Privacy Policy

Peeker AI Co. (“Peeker”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect data when you use our website, applications, APIs, and related services (collectively, the “Services”).

By using our Services, you agree to this Privacy Policy.

1.1 Account Information

Name, email address, phone number, and password when you register for an account.

1.2 Usage and Performance Data

• Deliverability metrics such as inbox reply rates, bounce rates, warm-up scores, and domain names.
• Diagnostic and performance data from connected tools (e.g., Email Bison, Instantly, Smartlead, PlusVibe) used to improve quality and reliability.
• Log data and analytics collected through PostHog and our hosting infrastructure.

1.3 Billing Information

Payment details processed securely by Stripe. Peeker does not store full credit-card data.

1.4 Customer-Provided Data

Prospect and lead data uploaded by users to improve deliverability insights and infrastructure performance.

1.5 Communication Data

Messages or correspondence sent to our team (via email, Slack, or support chat) to respond to inquiries and improve service.

We use collected data to:

• Provide, operate, and maintain the Services.
• Analyze deliverability and optimize inbox performance.
• Process payments and manage billing.
• Communicate with users regarding support, updates, or system alerts.
• Improve features, algorithms, and usability.
• Comply with legal obligations and enforce our Terms of Service.

We may analyze aggregated or anonymized data to develop insights and enhance our product experience.

Peeker acts as a data processor for customer data (e.g., domains, email content, lists, and campaign metrics) and as a data controller for its own account and billing data. We do not sell user data to third parties.

Data is securely stored using:

• Supabase (primary database and authentication)
• Hetzner (EU infrastructure hosting)
• Stripe (payments)
• PostHog (analytics)
• Make (automation)
• GitHub (version control and deployment)
• Microsoft Azure and Google Workspace (cloud infrastructure)

We use encryption in transit (TLS/SSL) and at rest wherever supported. Access to user data is controlled through role-based access controls (RBAC) and multi-factor authentication (MFA).

All data access events are logged and restricted to authorized personnel.

Certain authorized Peeker team members may access customer dashboards and account data to provide technical support, troubleshoot issues, optimize user experience, or ensure proper operation of the Services.

Access is logged, time-limited, and granted only to resolve specific issues.

Peeker’s systems manage and optimize outbound email infrastructure. To provide deliverability insights and improve inbox performance, Peeker may access portions of email content — including subject lines, message bodies, sender and recipient domains, and metadata — strictly for deliverability analysis, spam filtering, and improvement recommendations.

Peeker does not sell, publish, or share message content with third parties. All access is secured and limited to authorized systems and personnel.

We retain user data as long as necessary to operate the Services, comply with legal requirements, and maintain backup integrity.

• Account data is typically deleted within 90 days of account closure or verified deletion request.
• Backups and logs are automatically purged within 180 days.
• Users may request data deletion or export by emailing conrad@peeker.ai. Upon verification, Peeker will permanently delete or anonymize related data within a reasonable timeframe.

All employees and contractors with access to customer data are bound by confidentiality and data-processing agreements (NDAs).

Some team members may operate outside the United States or European Union; all such personnel follow the same access, security, and compliance standards.

We rely on trusted subprocessors and integrations, including:

• Stripe – payments and billing
• Google Workspace / Microsoft Azure – infrastructure and productivity tools
• Slack / Intercom – customer communication
• PostHog – analytics
• Make – workflow automation
• GitHub / Supabase / Hetzner – hosting and development

These providers maintain their own privacy policies and comply with applicable data-protection laws.

The following vendors may process data on Peeker's behalf:

• Supabase
• Hetzner
• Stripe
• PostHog
• GitHub
• Make
• Microsoft Azure
• Google Workspace
• Slack
• Intercom

This list may evolve over time. Any updates will be reflected in this Policy.

Peeker currently does not use cookies, pixels, or similar tracking tools. If introduced in the future, we will update this Policy and provide notice and consent options in compliance with relevant laws.

Peeker does not make automated decisions that have a legal or significant impact on users. Any automated scoring or classification is used solely to improve performance and deliverability analytics.

If you connect third-party accounts (e.g., Gmail, Microsoft Outlook), Peeker accesses only the data necessary to deliver requested functionality.

We do not store third-party credentials beyond the active connection period and never use them for unrelated purposes.

We maintain technical and organizational safeguards, including:

• Encrypted connections (TLS/SSL)
• Multi-factor authentication (MFA)
• Role-based access control
• Regular code reviews and infrastructure monitoring
• Internal access logging and audit reviews

Although no system is completely secure, Peeker follows industry-standard security frameworks and best practices to protect your information.

Because Peeker operates globally, data may be processed in the United States, the European Union, or other jurisdictions where our partners operate. We use safeguards such as Standard Contractual Clauses (SCCs) to ensure adequate protection for transferred data.

If a data breach occurs that affects your personal information, Peeker will notify affected users and applicable authorities as required by law within a reasonable timeframe.

Depending on your location, you may have rights under laws such as GDPR or CCPA, including:

• Accessing the personal data we hold.
• Requesting correction, deletion, or export.
• Restricting or objecting to certain processing.
• Withdrawing consent where applicable.

Requests can be made via conrad@peeker.ai.

Peeker may send product updates, feature announcements, and service information to registered users. You may opt out at any time by clicking “unsubscribe” in an email or contacting conrad@peeker.ai.

We do not send unsolicited marketing messages to non-customers.

Peeker is not directed toward individuals under 18 years of age.

We do not knowingly collect personal data from minors.

We may update this Privacy Policy periodically.

Significant changes will be communicated via email, Slack, or in-app notice.

The "Last Updated" date above reflects the latest revision.

Peeker AI Co. does not currently appoint a formal Data Protection Officer. For all privacy and data-related inquiries, contact conrad@peeker.ai.

Peeker AI Co.

Principal Place of Business: 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801

Mailing Address: 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801

Email: conrad@peeker.ai

This Privacy Policy is governed by the laws of the State of Delaware, United States, without regard to conflict-of-law principles.