Privacy Policy

SendLint is provided by MPK Digital Inc., Toronto, Ontario, Canada ("SendLint", "we", "us"). This policy explains what personal information we collect when you visit sendlint.com, run the demo or use the Service, and what we do with it.

For the email content your organization uploads, your organization decides what goes in and why; we process it on its behalf, as set out in our Data Processing Agreement.

• Account information: your email address, name, job title and organization name, and optional details such as phone number, timezone and profile picture.
• Billing information: the name on your card, your billing country and postal code (used to calculate sales tax), your plan, seats and invoices. Card details are entered directly with Stripe; we never receive full card numbers.
• Content you upload: email HTML and .eml files (including their subject line and character set), copy decks, creatives, brand guides, brand-voice samples, personalization test values, comment attachments and URLs you ask us to fetch. This content may contain personal information about your recipients, such as names, email addresses or account values.
• What the Service creates from it: reports and findings, screenshots and Outlook captures, AI Agent results, the questions you ask the AI Agent, comments and @mentions, rounds, QA sign-off certificates, and an audit log of who did what.
• Security information: a random device identifier stored in your browser, your IP address, browser and operating system (user agent), and sign-in times. We use them for new-device alerts, the active-sessions list and rate limits.
• Demo visitors: if you run the demo, the email address you enter, your IP address and user agent, and a summary of the result. The email HTML you paste into the demo is not stored.
• Feedback and support: what you send through "Send feedback" or by email, with the page you were on and your user agent.
• Usage information: which features are used and when, how long they take, and how much AI usage they consume, recorded by our servers. With your consent, browser analytics as described in section 8.
• Email delivery status: whether an email we sent you bounced or was marked as spam.

• To provide the Service: run the checks, render emails, run AI Agent features, store your reports and let your team work together
• To sign you in, keep your account secure, alert you to sign-ins from new devices and enforce rate limits
• To process payments and calculate and remit sales taxes
• To send service emails: account and security messages, billing notices, invitations, @mentions, round updates and shared briefs
• To send short onboarding emails after you sign up or run the demo, and to let our team know about new sign-ups and demo runs so we can follow up
• To answer feedback and support requests
• To keep the Service working and improve it, using usage data, error reports and analytics
• To tune checks for your own clients: findings your team dismisses or keeps adjust how those checks are weighed for that client, inside your organization only
• To meet legal obligations and protect our rights

We do not sell personal information, we do not use it to target ads, and we do not use your content to train AI models. Every onboarding email and demo report has an Unsubscribe link that works without signing in, and mail apps that offer one-click unsubscribe use the same link; we stop at once. You can also turn off notification emails and setup tips under Profile → Account; sign-in, security and billing messages are still sent.

To check an email, our servers request every web address it links to, follow redirects (including click-tracking redirects) and read the landing pages, and they fetch its images, stylesheets and fonts. Unsubscribe and preference links are skipped unless you turn them on for a client. These requests come from our servers, so the websites involved see our server addresses, not yours.

Emails are rendered in a sandboxed browser on our hosting provider, with protections that block requests to private networks. On plans that include Outlook rendering, the email’s HTML is sent to a Windows machine we operate in Microsoft Azure (Canada East), which opens it in desktop Outlook, loads its remote images and styles, and uploads a screenshot. Temporary files on that machine are deleted after each render. The screenshots from both kinds of render are stored with the report.

AI Agent features send the content they need to Anthropic’s API: an email’s HTML, text and pictures, its findings, its renders and Outlook captures, a creative, a copy deck, a brand guide, brand-voice samples, or a campaign’s findings and your question. Anthropic processes this data under its commercial terms and does not use it to train its models.

Some features run as part of every analysis or round: the spelling and grammar proofread, reading the words in pictures, the AI visual review of a creative comparison, and the campaign brief. Each follows a per-client AI Agent setting that is on by default and that an admin can turn off at any time. The other features, such as the AI review, Brand Voice, verified fixes, the Outlook render check, Ask the campaign, the deck reader, brand-guide import and the alt-text writer, run only when someone asks.

The results are saved with your report or campaign so they are not run twice, and so are the questions you ask the AI Agent. We record token counts for billing and usage limits. We do not keep the full requests sent to the model once its answer is saved.

We share information only as follows:

• Your organization: members of your organization see its reports, comments, clients and audit log, according to their role.
• People you share with: share links and client portals let anyone holding the link view a report, a round brief or a campaign’s status without signing in. Links expire after 30 days by default; you can choose up to a year or no expiry, and revoke a link at any time. A QA sign-off certificate’s public verification page shows the client name, the campaign, a masked approver name and the fingerprints of the approved emails to anyone with its certificate ID.
• Destinations you configure: if an admin connects Slack or adds a webhook, round updates, @mention comments (with the mentioned people) and other events are sent to that Slack channel or web address. Your organization controls these destinations.
• Service providers: the companies below process data for us under contracts that limit them to providing their service.
• Legal and business reasons: where the law requires it, to protect rights and safety, or as part of a merger, acquisition or sale of the business, in which case this policy continues to apply.

A small number of named SendLint operators can access account data to run the Service, investigate problems and answer support requests, including by signing in as a user to see what they see. Signing in as a user is recorded in an audit log.

• Essential: sign-in cookies, a cookie that remembers your cookie choice (kept for 400 days), and browser storage for the device identifier above and your display preferences.
• With your consent: PostHog product analytics in your browser, including session recordings with text you type masked, and Sentry error reporting in your browser, including replays of a sample of sessions and of sessions with an error. You can accept or decline in the cookie banner.
• Ad measurement, with your consent: on our public pages only, never inside the app, a Google Ads tag records whether a visit that came from one of our Google ads led to a demo run, a sign-up or a purchase. Google receives the page path and an ad-click identifier, never page query strings or the content of your emails. We do not use it to build audiences or to show you ads elsewhere.
• Without cookies: Vercel Web Analytics counts page views without cookies or identifying you; we remove query strings and share-link tokens from page addresses first. Our servers also record usage of the Service, such as analyses run and features used, in our own database whatever you choose in the banner; it is sent to PostHog only with your consent.
• Fonts: our pages and the emails we send load their fonts from sendlint.com, never from a third party.

We do not use cookies or trackers to target ads.

• Account and organization data, including reports, uploaded files, screenshots, AI results, comments, certificates and the audit log, is kept while the organization’s account exists, so you can review past rounds and prove sign-off, until an admin deletes the organization (section 10).
• Deleted reports are permanently erased, with their screenshots and creative files, 30 days after they are deleted.
• Copy decks are kept as the record of what was approved for a campaign while the organization’s account exists.
• Security, usage, demo and feedback records are kept while the account they relate to exists, or until you ask us to delete them.
• Unsubscribe requests: the email address and the date are kept, even after an account is deleted, so that address never gets onboarding emails again.
• Billing records are kept as long as tax law requires.
• Backups: our database provider keeps daily backups for 7 days, so deleted data can remain in a backup for up to 7 days.

You can delete your own account from your profile page. This removes your sign-in, your profile, your devices and sessions, and your API keys. Work you did inside an organization, such as reports, comments and audit-log entries, belongs to that organization and stays with it; your comments remain without your name. Deleting your account does not cancel your organization’s subscription; an admin cancels it under Settings → Plan & Billing. If you are the organization’s only member, delete the organization instead, so its data and subscription go too.

An admin can delete the whole organization under Settings → Team → Delete organization, after typing its name to confirm. The deletion runs 7 days later. Until then the workspace keeps working, every member is emailed, the subscription stops renewing, and any admin can cancel the deletion. Admins can download the organization’s data first from their profile page. When the 7 days are up (usually within the hour; a very large organization can take a few hours), we:

• cancel the subscription immediately, without a refund for the rest of the period, and remove the saved payment methods;
• turn off every API key, share link, client portal, round brief link, pending invitation and Slack or webhook connection;
• permanently delete the organization’s reports, campaigns, rounds, copy decks, creatives, screenshots, comments and attachments, certificates, clients and brand rules, AI results, audit log, usage records and feedback threads, with every file stored for them;
• delete every member’s account, including the admin’s, in the same way as deleting your own account above. Anyone can sign up again with the same email address.

A deleted organization’s sign-off certificates no longer verify. We keep only a record that the organization was deleted: its internal ID, the dates, its Stripe customer ID and how many items were removed. Stripe, our payment provider, keeps the invoices and payment records that tax law requires. Deleted data can remain in our database provider’s daily backups for up to 7 more days. You can also email hello@sendlint.com and we will delete the organization for you.

We are based in Canada. Your data is stored and processed mainly in the United States, and in Canada for Outlook renders, by the providers listed above. These countries may have different data-protection laws from yours. Where the law requires it, we use safeguards such as the European Commission’s Standard Contractual Clauses; see our DPA.

Data is encrypted in transit and at rest. Access in the database is separated by organization. Secrets such as Slack and webhook addresses are encrypted, API keys are stored only as hashes, and two-factor authentication is available to every user. No system is perfectly secure; if a breach affects your personal information, we will notify you as the law requires.

Depending on where you live, you can:

• Access your personal information and download a copy (Download my data on your profile page)
• Correct it in your profile, or ask us to
• Delete it, or ask us to delete it
• Withdraw consent, such as for browser analytics or onboarding emails, at any time
• Object to or ask us to restrict some processing

Email hello@sendlint.com to make a request; we answer within 30 days. For content your organization uploaded, we may refer you to your organization, which decides how it is used. You can also complain to your data-protection authority; in Canada, that is the Office of the Privacy Commissioner of Canada.

The Service is for businesses and is not directed to anyone under 16. We do not knowingly collect their personal information.

We may update this policy. We will tell you about material changes by email or in the Service before they take effect. The "Last updated" date at the top shows the latest revision.

Our privacy contact is reachable at hello@sendlint.com, or by mail at SendLint (MPK Digital Inc.), 300 Sheppard Ave W, Unit 101-53, Toronto, ON M2N 1N5, Canada.