Privacy & data

Your account

SpamBite stores your Google account identifier, name and email to sign you in and manage your free checks. Google sign-in does not give SpamBite access to your Gmail inbox. Sessions last up to 30 days; signing out revokes the current session.

Klaviyo connections

OAuth requests read access to account details, campaigns, templates and metric definitions, not subscriber lists or permission to send or change campaigns. Private keys must be dedicated to SpamBite with only those four read permissions. We check those reads but cannot inspect every permission granted to a key. Never provide a full-access key. Setup instructions are available in the connection form.

Keys and OAuth tokens are encrypted on our server; server administrators can access them. Disconnecting deletes the local credentials and cached reports. OAuth disconnections also request revocation from Klaviyo. For a private-key connection, delete the dedicated key in Klaviyo to revoke it there.

Received email tests

A test address accepts one message for 30 minutes. Use test content, not private customer data. Guest tests use a private browser cookie and show only a limited preview. Guest reports expire one hour after creation; signing in from the same browser before expiry transfers the test to your account and extends retention to 24 hours after creation. Guest limits use a keyed, non-reversible fingerprint of your IP address, retained for 24 hours. Clearing cookies does not reset these limits. The received email and test report are encrypted on this server; server administrators can access stored data. Raw email is discarded after inspection. Expired tests are removed by the cleanup service. Email tests make DNS queries for sender authentication and reverse DNS; they do not fetch message links, execute HTML, scan attachments, forward email or automatically send content to an AI provider. A readiness score is not an inbox-placement prediction.

Reviews

When you request a review, the text you submit is sent to the configured AI provider, OpenAI or Google. Imported content is not automatically sent for AI review. Remove recipient details, confidential information and secrets before requesting a review. Review input and results are saved on the server and are accessible to the site administrator.

Subject lab

Styling runs locally. Email-header conversions use our server without saving your text. Temporary rate limits use a keyed IP fingerprint; these limits expire after one minute and expired records are cleared on the next conversion request. Unicode styles may display differently or be harder for screen readers. Formatting does not predict or improve inbox placement.

Performance reports

Historical campaign statistics come from Klaviyo and are temporarily cached. They are not predictions or proof that a subject caused an outcome. Campaign audiences, content and timing may differ.

Account requests

To request account or stored review deletion, contact Ayyoub Boufounas on LinkedIn. SpamBite is an independent tool, not a Klaviyo or Google product.