GDPR and EU compliance

Although Buttondown is based in the United States, we are fully GDPR compliant.

The tl;dr is that Buttondown does not collect any information about you other than what you explicitly provide to it.

Additionally:

1. All subscribers to your newsletter have the ability to unsubscribe at any time, and all unsubscribe requests are honored immediately.
2. All subscribers to your newsletter have the ability to request a copy of their data at any time, and all data requests are honored immediately.
3. All subscribers to your newsletter have the ability to request the deletion of their data at any time, and all deletion requests are honored immediately.
4. No data is ever shared with third parties, except for the purposes of sending your newsletter (e.g. Mailgun, Postmark, etc.).
5. No data is ever sold to third parties.
6. No data is ever used for advertising purposes.

What data does Buttondown store?

Buttondown does not store any data outside what is necessary for sending newsletters. No data is ever shared, except for the purposes of sending a newsletter (e.g. Postmark, Mailgun, etc.)

As an author

As a free Buttondown customer

We store the following information:

• Your email address
• Your subscribers' email addresses
• The content of your newsletters

As a paid Buttondown customer

We store the following information:

• Your email address
• Your subscribers' email addresses
• The content of your newsletters

For paid customers, we also have access to the following data via our payment processor, Stripe:

• Billing contact name
• Billing address

Note: Stripe is a third party vendor, and we do not store any sensitive cardholder information on our servers.

As a paid Buttondown customer, who offers paid subscriptions

We store the following information:

• Your email address
• Your subscribers' email addresses
• The content of your newsletters

For paid customers, we also have access to the following data via our payment processor, Stripe:

• Billing contact name
• Billing address

When paid subscriptions are enabled, we also have access to the following data via our payment processor, Stripe. For each paid subscriber to your newsletter, we can view:

• Billing contact name
• Billing address
• Invoices/billing history

When the Stripe OAuth connection is severed, we lose access to this data.

Note: Stripe is a third party vendor, and we do not store any sensitive cardholder information on our servers.

As a reader

As a free subscriber to a Buttondown newsletter

We store the following information:

• Your email address
• The IP address and referrer-level metadata with which you subscribed

As a paid subscriber to a Buttondown newsletter

We store the following information:

• Your email address
• The IP address and referrer-level metadata with which you subscribed

For paid newsletters, we also have access to the following data via our payment processor Stripe:

• Billing contact name
• Billing address

Note: Stripe is a third party vendor, and we do not store any sensitive cardholder information on our servers.

Right to be forgotten

All Buttondown customers and subscribers have the ability to request the deletion of their data at any time, and all deletion requests are honored immediately.

As a customer you can delete your account at any time. All data will be immediately removed from our servers.

As a subscriber, you can contact our support team and we'll cancel your subscriptions and delete your address from our servers.

For more information, you can also read Buttondown's privacy policy here and its cookie policy here.