Privacy Policy
Effective October 23, 2026.
1. Who we are and what this policy covers
Breaker Technologies, Inc. ("Breaker", "we", "us"), 1401 Lavaca St #918, Austin, TX 78701, provides an email newsletter platform: the app at app.breaker.email, the API and MCP server at api.breaker.email, email sending, web publishing, and the websites at joinbreaker.ai and breaker.email (together, the "Services").
What this policy covers. This policy covers personal data Breaker collects as a controller: about visitors to our websites, about people who sign up for or use a Breaker account ("Customers") and their authorized users, and about people who contact us. The Services are for people 18 and older, and we do not knowingly collect personal data from anyone under 18; if you believe someone under 18 has given us personal data, email privacy@joinbreaker.ai and we will delete it.
What it does not cover: Subscriber Data. Our Customers use Breaker to send email to, and publish content for, their own subscribers. The personal data Customers collect from their subscribers and process through Breaker ("Subscriber Data") is not covered by this policy. For Subscriber Data, Breaker is a processor (or "service provider") acting on the Customer's instructions. The Customer's own privacy policy applies, and subscribers should direct questions and requests to the newsletter they subscribed to. If we receive a request from a subscriber, we will forward it to the relevant Customer. Two exceptions: we honor unsubscribe requests directly and keep a record of them so the address is not re-added, and we use Subscriber Data across accounts to detect spam, fraud and automated traffic and to maintain global suppression lists, as described in our Terms of Service.
2. Information we collect
From website visitors. When you visit joinbreaker.ai or our other websites we collect server logs (IP address, browser and device type, pages requested, referrer, timestamps) and use cookies and similar technologies described in Section 6.
From Customers. When you create an account we collect your name, email address, company, password, billing details (processed by our payment processor; we do not store full card numbers), and the settings and content you add to your account. We collect usage data about how you use the app, API and MCP server, including features used, API keys and OAuth connections created, tools and endpoints called, and request logs needed to operate and secure the Services. When you contact support we keep the correspondence.
From email engagement. When a Customer sends email through Breaker, each message contains a tracking pixel and tracked links. When a recipient opens the message or follows a link, Breaker records the event with the time, the recipient's IP address, user-agent string, and related technical signals such as timing between events and whether the request came from known security-scanning infrastructure. We use these signals to report opens and clicks to the Customer, to operate RealClick™, which classifies clicks as likely automated or likely human, to detect abuse, and to improve deliverability and verification in aggregated form. Engagement data about a Customer's subscribers is Subscriber Data.
From visitors to Customer-published pages. Customers may publish newsletters and pages on Breaker-hosted sites, on a Breaker subdomain or on a domain the Customer connects. When you visit one of these sites, Breaker collects server logs (IP address, user-agent, pages requested, referrer) to serve the site, keep it secure and give the Customer aggregate traffic reports. The Customer who operates the site may add their own analytics, forms or embedded content, which their privacy policy governs. If you subscribe through a form on one of these sites, your data goes to that Customer as Subscriber Data.
From AI clients and integrations. When a Customer connects an AI client, application or integration through our API or MCP server, we record the client's identity, the OAuth grant or API key used, the tools and endpoints called, the time, and request metadata such as the path and query parameters, which can include a search term the client sends (for example a contact's email address). We do not log request or response bodies. Prompts a Customer types into a third-party AI client are governed by that client's privacy policy.
From other sources. We may receive information about Customers and prospects from our payment processor, and from business data providers.
3. How we use information
We use the information described in Section 2 to:
- Provide, operate, secure and support the Services, including delivering email, hosting published pages, running the API and MCP server, and billing.
- Detect and prevent spam, fraud, abuse, bots and automated traffic, including operating RealClick™ and maintaining suppression lists.
- Improve the Services, including deliverability, click verification and AI features, using aggregated or de-identified data wherever possible.
- Communicate with Customers about their account, security, changes to the Services and these policies.
- Market Breaker to visitors and Customers, including by email, where permitted. You can opt out of marketing email at any time using the unsubscribe link.
- Comply with law, respond to lawful requests, enforce our Terms, and protect the rights, safety and property of Breaker, our Customers and others.
Legal bases (EEA, UK and Switzerland). Where these laws apply, we process personal data to perform our contract with you (providing the Services), for our legitimate interests (security, abuse prevention, improving the Services, marketing to business contacts), to comply with legal obligations, and with your consent where we ask for it, which you can withdraw at any time.
4. AI features and model training
Breaker's AI features use third-party AI model providers to generate drafts and suggestions. Breaker may use Customers' published newsletter content, aggregated engagement data, and the prompts and output Customers create with AI features to train and improve Breaker's AI features, unless the Customer turns on "Don't allow AI to train on my content" under Settings. That setting also adds signals asking third-party AI crawlers not to use the Customer's archive, which Breaker cannot guarantee they will honor. Breaker does not use Subscriber Data or unpublished content for training.
5. How we share information
Subprocessors and service providers. We share information with vendors that process it on our behalf to run the Services. Our current subprocessors, including third-party AI model providers, and what each one does are listed at joinbreaker.ai/subprocessors.
Integrations you connect. When a Customer connects a third-party service (such as an advertising partner, a CRM, an automation tool or an AI client), we send that service the data the Customer configures. The third party's terms and privacy policy govern what it does with the data. Breaker is not responsible for third-party services.
Legal and safety. We may disclose information to comply with law, a court order or a lawful request from a public authority; to enforce our Terms and Acceptable Use Policy; to cooperate with mailbox providers and anti-abuse organizations; or to protect the rights, property or safety of Breaker, our Customers, recipients or the public.
Business transfers. If Breaker is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction.
Aggregated data. We may share aggregated or de-identified data that does not identify you or any individual, for example deliverability benchmarks.
6. Cookies and tracking
On our websites and app. We use strictly necessary cookies to sign you in, keep you signed in and protect against fraud; functional cookies to remember your preferences; analytics cookies and scripts to understand how our websites and app are used; and affiliate-referral cookies that record which partner referred you so that we can pay them a commission. You can control cookies through your browser settings, though some parts of the Services may not work without them. When you visit joinbreaker.ai, cookies and similar technologies may be used by our online data partners or vendors to associate your activity with other personal information they or others have about you, including your email address. We (or service providers on our behalf) may then send marketing to that email address. This applies only to joinbreaker.ai and only to visitors located in the United States; it does not apply to the app, to Customer-published pages or to Customer email. You may opt out through the "Do Not Sell" link in our footer, by sending a Global Privacy Control signal from your browser, which joinbreaker.ai honors, or by visiting https://app.retention.com/optout
In Customer email. Email sent through Breaker contains a tracking pixel and tracked links as described in Section 2. The Customer who sent the email is responsible for any notice or consent required for that tracking in their jurisdiction.
On Customer-published pages. We set only strictly necessary cookies. Any other cookies on those pages are added by the Customer.
7. Data retention
We keep account data and Subscriber Data for as long as the Customer's account is open. After an account closes, we may keep data for as long as we need it for legal, security, billing and dispute purposes, and may delete it at any time without notice. Unsubscribe and complaint records are kept indefinitely so they can be honored. Server logs and email event logs are kept for as long as we need them for security, deliverability and legal purposes.
8. Security
We protect information with encryption in transit and at rest, access controls and logging, hashed storage of passwords and API keys, and regular review of our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we confirm a breach affecting Subscriber Data, we will notify the affected Customers without undue delay and within 72 hours of confirmation, and will help them meet their own notification obligations. Report security issues to security@joinbreaker.ai.
9. International transfers
Breaker is based in the United States and processes data there. If you use the Services from outside the United States, your information is transferred to and processed in the United States, where privacy laws may differ from those in your country. For Subscriber Data from the EEA, UK and Switzerland, we rely on Standard Contractual Clauses (and the UK Addendum) in our Data Processing Addendum. Customers are responsible for the lawfulness of their own transfers of Subscriber Data to Breaker.
10. Your rights
Everyone. You can access, correct or delete the account information you gave us by signing in to your account or by emailing privacy@joinbreaker.ai. You can opt out of marketing email using the unsubscribe link in any message. We respond to requests within 30 days, may ask you to verify your identity, and may keep information we are required or permitted to keep by law. If we decline a request, you may appeal by replying to our response.
Subscribers of Breaker Customers. If you want to access, correct or delete data a Breaker Customer holds about you, contact that Customer. If you contact us, we will forward your request to them. We will honor an unsubscribe request directly.
California residents. Under the CCPA you have the right to know what personal information we collect, use, disclose, sell or share; to delete it; to correct it; to opt out of sale or sharing; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights. In the past 12 months we have collected identifiers (name, email, IP address), commercial information (plan and billing history), internet activity (usage data, pages visited, email engagement events), professional information (company, role) and inferences drawn from them. To opt out, use the "Do Not Sell" link in our footer, send a Global Privacy Control signal, or email privacy@joinbreaker.ai. You may use an authorized agent to make a request; we will ask the agent for proof of authorization. We do not knowingly sell or share the personal information of anyone under 18.
EEA, UK and Switzerland. You have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on our legitimate interests, to withdraw consent where processing is based on consent, and to lodge a complaint with your supervisory authority. Email privacy@joinbreaker.ai to exercise these rights.
Other U.S. states. Residents of states with privacy laws that apply to Breaker have similar rights to access, correct, delete and port their data and to opt out of targeted advertising, sale and profiling. Use the methods above.
11. Changes to this policy
We may update this policy. When we do, we will update the version and effective date at the top and let Customers know about material changes by email or in the app. Earlier versions are available on request.
12. Contact
Privacy questions and requests: privacy@joinbreaker.ai. Security issues: security@joinbreaker.ai. Mail: Breaker Technologies, Inc., 1401 Lavaca St #918, Austin, TX 78701.