How we protect your list
Your customer list is the most valuable thing you give us. Here is exactly what happens to it, in plain English.
1. Trimmed in your browser
When you choose a CSV, it's read on your own computer. We only upload five things: first name, email, city/ZIP, last-contact date and trade/service. Surnames, phone numbers, street addresses, notes, lead costs and every other column are removed before upload. You see a preview of exactly what we'll receive first.
2. Encrypted with your own key
Names, emails and locations are encrypted (AES-256-GCM) with a key that belongs only to your workspace. That key is itself encrypted with a master key kept outside the database. Data travels over HTTPS.
3. The AI never sees your customers
Our AI writes emails from your business details and trade only. Names go in as placeholders like {{first_name}} and are filled in at send time, on our server. No customer data is sent to an AI provider.
4. Never sold, shared, or used for training
Your list stays in your private workspace. We learn only from combined, anonymous numbers like reply rates by trade, never names or emails.
5. Delete means gone
One click in Settings deletes your lists and contacts and destroys your workspace's encryption key ("crypto-shredding"), so any leftover copy, including backups, can't be read. You get a deletion receipt you can save. Canceled accounts are deleted after 30 days.
6. Unsubscribes are kept safely
So nobody who opted out is ever emailed again, we keep a one-way hash of their address. It can't be turned back into an email.
Questions? See our privacy policy and data promise.