone. Keys are kept in the phone's secure keystore and sent only to the provider they belong to, over HTTPS.
Messages and recipients' details go from your phone directly to the provider you connected; Code Craft does not receive them.
Pro subscriptions are bought and managed through Google Play; Google processes the payment and we receive no card or payment details.
If you activate a licence key, the app sends the key, the product name and a random device ID created by the app (not your phone's hardware ID) to our licence server, to enforce the device limit. Without a key the app never contacts us.
The apps contain no advertising and no analytics or tracking tools.

How we use it

Deliver your purchase: issue and email your licence key, show it in your account, and send renewal reminders.
Support you: answer questions and diagnose problems.
Protect the service: rate-limit sign-in and forms, and prevent fraud and licence abuse.
Prove a purchase was authorized and answer payment disputes, using the checkout evidence described above.
Meet legal and tax obligations.

Who handles your data

Code Craft runs this store. Your name, email and order amount go to the payment provider you choose at checkout (PayGlocal, Razorpay or NOWPayments), which processes the payment. Our own licence server issues your key and enforces the device limit. Email delivery and hosting providers process what they need to send our messages and run the site.

What we never do

We do not sell personal data. We share it only with the processors needed to run the service (payment providers, email delivery, hosting), each bound by their own data-protection obligations, and with the optional tag providers below if you accept them.

Our own analytics

Our first-party analytics run on our own server, set no cookies and send nothing to another company. Stored for each page view:

The page path (never the query string), the time and which of our domains you visited.
The referring website's domain, not its full address, and any UTM campaign tags in the link.
Your device class: mobile, tablet or desktop.
Your country, only if our CDN supplies a country header.
A visitor hash made from your IP address, your browser's user agent and a random salt that changes every day. The salt is deleted the next day, so the hash cannot be reversed or linked across days. Your IP address and user agent are not stored in these records.
Nothing at all if your browser sends Do Not Track or Global Privacy Control. Bots, admin pages and visits by signed-in team members are skipped too.

Affiliates and resellers

If you join a partner programme we keep your application, code, earnings and payment details, to run the programme and pay you. If you arrive through an affiliate's link, we set a cookie holding that affiliate's code and link your order to them, so they can be paid. The affiliate sees that a sale happened and its amount, not your name or email. If a reseller assigns a key to you, they see your email, the key and its device count.

Download records

When you press a download button we keep a record so we can see which apps are wanted and answer support questions:

The app, platform, file and version, the time and which of our domains you used.
Your IP address, and your email if you are signed in to My account.
Your device class, operating system, browser name and country (if our CDN supplies one).
The page you started from and the referring website's domain.
Only the anonymous count if your browser sends Do Not Track or Global Privacy Control. Bots and our team's clicks are not recorded.

Optional third-party tags

Google Analytics 4, Google Tag Manager, Microsoft Clarity, Meta Pixel and Google Ads can be connected to this site. They load only after you accept them in the cookie banner, and Google Consent Mode v2 is set to denied until you do. When no ID is set, there is no banner and no third-party code.

If you accept, those companies receive data about your visit, such as your IP address, browser and the pages you view, under their own privacy policies.
On the page shown after a paid order, the tags you accepted receive the amount and currency, and Google's tags also receive the order reference. Your name and email are not sent to them.
Change your mind at any time with the Cookie settings button on the page.

Cookies

We set one strictly necessary cookie to keep you signed in to My account, and another to keep team members signed in to the admin panel. Our own analytics use no cookies; the optional tags above can set cookies only after you accept. See the cookie notice.

Admin sign-ins

For the security of the admin panel we record each attempt to sign in to it:

Login history: email, IP address, browser and operating system, time, whether it worked (and why not), and which of our domains was used.
Admin sessions: a hash of the session token, IP address, browser and operating system, and times of creation and last use.
An audit log of actions taken by team members, with the team member's email and the time.

Retention

How long each kind of record is kept. Where no automatic deletion is mentioned, the record stays until we delete it by hand, including when you ask us to.

Order and licence records, the signed agreement and the checkout evidence: while your licence is active and for the period tax law requires, and at least as long as a payment can be disputed.
Contact-form messages: kept so we can refer to earlier conversations, until we delete them or you ask us to.
Analytics rows: deleted automatically after 400 days. The daily salt is deleted the next day.
Partner records: kept while your account is open and as long as tax law requires. Referral clicks, which hold no IP address, are deleted after 400 days.
Download records: the IP address is erased after 90 days and the rest of the record is deleted after 400 days.
Rate-limit rows, which can hold an IP address or an email address: deleted automatically after 24 hours.
My account sessions: valid for 14 days and deleted when you sign out. Expired ones are cleared when someone next signs in.
Sign-in codes: deleted as soon as they are used and useless after 10 minutes. The hash of an unused code stays until you ask for another code or try it again.
Admin login history: only the latest 2,000 entries are kept. Admin sessions end after 12 hours and expired ones are cleared at the next admin sign-in. The record of failed attempts, which holds only a hash of the IP address, is cleared after 15 minutes.
Admin audit log: no automatic deletion.
Server logs: handled by our hosting provider on its own schedule.

Your rights

Wherever you live, we honour these rights:

Access: a copy of the personal data we hold about you.
Correction: fix inaccurate or incomplete data.
Deletion: ask us to delete your data, subject to legal retention duties.
Portability: receive your data in a machine-readable format.
Objection: opt out of marketing at any time.

Delete your data

This applies to Ultra Email, Ultra SMS and Ultra WhatsApp (Ultra Business Messenger on Google Play), all by Code Craft.

Data in the app (contacts, lists, templates, campaigns, history and connected accounts) is stored only on your device. Delete it inside the app, clear the app's storage, or uninstall the app; it is then gone, and we never had a copy.
Data held by your provider (for example Twilio, Meta or Brevo) is deleted through that provider's account settings.
Data we hold (your order and licence record, account email, the random device IDs linked to your licence key, and contact-form messages): email contact@ultraemailer.org from the address you used, with the subject "Delete my data". We delete it within 30 days and confirm by email. Order and invoice records, the signed agreement and the checkout evidence that we must keep for tax law or payment disputes are kept only for that period and then deleted.
To free a device without deleting everything, deactivate the licence in the app.

Security

Data in transit is encrypted with TLS. Sign-in codes are stored hashed and expire after 10 minutes, sessions use a secure HTTP-only cookie, and access to customer data is limited to team members who need it. If a breach ever affects your data, we will tell you promptly.

International transfers

We serve customers worldwide. Where data crosses borders to our processors, we rely on their standard contractual protections and choose providers with strong compliance records.

Contact

Write to contact@ultraemailer.org for any privacy request. Changes to this policy are shown by the date above, and material changes are emailed to account holders.