Sitelet https://unlayer.com/privacy
Unlayer
Legal

Privacy policy.

Last updated · May 23, 2026

Introduction

We at Unlayer, Inc., an email marketing company ("Unlayer" or "we"), respect your concerns about privacy.

This policy describes the types of information we collect from you when you visit https://unlayer.com/ (including any third-level-domain and sub-domains) ("Website"), how we use the information, with whom we share it and the choices available to users of our Website regarding our use of the information. We also describe our practices for protecting that information and how you can contact us about our privacy practices.

If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, or any of the services it provides, you agree to this Privacy Policy. This policy may change from time to time (see Changes to our Privacy Policy). Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

This online Privacy Policy applies only to information collected through our Website and not to information collected offline.

Our Website allows you to access the following services ("Services"):

  • An online email builder named "Unlayer" that enables users to create, save and edit responsive email using a drag-&-drop user interface ("Unlayer");
  • A JavaScript web plugin named "Unlayer" that is a web plugin, easily embeddable in other software applications, and used for the purpose to allow users of those applications to create email messages using a drag-&-drop user interface ("Unlayer");
  • An online community that users can use to ask and find information about our Services ("Community");
  • A newsletter to get regular updates from us ("Newsletter");
  • Artificial intelligence-powered features ("AI Features"), including the AI Assistant, AI Template Importer, and related AI-powered tools that help users generate and optimize content within the editor. This Privacy Policy describes how we collect, use, and share information in connection with your use of the AI Features, in addition to our general data practices.

Information we collect about you and how we collect it

We collect several types of information from and about users of our Website, including information by which you may be personally identified, such as name, postal address, e-mail address, and telephone numbers; and about your Internet connection, the equipment you use to access our Website and usage details.

We collect this information directly from you when you provide it to us, or automatically as you navigate through the Website. Information collected automatically may include usage details, IP addresses, and information collected through cookies and other tracking technologies.

In connection with the provision of the Services, Unlayer collects and stores the following information ("Information"):

  • Anonymous information from visitors to these Website. We use this information to run our Website more effectively and improve it over time. For example, we may detect the type of browser you are using and use that information to redirect you to a section of the Website that works best for your browser, and use the same information to increase browser compatibility over time.

Similarly, we may attempt to detect your geolocation and direct you to a version of the Website that is written in a language that might better match your needs.

We reserve the right to maintain, use, and share Anonymous Information without limitation.

  • Personal Information related to the use of Unlayer (e-mail address and password) from users that elect to use Unlayer. We use this information in order to communicate with you and fulfil our contractual obligations.
  • Billing Information related to the use of Unlayer (name, surname, VAT code, address) from users that request an official invoice: if you request an official invoice, we may use this information in order to fulfil your request. Anyway, we will never collect and store your credit card number.
  • Personal Information related to the use of Unlayer (e-mail address of the recipient and email content) from users that elect to use Unlayer. We may process and store for statistical, legal and quality analysis all data deriving from the use of Unlayer. We may use and diffuse, only in aggregate form, the results of these analyses. As owner of these aggregated data, we will take care to assure the full anonymization of the analysed data to avoid any processing and diffusion or communication.
  • Personal Information related to the use of our Community (e-mail address), from users that request information about our Services. We use this information in order to communicate with you.

How we use and disclose your information

We use Information that we collect about you or that you provide to us, including any personal information:

  • To provide you with information, products, or services that you request from us;
  • To process your payments and to create and manage your account;
  • To send you our newsletter, unless you opted out;
  • To respond to your inquiries;
  • To perform data analysis (including anonymization and aggregation of personal information);
  • To operate, evaluate and improve our business (including developing new products and services; enhancing and improving our products and services; managing our communications; analysing our products and customer base; performing data analytics; and performing accounting and other internal functions);
  • To protect against, identify and prevent fraud and other unlawful activities, claims or liabilities;
  • To comply with and enforce applicable legal requirements, relevant industry standards and our policies.

Information We Collect Through AI Features

AI Inputs. When you use the AI Features, we collect the text, design content, images, or other information you submit as prompts or inputs ("AI Inputs"). AI Inputs may include personal data depending on the content you choose to submit.

AI-Generated Content. We may temporarily process the outputs generated by the AI Features in response to your AI Inputs ("AI-Generated Content") in order to deliver those outputs to you within the editor.

AI Usage Data. We collect metadata about your use of the AI Features, including the type of AI Feature used, the number of AI Credits consumed, timestamps of AI Feature requests, model and provider information, and performance metrics ("AI Usage Data"). AI Usage Data does not include the content of your AI Inputs or AI-Generated Content.

Data Retention. AI Inputs and AI-Generated Content are retained for no longer than 30 days after processing by our Third-Party AI Providers, and may be retained for shorter periods depending on the policies of the specific provider processing your request. Retention periods vary by provider. Current retention windows for each AI Sub-Processor are listed at unlayer.com/subprocessors. After the applicable retention period, data is automatically deleted, unless longer retention is required by law or is necessary for the investigation of abuse or violations of our Terms of Service. AI Usage Data (metadata only, not the content of your prompts or outputs) may be retained for longer periods in anonymized or aggregated form for analytics and service improvement.

How AI Inputs Are Processed

When you use the AI Features, your AI Inputs are transmitted to third-party AI service providers ("Third-Party AI Providers") for processing. These providers generate the AI output and return it to Unlayer, which delivers it to you in the editor.

To provide the AI Features, we currently transmit AI Inputs to the following third-party AI service providers:

  • OpenAI, L.L.C. — for text generation, content rewriting, layout suggestions, and related AI Features. OpenAI Privacy Policy
  • Anthropic, PBC — for text generation, content rewriting, layout suggestions, and related AI Features. Anthropic Privacy Policy

Unlayer reserves the right to add, change, or remove Third-Party AI Providers at any time. A current and complete list of Third-Party AI Providers, including links to their applicable privacy policies, is maintained at unlayer.com/subprocessors or is available upon request by emailing support@unlayer.com.

These third-party providers are contractually bound to:

  • Process your data solely for the purpose of providing the AI Features;
  • Not use your data to train, improve, or fine-tune their models;
  • Implement appropriate technical and organizational security measures;
  • Delete your data after processing in accordance with agreed retention schedules.

Data processed by third-party AI service providers may be transmitted to and processed in the United States or other jurisdictions where such providers maintain infrastructure. For customers in the European Economic Area, data transferred to AI Sub-Processors in the United States is protected by Standard Contractual Clauses (SCCs) in accordance with GDPR requirements. For customers in the United Kingdom, data transferred to AI Sub-Processors in the United States is protected by the UK Addendum to EU Standard Contractual Clauses, in accordance with UK GDPR requirements.

No Training on Your Data

Unlayer's agreements with all Third-Party AI Providers prohibit those providers from using your AI Inputs or AI-Generated Content to train, fine-tune, or otherwise improve their artificial intelligence models. Your data is processed solely to generate the AI output you requested and is not used for any other purpose by our AI Sub-Processors.

How We Use and Disclose Your Information (AI Features)

We use information collected in connection with the AI Features to:

  • Transmit AI Inputs to Third-Party AI Providers and deliver AI-Generated Content to you within the editor;
  • Monitor and enforce compliance with our AI Features Terms of Use (Section 4A of the Terms of Service);
  • Calculate and apply AI Credit consumption and bill AI Usage Fees in accordance with your Subscription Plan;
  • Improve and develop the AI Features using anonymized, aggregated AI Usage Data (we never use the content of your AI Inputs or AI-Generated Content for this purpose);
  • Investigate abuse, violations of our Terms of Service, or other misuse of the AI Features;
  • Comply with applicable legal obligations.

We do not sell your AI Inputs or AI-Generated Content to third parties. We do not share AI Inputs with third parties except as necessary to provide the AI Features (i.e., with Third-Party AI Providers as described above) or as required by law.

Legal Basis for Processing (EU and UK Customers)

Where the EU GDPR or UK GDPR applies, we process personal data in connection with the AI Features on the following legal bases:

  • Performance of contract (Art. 6(1)(b)): Processing AI Inputs is necessary to deliver the AI Features you or your users have requested.
  • Legitimate interests (Art. 6(1)(f)): We retain anonymized AI Usage Data (metadata only, not the content of AI Inputs or outputs) for service improvement and analytics. Our legitimate interest in improving the service is balanced against the minimal privacy impact of processing aggregated, non-identifiable data.

AI-Specific Security Measures

AI Inputs transmitted to third-party AI service providers are encrypted in transit using TLS 1.2 or higher. Access to AI processing systems and logs is restricted to authorized personnel on a need-to-know basis. We implement data minimization practices, transmitting only the data necessary to fulfill each AI Feature request. We regularly review the security practices of our third-party AI service providers and require them to maintain appropriate technical and organizational measures to protect your data.

Automated Processing and AI

The AI Features generate content automatically based on your inputs. This automated processing is intended to assist you in creating and optimizing content and does not produce legal effects or otherwise significantly affect you in a legal sense. You are always able to review, modify, reject, or replace any AI-Generated Content before using or publishing it.

To the extent Article 22 of the EU GDPR or equivalent provisions of applicable data protection law apply to any processing carried out in connection with the AI Features, you have the right to request human review of any automated decision that significantly affects you. To exercise this right, please contact us at support@unlayer.com.

Sensitive Data and AI Features

We ask that you do not submit sensitive personal data through the AI Features. Sensitive personal data includes, without limitation:

  • Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs;
  • Genetic or biometric data;
  • Health or medical information;
  • Sexual orientation or gender identity;
  • Financial account credentials, payment card data, or government-issued identification numbers;
  • Any other category of data designated as "sensitive" or "special category" personal data under applicable Data Protection Laws.

If you choose to submit sensitive personal data through the AI Features, you do so at your own risk and represent that you have all rights, consents, and authorizations necessary to do so under applicable law. Unlayer is not responsible for the processing of sensitive data you choose to include in your AI Inputs.

Disclosure of your Information

We never use or share Personal Information in ways unrelated to the ones described in this Privacy Policy, and we will not do so in the future without providing you an opportunity to opt-out or otherwise prohibit such unrelated uses.

We do not collect any unnecessary volume of information, or any unnecessary information, or any information that is unsuitable for achieving the purpose described above. However, the Information you have provided to us may be transferred to another party in connection with an acquisition of our company.

We do not sell or otherwise disclose personal information we collect about you, except as described in this Privacy Policy. We never use or share personal information in ways unrelated to the ones described in this Privacy Policy, and we will not do so in the future without providing you an opportunity to opt-out or otherwise prohibit such unrelated uses.

We do not collect any unnecessary volume of information, or any unnecessary information, or any information that is unsuitable for achieving the purpose described above.

However, we may transfer the information you have provided to us if another party purchases all or a share of Unlayer.

Email and Newsletter Policy

We comply with the federal CAN-SPAM Act of 2003. We will not send you marketing messages if you have opted out. You can choose not to receive messages in the future by following the "unsubscribe" instructions located near the bottom of each email. We will not share, sell, rent, swap or authorize any third party to use your email address for commercial purposes without your permission. If you feel you have received an email from us in error, please contact support@unlayer.com.

Security measures

We use security measures – such as storing your Information in an encrypted format and aggregate form – to avoid the misuse of such Information. In particular, we use Asymmetric Public Key Encryption RSA technology and our database is accessible only by authorized people with special access rights, who are required to keep the information confidential.

However, the safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website, you are responsible for keeping said password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Website like message boards. The information you share in public areas may be viewed by any user of the Website.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website.

Third party links

Occasionally, at our discretion, we may include or offer third party products or services on our Website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our Website and welcome any feedback about these sites.

Credit card number and billing information

With regard to payment information for Unlayer subscriptions, we use Stripe as the recurring billing platform and payment gateway. They are Level 1 PCI Compliant providers, the highest level a business can attain. You can find more information at https://stripe.com/us/privacy.

How we respond to Do Not Track signals

We may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking). Certain web browsers allow you to instruct your browser to send Do Not Track ("DNT") signals to websites you visit, informing those sites that you do not want your online activities to be tracked. We do not currently respond to those signals. If you block cookies, certain features on our sites may not work. If you block or reject cookies, not all of the tracking described here will stop.

Accessing and correcting your Information

You can review and change your Information by logging into the Website and visiting your account profile page. You may also send us an e-mail at: support@unlayer.com to request access to, correct or delete any personal information that you have provided to us. We cannot delete your personal information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

AI-Specific Data Rights. In addition to your general data rights, you may request access to, correction of, or deletion of AI Inputs associated with your account. To submit such a request, please contact us at support@unlayer.com. We will respond to such requests in accordance with applicable Data Protection Laws. Please note that AI Inputs already transmitted to Third-Party AI Providers are subject to those providers' own retention and deletion schedules, as listed at unlayer.com/subprocessors.

Embed End-Users. If you are an end user of a business that has embedded Unlayer into its own application ("Embed Deployment"), your data rights requests related to AI Features should be directed to that business, which is the data controller responsible for your personal data. Unlayer processes AI Inputs in Embed Deployments on behalf of that business as a data processor, and will respond to data subject requests forwarded to us by the relevant controller.

Account Deletion. When you delete your Unlayer account, AI Inputs and AI-Generated Content associated with your account that are retained by Unlayer will be deleted within 90 days of the account deletion date. AI Usage Data retained in anonymized or aggregated form is not linked to your account and is not affected by account deletion. Note that AI Inputs already transmitted to Third-Party AI Providers are subject to those providers' own retention and deletion schedules, as listed at unlayer.com/subprocessors.

Changes to our privacy policy

It is our policy to post any changes we make to our Privacy Policy on this page with a notice that the Privacy Policy has been updated on the Website home page. If we make material changes to how we treat our users' personal information, we will notify you by posting a prominent notice on our Website indicating at the top of the Notice when it was most recently updated. The date the Privacy Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable e-mail address for you, and for periodically visiting our Website and this Privacy Policy to check for any changes.

This policy was last modified on May 23, 2026. We have substantially modified our Privacy Policy to add the AI Features sections and related compliance disclosures. Please read the new policy in its entirety.

Your consent

BY USING OUR SITE, YOU ACCEPT OUR PRIVACY POLICY.

Contact Information

If you have questions or concerns about this Privacy Policy and our privacy practices, you can contact Unlayer, Inc. at support@unlayer.com or by using the following address:

Unlayer, Inc.

2261 Market Street STE 4667,
San Francisco, CA 94114