Privacy

The important part first

Selva Mail runs in your own AWS account and sends through your own Amazon SES account. Your contacts, your email content, your event logs and your subscriber data live in your database, on your infrastructure. None of it is transmitted to us. We have no access to your deployment, no telemetry from it, and no ability to read it.

For data held inside your deployment, you are the data controller. Your obligations to your own subscribers under GDPR, LGPD or any equivalent regime are yours, and we are not a processor of that data because we never receive it.

What this website collects

This site is static. The cost calculator runs entirely in your browser — the figures you type are never transmitted anywhere, to us or to anyone else.

It is hosted on Vercel, which keeps standard server access logs including IP addresses, for its own operational and security purposes.

Almost every asset is served from this domain. Fonts are self-hosted rather than loaded from Google Fonts, and there are no embeds, social widgets or comment systems. The one exception is the Meta advertising pixel described below, which your browser loads from Facebook. Apart from that, loading a page here does not cause your browser to contact anyone but Vercel.

Analytics

We use PostHog to count page views and see which pages people find useful. It is proxied through this domain: your browser sends analytics to selva.run/ingest, never to PostHog directly. We forward those events to PostHog, which processes them on our behalf.

What that means in practice:

• PostHog sets a first-party cookie so a repeat visit is not counted as a new person. It holds a random identifier and nothing about you.
• We do not record your session. Session replay is switched off, so nothing captures your screen, your typing or your mouse.
• Anonymous visitors get no person profile. PostHog is configured for identified users only, and this site never identifies anyone.
• We honor Do Not Track. If your browser sends that header, analytics does not run at all.
• Our server counts checkouts. When a checkout starts, expires or is paid, Polar tells our server and we record a count in PostHog. This carries no personal data — not your email address, not your name. It is keyed to the checkout, not to you, and it exists so we can see how many people reach the payment page versus how many finish. If you abandon a checkout, we record that you got as far as entering an email, never which email; that stays with Polar.

Advertising

We run ads on Facebook and Instagram, and we use Meta’s pixel to find out whether they work. This one is not proxied: your browser loads it from connect.facebook.net and reports back to Meta directly. We would rather it did not, and we are telling you plainly instead of burying it.

What it does:

• It records that a page was viewed, and separately that someone opened the checkout or completed a purchase. It does not receive your name, your email address or anything you type on this site.
• It sets cookies, so Meta can connect a visit here to an ad you saw there. That is the whole point of it, and it is the part most people object to.
• Meta is a controller of that data in its own right, not our processor. What Meta does with it is governed by Meta’s privacy policy, not by this one.
• We honor Do Not Track here too. If your browser sends that header, the pixel is never loaded. You can also block it with any content blocker, or turn off off-Meta activity in your Facebook settings, and nothing on this site will break.

The part a blocker cannot stop

There is one exception to everything above, and it is the one worth reading carefully. When you complete a purchase, our server tells Meta about it directly — not your browser. Blocking scripts, clearing cookies and Do Not Track have no effect on it, because it does not happen in your browser at all.

Being specific about what that is and is not:

• It only fires on a completed purchase, after Polar confirms payment. Nothing about browsing this site is reported this way — not pages you read, not the calculator, not the checkout you opened and abandoned.
• What is sent: your email address hashed (SHA-256, so Meta can match it against an account it already has, but cannot read it), the order value, and the currency. Not your name, not your address, not anything about your card.
• Why: browser-based measurement is unreliable enough that we could not otherwise tell whether an ad led to a sale. We would rather report one honest number from our own server than guess.
• If you do not want this, do not buy through our advertising — or email hi@selva.run and we will delete the event. Meta’s off-Facebook activity controls also cover it.

If we stop advertising, the pixel comes off the site, the server-side reporting stops, and this section comes off this page.

When you buy

Purchases are processed by Polar. When you buy Selva Mail, Polar collects the information needed to take payment and issue an invoice, including your email address and billing details. Payment card details are handled by Polar and its payment providers; we never receive or store them. Polar's own privacy policy governs their handling of that data.

We receive your email address and purchase record so that we can deliver the software, provide support, and send you updates about the product you bought.

When you email us

If you email hi@selva.run we keep the correspondence so we can help you, and for as long as it is useful to do so.

What we do not do

• We do not sell or rent personal data to anyone.
• We do not add you to a marketing list because you bought something. Marketing email requires a separate opt-in.
• We do not use the advertising pixel to build audiences from anything other than pages you visited here. We do not upload customer lists to Meta.
• We do not phone home from your Selva Mail deployment.

Your rights

You can ask what we hold about you, ask us to correct it, ask us to delete it, and ask for a copy. Email hi@selva.run. For data held inside your own Selva Mail deployment, those requests go to you, not to us — we cannot action them because we cannot reach the data.

Contact and controller

The data controller is ID49 Digital, LLC, a Wyoming limited liability company, of 7345 W Sand Lake Rd, Ste 210, Office 8092, Orlando, FL 32819, United States.

Questions: hi@selva.run