Privacy Policy
This policy explains what personal data Messaging.Quest (Messaging Quest) collects, why, who we share it with, and the rights you have. We are the data controller for the data described here. Questions or requests: hello@messaging.quest.
1. Two kinds of people this covers
Messaging.Quest holds data about two groups, and it helps to keep them separate:
- Our customers — the people who sign up and run campaigns. That is data you give us to open and run your account.
- Business contacts in a campaign — the people our agents find from public sources so you can reach out to them. This is always business contact information at companies (a work email and role), never consumer profiles.
2. What we collect and why
Account data — your email address and sign-in details, so we can create your account and authenticate you. Legal basis: performance of our contract with you.
Billing data — your plan and payment status. Card details are entered directly with Stripe and are never stored on our servers. Legal basis: contract and our legitimate interest in getting paid.
Campaign data you create — your company description, target criteria, contact lists, and the messages you approve. Legal basis: contract (to provide the service).
Contact data our agents find — a public work email, name/role, employer, website, and the public evidence for why the contact matches your product. We verify each address before it can be used. Legal basis: the legitimate interest of you and Messaging.Quest in relevant B2B outreach, balanced against the contact’s rights (see section 7 for how a contact can object or be removed).
Usage and analytics — how the app is used, so we can improve it. Analytics cookies (PostHog) are on by default and you can turn them off anytime; see our Cookie Policy. Legal basis: our legitimate interest in improving the product, which you can object to at any time.
Support and messages — anything you send us (for example feedback or bug reports). Legal basis: our legitimate interest in running and supporting the service.
3. Cookies
We use a small set of essential cookies to run the app, plus analytics cookies that are on by default and that you can turn off anytime. The full list is in the Cookie Policy, and you can change your choice anytime from “Cookie settings” in the footer.
4. Who we share data with
We do not sell your data or share it for advertising. We share it only with the service providers (sub-processors) that make Messaging.Quest work, each under a data processing agreement and only for the purpose shown:
| Provider | What they do for us |
|---|---|
| Supabase | Database, authentication, and file storage (EU region) |
| Vercel | Application hosting and content delivery |
| Fly.io | Compute for the research and discovery agents |
| Stripe | Subscription billing and payment processing |
| SendGrid / Resend | Sending your campaign email and receiving replies |
| Spaceship | Registering your sending domains |
| MillionVerifier | Checking whether an email address is deliverable |
| OpenAI | The research and discovery agents that find matching companies |
| OpenRouter | AI models that draft message copy and domain-name ideas |
| PostHog | Product analytics (EU region) — on by default, can be turned off |
We may also disclose data where the law requires it, or to protect our rights, users, or the public.
5. International transfers
We host your core data (database, authentication, analytics) in the EU. Some providers may process data outside the EU/EEA; where they do, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
6. How long we keep it
We keep account and campaign data while your account is active and for as long as needed to provide the service, meet legal and accounting obligations, and resolve disputes. When you delete data or close your account, we delete or anonymise it within a reasonable period, except where we must retain some records (for example billing records). Suppression records (people who opted out) are kept so we can keep honouring the opt-out.
7. If you were contacted through Messaging.Quest
If you received a message sent through Messaging.Quest and want to be removed, use the one-click unsubscribe link in the email, or email hello@messaging.quest. We add you to a suppression list so you are not contacted again through our platform, and we can pass your request to the sender. You also have the rights in section 8, including the right to object to this processing.
8. Your rights
Under the GDPR you can ask to access, correct, delete, or export your personal data, and restrict or object to processing — including turning analytics off — at any time; this won’t affect processing done before you objected. To exercise any of these, email hello@messaging.quest. You also have the right to complain to your local data protection authority.
9. Children
Messaging.Quest is a business tool and is not intended for anyone under 18. We don’t knowingly collect data from children.
10. Changes
We’ll update this policy as the product and law change and will note the date above. If a change is material we’ll give reasonable notice.
11. Contact
For any privacy question or request, email hello@messaging.quest.