Your workspace data.

Pomba stores your sign-in email, workspace memberships, employee details, signature designs, assignment rules, campaigns, uploaded images and workspace activity in Cloudflare D1. An essential, secure session cookie keeps you signed in for up to seven days. Sign-in links expire after 15 minutes and work once.

Email and payments

Resend delivers sign-in links and invitations when configured. Stripe processes subscription payments through its hosted checkout and account portal. Pomba stores a Stripe customer reference, subscription status and seat allowance; card details are entered in Stripe.

Connected directories

When an administrator connects Google Workspace or Microsoft 365, Pomba imports employee directory details. Provider refresh tokens are encrypted and scoped to the customer workspace. Disconnecting removes the stored connection. Previously imported employee records remain until managed separately.

Published signatures

Uploaded signature images have public image URLs so recipients’ email clients can display them. Only upload images you intend to share in signatures. Outlook connection codes access one employee’s assigned signature and expire after 90 days. Regenerating a code revokes the previous code. Pomba’s add-in does not upload message contents.

Link and campaign analytics

Campaign and tracked links redirect through Pomba and record a campaign or link ID and date/time for request counts. These can include automated email-security scanners. Campaign owners can optionally enable a tracking image. Pomba then records the campaign ID and date/time when the image is requested. Image loads can be affected by caching, privacy proxies and automated scanners, and are not verified email opens or unique people. Short-lived hashed network identifiers help limit repeated requests.

Feedback surveys

Survey forms store a survey reference, a submitted rating from 1 to 5, and the submission date/time. The form does not request a respondent name or email. Results are available to members of the workspace that created the survey. Short-lived hashed network identifiers limit repeated submissions; counts are not verified unique respondents.

Access and requests

Workspace administrators control membership and employee details. Authorized Pomba operators administer the service. Workspace records are retained while the workspace is in use; archiving an employee preserves their record. Contact the operator through the privacy request form for access, correction or deletion requests. Control of the relevant account must be verified before acting.