1. Subject matter & duration

Processor processes personal data submitted by Controller’s users (email QA inputs, account credentials, usage telemetry) for as long as Controller’s organization has an account with the Service, and until the data is deleted under section 10.

2. Nature & purpose of processing

Processing is limited to (a) hosting and analyzing the email HTML, copy decks, creatives and brand material Controller uploads, including requesting the links, images, stylesheets and fonts the emails reference and reading their landing pages; (b) rendering emails in a sandboxed browser and, where Controller’s plan includes it, in desktop Outlook on Windows machines Processor operates in Microsoft Azure; (c) generating QA reports, findings, round history and sign-off certificates against Controller’s configured brand rules; (d) AI Agent passes through Anthropic’s API, some of which run with every analysis under per-client AI Agent settings that are on by default and that Controller can turn off at any time, and the rest only when Controller’s users ask; and (e) operational telemetry necessary to run the service (sign-in, security, billing, error and performance monitoring).

End-recipient consent: Controller is solely responsible for ensuring the lawful basis on which marketing emails are sent to end-recipients, including compliance with CAN-SPAM (US), CASL (Canada), GDPR/ePrivacy (EU/UK), and equivalent regimes. Processor does not send marketing emails to end-recipients on behalf of Controller; it only analyzes the email content Controller uploads for QA purposes.

Controller-configured sharing: Controller may optionally (i) connect Processor’s Slack app, which posts QA notification content (round status, comment previews and the people mentioned) to a channel in Controller’s Slack workspace; (ii) add outbound webhooks, which send event data, including @mention comment text, to web addresses Controller sets; and (iii) create public, unauthenticated, revocable share links and client portals (30-day default expiry, up to a year or no expiry as Controller chooses) that let recipients Controller chooses view a report, round brief or campaign status. Each sign-off certificate also has a public verification page showing the client name, the campaign, a masked approver name and the approved emails’ fingerprints. These destinations and disclosures are controlled by Controller, and Controller is responsible for their configuration and use.

3. Categories of data subjects & personal data

Data subjects: Controller’s end-customers whose email addresses or names may appear inside marketing email HTML submitted for QA, plus Controller’s own employees authenticated to the platform.
Personal data: account email, display name, role, job title and optional profile details; IP addresses, user agents and device identifiers used for security; comments and @mentions; raw email HTML and uploaded files, which may include subscriber names, email addresses, transactional values or other tokens; renders and screenshots of those emails; payment metadata processed by Stripe (Processor never sees full card numbers).

4. Sub-processors

The following sub-processors are engaged. Processor will give Controller 30 days’ notice before adding a new sub-processor, by email to the organization owner and a notice in the in-app dashboard. Controller may object during the notice period by emailing hello@sendlint.com; if the parties cannot resolve the objection, Controller may terminate the service without penalty for the unused portion of the term.

• Supabase (database, sign-in and file storage) — United States (US East)
• Vercel (hosting, server functions, browser renders and cookieless page-view counts) — United States, with a global edge network
• Microsoft Azure (the Windows machines that render emails in desktop Outlook) — Canada (Canada East)
• Anthropic (the AI model behind the AI Agent) — United States
• Stripe (payments, invoices and sales-tax calculation) — United States
• Resend (the emails we send) — United States
• Sentry (error reporting and, with consent, session replay) — United States
• PostHog (product analytics) — United States
• Upstash (rate-limit counters (short-lived, keyed by IP address or account)) — cloud-hosted

Slack (when Controller connects it), Controller’s webhook endpoints and the recipients of share links are destinations Controller designates and controls, not Processor sub-processors.

5. Security measures

Processor implements TLS 1.2+ in transit, AES-256 at rest, separation of each organization’s data at the database layer, principle-of-least-privilege service-role usage, encryption of stored integration secrets, hashed API keys, SSRF protections on outbound link checks and rendering, and rate limiting per IP and per organization. Access to production data is restricted to named operators; signing in as a user for support is recorded in an audit log. Optional two-factor authentication (TOTP) is available to all users, and security-relevant QA workflow actions (status changes, sign-offs, manual findings, shares) are recorded in an append-only audit log.

6. Data subject rights

Controller may exercise rights of access, rectification, erasure, restriction, and portability on behalf of its data subjects via the in-product profile page (/profile — profile details are user-editable; a JSON export of personal data is available via “Download my data”; account deletion is available from the Account tab; an admin can delete the whole organization under Settings → Team) or by emailing hello@sendlint.com. To rectify data inside submitted email content, Controller should re-upload the corrected version and request deletion of the prior report. Processor will respond within 30 days of a verified request.

7. International transfers

Where personal data is transferred outside the EU/UK, Processor relies on Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) and an assessment of equivalent protection in the destination jurisdiction. A counter-signed copy of the SCCs is provided within 5 business days of request — email hello@sendlint.com with Controller’s legal entity details to initiate. For expedited deals, Processor will execute Controller’s standard DPA template provided it covers EU-UK data transfers via SCCs.

8. Breach notification

Processor will notify Controller in writing within 72 hours of becoming aware of a personal data breach affecting Controller’s data, including the categories and approximate number of data subjects affected and the steps taken to mitigate the breach.

9. Audit rights

Processor will make available all information necessary to demonstrate compliance with this DPA. Controller may, with 30 days’ notice and no more than annually, conduct or commission an audit; audits will be conducted during business hours and will not unreasonably interfere with Processor’s operations.

10. Return or deletion of data

Controller’s admins can export the organization’s data from the Service at any time, and can delete the organization themselves under Settings → Team. That deletion runs 7 days after the request (any admin can cancel it until then) and removes Controller’s personal data, including every member account, from the Service’s database and file storage; Processor keeps only a record of the deletion (the organization’s internal ID, the dates, its Stripe customer ID and counts of what was removed), and Stripe keeps the billing records the law requires. On Controller’s written request, including on termination, Processor will delete Controller’s personal data (including from sub-processors) within 30 days, except billing records it must keep by law; data in the database provider’s daily backups expires within a further 7 days. Deleted reports are erased automatically 30 days after deletion. If Processor decides to delete the data of an organization that no longer has a subscription, it will give Controller’s admins at least 30 days’ notice first.

Execution

This DPA may be incorporated by reference into your subscription. Processor: SendLint (MPK Digital Inc.), 300 Sheppard Ave W, Unit 101-53, Toronto, ON M2N 1N5, Canada. For a counter-signed copy, contact hello@sendlint.com. For the full privacy policy see our privacy page.