Privacy policy

1. Who we are

lowsend is run by Lowsend Technologies LLC, 1847 Cedar Hollow Drive, Suite 210, Cheyenne, WY 82001, United States. For data about our customers (the people who sign up for lowsend) we are the controller. For data about our customers' subscribers, our customer is the controller and we are their processor (see section 5).

Write to hello@lowsend.com for anything about your data.

2. What we collect about customers

• Account: your email address and name, your workspace's name and time zone, and the newsletters you create.
• Sign-in: the one-time codes we email you, which expire in minutes, and a session cookie that keeps you signed in.
• Billing: your plan, its status and renewal date, and the IDs Dodo Payments gives your customer record and subscription. Your card details go to Dodo Payments and never reach our servers.
• Content: your campaigns, images, website settings, sending domains, API keys (stored as hashes) and your subscriber lists.
• Usage: what you send, when, to how many people, and how it went: deliveries, bounces, spam complaints, opens and clicks.
• Technical: IP address, browser and request details in our server logs, kept for a short time for security and debugging.
• Support: what you write to us.

3. Why we use it

• To provide the Service you signed up for: sign you in, send your emails, host your website, show your stats. (Contract.)
• To bill you and keep records the law requires. (Contract and legal obligation.)
• To protect deliverability and prevent spam, fraud and abuse, including checking bounce and complaint rates. (Legitimate interest.)
• To email you about your account, billing, security and important changes. (Contract.)
• To answer your questions. (Legitimate interest.)

We don't sell personal data, we don't use it for advertising, and we don't share it except as described here.

4. Cookies and tracking

lowsend.com uses no cookies, analytics or ad trackers. The dashboard uses one essential cookie to keep you signed in. Newsletter websites we host don't set cookies for readers.

5. Your subscribers' data

When you use lowsend to email your subscribers, we process their data on your behalf and only on your instructions:

• their email address, and the name, fields, source and signup date you or they provide;
• their status (pending, active, unsubscribed, bounced, complained) and when it changed;
• for each email: whether it was delivered, bounced or reported as spam, and whether it was opened or a link was clicked. Opens are measured with a small image and clicks by passing links through our servers. We record that they happened and when, and don't store readers' IP addresses with them; like every request, they appear briefly in our server logs.

We use this data to send your emails, honor unsubscribes, stop emailing addresses that bounce or complain, and show you your stats. Each email carries an unsubscribe link and one-click unsubscribe; people who unsubscribe stop getting your emails at once.

If you're a subscriber of a newsletter on lowsend, contact the newsletter's author about your data first. We'll pass requests on to them and help them answer. You can always unsubscribe with the link at the bottom of any email.

Customers who need a data processing agreement can request one at hello@lowsend.com.

6. Who processes data for us

Each provider only gets the data its job needs and is bound to protect it. We'll update this list before adding a provider that handles your data.

7. International transfers

Your account and your subscribers' data are stored in the European Union. Lowsend Technologies LLC is a US company, and some providers may process data outside your country. Where data leaves the EU, UK or Switzerland, we rely on safeguards the law recognizes, such as the European Commission's Standard Contractual Clauses.

8. How long we keep it

• Account data and content: while your account exists. If your subscription ends, we keep it so you can come back, until you ask us to delete it.
• When you ask us to delete your account, we delete it and your content within 30 days, except records we must keep by law, such as billing records.
• Server logs: a short time, for security and debugging.

9. Your rights

Depending on where you live (for example under the GDPR, the UK GDPR or US state laws such as the CCPA), you can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent. Write to hello@lowsend.com and we'll answer within 30 days. We don't sell or share personal data for cross-context behavioral advertising. You can also complain to your data protection authority.

10. Security

We use encrypted connections, passwordless sign-in with short-lived codes, hashed API keys, and database rules that keep each workspace's data separate from every other. No system is perfectly secure; if a breach affects your data, we'll tell you without undue delay.

11. Children

lowsend isn't for people under 16, and we don't knowingly collect their data.

12. Changes

We'll post changes here and update the date above. If they're significant, we'll email you before they take effect.