Security Overview
ContactMonkey is GDPR compliant and SOC2 certified. All data is encrypted using:
- At rest: AES-256 encryption
- In transit: TLS v1.2 encryption
- Storage location: AWS servers in your chosen region
Email Tracking Types
Overall Tracking
Purpose: Sends one email to the entire recipient list
Data Stored:
- Recipient list email address (e.g., everyone@contactmonkey.com)
- List name (e.g., "Everyone")
- From address
- Subject line
How It Works:
- Rich text email drafts are temporarily stored until the campaign sends, then deleted
- Email Builder templates are saved as HTML in the email library for reuse
- Tracks opens, clicks, location (via IP), and device type
- All tracking data is anonymous and tied to one campaign tracker
Individual Tracking
Purpose: Sends personalized emails to each recipient
Data Stored:
- All data from Overall tracking, plus:
- Individual recipient email addresses
How it works:
- Same process as Overall tracking
- Each recipient gets a unique tracker for personalized analytics
- Recipient list is stored in our database until campaign completion
Anonymous Tracking
Purpose: Individual emails with recipient data anonymized after sending
Data Stored:
- List name
- From address
- Subject line
- Individual emails (anonymized after sending)
How it works:
- Same as Individual tracking initially
- Recipient email addresses are automatically anonymized in our database after successful delivery
Optional Features
HTML Email Builder
- Templates stored as JSON and HTML in the ContactMonkey database
- Available for editing and reuse
- Complete deletion when the user removes a template
List Management (Enterprise)
Integration options:
- CSV upload
- Azure sync
- Workday sync
- HRIS API
Data stored:
- Email address (mandatory)
- Optional attributes: department, title, office, location, division, etc.
- Users control all synced attributes
Key Data Handling Points
- Draft email bodies are deleted after campaign sends (rich text only)
- Email Builder templates persist for reuse unless manually deleted
- Location tracking based on IP address
- Device and browser information captured for analytics
- Enterprise users have full control over synced contact attributes
Data Usage Policy
We take your personal data seriously and use it only for the specific purpose of delivering analytics insights to improve your internal communications.
Need More Information?
Review our Privacy Policy for complete details on data handling.