PegasusPrivacy Policy
Last updated: October 25, 2026
This policy explains how Glitch Software Development LLC ("we", "us"), a New Mexico limited liability company, handles personal information in connection with Pegasus, including this website and the app at app.pegasusemailmarketing.com (together, the "Service").
1. Two roles
Our customers' accounts. For people who sign up for Pegasus and their team members, we decide how their information is used. We are the controller.
Our customers' subscribers. Companies use Pegasus to email their own contacts. For those contacts, the company is the controller and we process the information only on its behalf and on its instructions (we are a processor). If you received an email sent through Pegasus, the sending company's own privacy policy applies; please contact them first. We will help them respond to your request.
2. Information we collect
- Account information: name, email address and password (stored only as a secure hash by our authentication provider), and the companies and team roles you set up.
- Company information: company name, website, postal address, sending domains and brand settings.
- Subscriber information our customers provide: email addresses, names and any other fields they import or collect through forms; subscription status and consent records (such as when and how someone subscribed or confirmed); and, where a store is connected, shopping activity such as carts, orders and products viewed.
- Email activity: whether emails were delivered, bounced, opened or clicked, and spam complaints, so that sending stays accurate and lawful.
- Technical information: IP address, browser and device information and logs created when you use the Service, used for security and troubleshooting.
3. How we use it
- To provide, secure and support the Service, including sending the emails our customers create.
- To honour unsubscribes, bounces and complaints permanently, and to enforce our Acceptable Use Policy (for example, pausing a company whose sending harms others).
- To send you service messages about your account, such as sign-in and security emails.
- To comply with law and respond to lawful requests.
We do not sell personal information, and we do not use our customers' subscriber data for our own marketing.
4. Legal bases (EU/UK)
Where the GDPR or UK GDPR applies, we rely on performance of our contract with you for account data, our legitimate interests in running a secure and reputable email service, and legal obligation where it applies. For subscriber data, the sending company is responsible for having a lawful basis, such as consent.
5. Service providers
We use these providers to run the Service. They process data only to provide their services to us.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication and application hosting | European Union (Frankfurt) |
| Amazon Web Services (Amazon SES) | Email delivery | United States |
| Resend | Email delivery | European Union (Ireland) |
| Cloudflare | Website and app hosting, security | Global network |
Where personal information moves outside the EU/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. Cookies and tracking
This website does not use advertising or analytics cookies. The app stores what is needed to keep you signed in. Emails sent through Pegasus may include a small image and link redirects that tell the sending company whether an email was opened or clicked. Our shop plugin can set a first-party cookie on the store's own website to connect browsing to a subscriber who clicked an email; stores that use it are responsible for disclosing it to their visitors.
7. Retention
- Account and company data: while the account is active, and deleted after the account is closed unless we must keep it by law.
- Delivery event logs: 180 days.
- Unsubscribe, bounce and complaint records: kept permanently, because they are how we make sure someone who opted out is never emailed again.
- Subscriber data: for as long as the sending company keeps it in Pegasus; deleting a contact or company removes it, except the suppression records above.
8. Security
Data is encrypted in transit, access is restricted by role and by company, secrets are stored encrypted, and every company's data is separated from every other's at the database level.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to complain to a data protection authority. To use these rights for your account, contact us at the address below. If you are a subscriber of one of our customers, contact that company; you can also always use the unsubscribe link in any email.
10. Children
The Service is for businesses and is not directed to children under 16.
11. Changes
We will post any changes on this page and update the date above. For significant changes we will tell account holders by email.
12. Contact
Glitch Software Development LLC
867 Boylston Street, 5th Floor, Boston, MA 02116, USA
Email: support@pegasusemailmarketing.com