1. Scope and our role
This policy applies to Linnet’s website, account experience, and email-operations service. “Linnet,” “we,” and “us” refer to the operator of the Linnet service.
For account, website, security, and service-administration information, Linnet determines why that information is used. When a customer uploads contacts, creates message content, connects a store, or instructs Linnet to send email, the customer normally determines the purpose of that processing and Linnet processes the information to provide the service.
Customer responsibility: customers must have a lawful basis and any required permission to upload contacts, track engagement, and send email. Importing an address does not itself prove consent.
2. Information we handle
- Account information: name, email address, authentication identifiers, organization and project memberships, and support communications.
- Email operations: sender domains, templates, message content, recipient addresses, suppression and consent records, delivery events, campaign settings, and automation rules.
- Connected-service data: configuration and bounded data from services you connect, such as an ecommerce store, DNS provider, webhook endpoint, or identity provider.
- Technical information: IP address, browser and device information, request timestamps, security signals, logs, and diagnostic events.
- Website information: information you submit through the website and essential request data needed to deliver and protect it.
We receive information from you, your authorized users and agents, the services you connect, email and infrastructure providers, and normal browser or network interactions.
3. How we use information
We use information to authenticate users; create and secure workspaces; provide transactional, lifecycle, and broadcast email tools; process customer instructions; show delivery evidence; prevent duplicate or unauthorized sends; manage suppressions and preferences; troubleshoot; prevent abuse; improve reliability; and communicate about the service.
Linnet’s agent features are designed so consequential operations remain subject to product policy and approval controls. Using an agent does not give it independent authority to ignore your workspace permissions or sending rules.
We do not sell personal information. We do not use customer contact lists or message content to build advertising profiles.
5. Your choices and rights
You can update account information, disconnect integrations, manage email preferences, suppress recipients, or close an account through available product controls or by contacting us. Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information.
Recipients should use the preference or unsubscribe controls in the relevant message, or contact the sender that collected their information. Linnet may need to retain a minimal suppression record so a prior opt-out is respected.
The website and service use essential cookies or equivalent storage for authentication, security, and requested functionality. We will update this notice before adding non-essential advertising cookies.
6. Security, retention, and transfers
We use access controls, encrypted transport, secret-management practices, tenant boundaries, audit evidence, and provider security features appropriate to the service’s current stage. No service can guarantee absolute security.
Project owners can choose how long Linnet keeps rendered content for terminal email records: 7, 30, 90, or 365 days. After the chosen window, Linnet clears the stored subject, body, and attachment metadata for completed, canceled, or failed email. Queued email is not cleared before delivery can finish.
Project owners can separately keep API request diagnostics and completed webhook-attempt diagnostics for 7, 30, 90, 180, or 365 days. This operational setting does not remove audit decisions, canonical email delivery events, provider-readiness evidence, or active webhook retries.
If an owner has not selected a window, no automatic expiry window is applied to those two categories. The current Project setting and most recent sweep time appear in Linnet Settings. Project owners may change the setting, but a shorter window cannot restore content or diagnostics that were already cleared.
Consent and suppression evidence is kept separately so Linnet can honor permissions and prevent mail to an address that opted out, bounced, or complained; active webhook retries are not deleted by this setting. Other information is retained as needed to provide the service, satisfy customer instructions, resolve disputes, meet legal obligations, and protect Linnet and its users. Retention can also depend on deletion requests, backups, and contractual requirements.
Information may be processed outside your country. Where required, we use appropriate contractual or legal mechanisms and describe region-specific commitments in the applicable agreement rather than assuming infrastructure location alone resolves transfer obligations.
Linnet is not directed to children under 16, and we do not knowingly collect their personal information through the service.
7. Changes and contact
We may update this policy as Linnet’s features, providers, and legal obligations change. We will post the revised policy here and update the effective date. Material changes may also be communicated through the service.
Questions or privacy requests: ankur@kmfv.cc. Please do not send passwords, API keys, contact lists, or message content by email.