Privacy Policy

Effective date: January 1, 2026.

This Privacy Policy is a notice that explains how ListSend, LLC ("ListSend," "we") handles personal information. It describes our practices; it is not a request for consent, and reading or accepting it does not by itself give anyone's consent to receive email. It covers two different roles:

• Our own customers — businesses and the people who use ListSend accounts. For this information, ListSend decides how it is used.
• Recipient lists — contacts a business uploads so we can send its campaigns. For this information, ListSend processes data on behalf of that business, following its instructions. The business is responsible for having each contact's permission to email them and for answering its recipients' requests.

1. Information We Collect About Customers

• Account information: name, email address, and password (stored by our authentication provider in hashed form; we cannot read it). Sign-in sessions are managed by that provider.
• Business information: business name, website, sending domain, mailing address, logo and brand assets, and the sender identity used for your campaigns.
• Campaign and support content: campaign instructions, prepared content and every saved version, approvals (who approved which version and when), revision requests, change requests, and support messages.
• Billing references: Stripe customer, checkout, payment, subscription, invoice, and refund identifiers, amounts, plan and add-on details, and payment status. Card details are entered directly with Stripe; ListSend does not receive or store full card numbers.
• Policy records: which policy versions you accepted, the actual time you accepted them, and what was disclosed at checkout.
• Activity and audit records: actions such as uploads, approvals, launches, pauses, and sender status changes, with timestamps.

2. Information in Uploaded Recipient Lists

When a business uploads a list (CSV or Excel), we store the email addresses and any personalization fields it includes (for example first name or company). For each contact we keep verification results, suppression status (unsubscribed, bounced, complained, or held out), and per-message delivery status. Recipient lists are kept private and are never published.

3. Who Can Access Information

• The sending business can see its own account, campaigns, recipient lists, and results. One business cannot see another business's data.
• Authorized ListSend personnel can access customer and recipient information when needed to operate and support the service — for example preparing campaigns, reviewing lists for permission problems, handling support and billing, investigating abuse, and preparing payment-dispute records.
• Service providers receive only the information needed for the task they perform for us (see Section 9).

4. How We Use Information

• To provide the service: preparing campaigns, verifying addresses, sending approved campaigns, and showing results.
• To enforce plan limits, process payments, and manage subscriptions.
• To honor unsubscribes and suppressions, protect deliverability, and prevent abuse.
• To respond to support requests.
• To keep records needed for legal, accounting, and payment-dispute purposes.

We do not sell personal information, and we do not use recipient lists for our own marketing or share them between businesses.

5. Verification and Email Delivery

• Verification: addresses are sent to Bulk Email Checker, our email verification provider, which returns a result. We save that result and generally reuse it within a campaign, but addresses may be checked again in later campaigns or after time has passed, because an address's status can change.
• Delivery: approved campaigns are submitted to a third-party email delivery provider. The provider receives recipient addresses, message content, and the sender identity, and reports events such as delivered, bounced, deferred, unsubscribed, and spam complaints. "Submitted" means the provider accepted a message; "delivered" means the recipient's mail server accepted it; neither confirms inbox placement, which the recipient's mailbox provider decides.

6. Open and Click Tracking

Our system can record open and click events reported by the delivery provider. Opens are typically detected by a small image loaded when an email is displayed, and clicks by redirecting links through the provider. These figures are estimates: image blocking, privacy features in mail apps, and automated security scanners can cause opens and clicks to be missed or over-counted. Per-recipient open and click data is shown only to the sending business and authorized ListSend personnel. Open and click tracking is on by default. A business can turn it off for a campaign before approving it; the choice is saved with the approved version, and changing it after approval requires a fresh approval. Turning tracking off does not stop delivery, bounce, complaint, or unsubscribe processing, which always continue.

7. Dispute Evidence and Audit Records

If a payment is disputed, or in preparation for a possible dispute, authorized ListSend personnel may assemble an evidence record for that purchase: purchase and billing details, policy acceptance, campaign preparation and approval history, and sender status. These records are stored privately, available to ListSend administrators only, and may be provided to Stripe and the card network for that dispute. Recipient email addresses are excluded from these records.

8. Hosting, Storage, Published Email Assets, Cookies and Local Storage

• The app and its database, file storage, and authentication run on our cloud hosting provider (Lovable Cloud, which uses Supabase and Cloudflare infrastructure). Uploaded lists, dispute evidence, and campaign files are kept in private storage.
• Published email assets: images used inside emails (such as a business's logo) are published at a web address so they can display in recipients' mail apps. Anyone who has that address can view the image. Recipient lists are not published and remain private.
• Browser storage: we use your browser's local storage to keep you signed in, session storage to temporarily hold a selected list and plan while you sign up, and a small preference cookie for the dashboard sidebar. We do not use advertising cookies or third-party analytics trackers in the app.
• Stripe: the checkout and billing pages load Stripe's scripts, which may set their own cookies for fraud prevention under Stripe's privacy policy.

9. Service Providers

We share information only with providers that help us run the service, and only as needed: hosting, database and authentication (Lovable Cloud / Supabase / Cloudflare); payments (Stripe); email verification (Bulk Email Checker); email delivery providers. We may also disclose information when required by law, to protect rights and safety, or as part of a sale or reorganization of the business.

10. Security

We use access controls that separate each business's data, restrict administrative functions to authorized ListSend personnel, keep uploaded files and evidence in private storage, and use encrypted connections. No system is completely secure, and we cannot guarantee that information will never be accessed without authorization.

11. Your Choices and Rights

• Customers may access and update account and business information in the dashboard, and may ask us to delete their account or data by emailing privacy@listsend.io. Some records may be kept where the law or legitimate record-keeping requires (for example billing, suppression, and dispute records).
• Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your information, or to object to certain uses. We will respond to requests as required by the law that applies to you.
• We verify requests before acting on them.

12. If You Received an Email Sent Through ListSend

That email was sent on behalf of the business named in it, which is responsible for having your permission. To stop receiving its emails, use the unsubscribe link in any message; unsubscribes are honored for that business's future campaigns. For other questions about your information, contact that business at the mailing address shown in the email. You can also contact ListSend at privacy@listsend.io and we will pass your request to the business or help where we can.

13. Children

ListSend is a business service and is not directed to children under 13. We do not knowingly collect their information.

14. Changes

We will post updated versions of this policy with their effective date and notify customers of material changes.

15. Contact

ListSend, LLC 301 S. McDowell St. #125-1497 Charlotte, NC 28204 Privacy requests: privacy@listsend.io Operational help: support@listsend.io