Privacy Policy

Last updated: 10 November 2026

This policy explains what personal data MadFang collects, why we collect it, who we share it with, and the rights you have over it. It covers madfang.com and the MadFang Mailer, the tool we use to send email on behalf of our clients.

1. Who is responsible

MadFang is the data controller for information collected through this website and through MadFang Mailer. For any question about this policy, or to exercise any of the rights listed below, write to contact@madfang.com.

2. What we collect on this website

When you submit the free analysis form, we collect your website address, your name, your company name and your email address. If you choose to provide them, we also collect your phone number, your sector, and whatever you tell us about your current situation.

We do not ask for, and do not want, payment details, identity documents or any special category data (health, beliefs, political opinions and the like). Please do not send these to us.

If you consent to analytics, Google Analytics also collects technical information: pages viewed, approximate location derived from your IP address, device and browser type, and how you arrived at the site.

3. Why we collect it, and on what legal basis

Form data is used for one purpose: to prepare and send you the free analysis you asked for, and to talk to you about it. The legal basis is Article 6(1)(b) GDPR: steps taken at your request before entering into a contract.

Analytics data is used to understand which parts of the site work. The legal basis is your consent, under Article 6(1)(a) GDPR. No analytics cookie is set unless you accept it, and you can withdraw that consent at any time.

4. Who else sees it

Netlify, Inc. hosts this website and stores form submissions. Google LLC provides our email (Google Workspace) and, with your consent, our analytics.

Both are based in the United States, so your data is transferred outside the EEA. Those transfers rely on the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework.

We do not sell your data. We do not share it with advertisers. We do not pass it to anyone else unless the law requires it.

5. How long we keep it

Form submissions are kept for as long as we are in contact with you about your enquiry, and for up to 24 months afterwards in case you come back to us. After that they are deleted.

Analytics data is retained for 14 months.

If you ask us to delete your data sooner, we will.

6. Your rights

You have the right to ask us for a copy of your data, to correct it if it is wrong, to have it deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time.

Write to contact@madfang.com and we will respond within one month.

If you think we have handled your data badly, you can complain to your national data protection authority. In Spain that is the Agencia Española de Protección de Datos (aepd.es); in Turkey, the Kişisel Verileri Koruma Kurumu (kvkk.gov.tr).

7. Security

The site is served only over HTTPS. We apply a strict Content-Security-Policy and related security headers to reduce the risk of tampering. We keep no database of our own: form submissions live in Netlify's systems, protected by their access controls.

8. Changes

If we change what we collect or why, we will update this page and change the date at the top.

9. MadFang Mailer and Google user data

MadFang Mailer is an internal tool that MadFang uses to send outreach emails on behalf of our clients, from the client's own Google Workspace mailbox. It is used only for mailboxes whose owners have hired MadFang for this work, and only after the mailbox owner has signed in with Google and granted access.

What Google data the app accesses. When a mailbox owner connects MadFang Mailer, Google asks them to grant two permissions:

• Send email on your behalf (gmail.send). The app uses this only to send the emails the client has approved, from the client's own address.
• Your email address (openid, email). The app uses this only to confirm it is sending from the correct mailbox.

The app cannot read, search, delete or change any email, contact, calendar entry or file in the mailbox. It has no access to Google Drive.

How we use it. Google user data is used only to provide this sending function for the client who connected the mailbox. We do not use it for advertising, we do not sell it, and we do not use it to build profiles or to develop or train any AI or machine-learning models.

How we store and protect it. The only thing the app keeps is the access token Google issues when the owner grants permission. It is stored only on MadFang's own access-controlled computer, never in a shared or public system, is never shared, and is used only to send the client's emails. The content of the sent emails is not kept by the app; it remains in the client's own Sent folder in Gmail.

Sharing. We do not transfer Google user data to anyone, except as needed to send the emails the client asked us to send, or if the law requires it.

Limited Use. MadFang Mailer's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion. We keep the access token only while we work with the client. When the work ends, or when the client asks, we delete it. A mailbox owner can also remove MadFang Mailer's access at any time, without asking us, at myaccount.google.com/connections. After that the app can no longer send from that mailbox.

Questions. Write to contact@madfang.com.