Privacy policy

• We collect what we need to run the product, and no more.
• Contact lists our customers upload belong to those customers. We process them only on the customer's instructions. We never sell them, never pool them across customers, and never use them for our own marketing.
• You can ask for a copy of your data, ask us to correct it, or ask us to delete it at any time by writing to privacy@retensive.com.

If you visit our site or use a Retensive account, we collect:

• Form submissions. When you contact us or request a demo, we receive your name, work email, company, and whatever you write in the message. We use it to reply to you — nothing else.
• Account data. If your team uses Retensive, we store your name, email, role, and workspace settings so the product works and access is controlled.
• Usage data. Pages visited, features used, browser and device type, and IP address — used to keep the service secure, prevent abuse, and improve the product.
• Cookies. Only the essential ones needed to sign in and keep the site working. We do not use advertising or cross-site tracking cookies.

Businesses use Retensive to store and email their own contacts: email addresses, names, attributes, and engagement or purchase history. For that data, the business is the controller and we are the processor — which means:

• The business decides what data goes in, who gets emailed, and when it is deleted. We store, segment, and send on its instructions.
• The business is responsible for having permission to email its contacts. Our terms require it, and our platform enforces suppressions and unsubscribes automatically.
• We never sell this data, never share it between customers, never use it to build shared profiles, and never use it to train models.

The sender is the business that emailed you, not us. A few things you should know:

• Every email sent through Retensive includes an unsubscribe link. Using it takes effect immediately and applies platform-wide for that sender.
• To access or delete the data a sender holds about you, contact the sender directly — and we help them fulfil those requests.
• If you can't reach the sender or believe a sender is misusing Retensive, write to us at privacy@retensive.com and we'll take it from there.

• To provide and operate the service.
• To respond when you contact us.
• To keep the platform secure and prevent abuse, including spam prevention.
• To understand how the product is used so we can improve it.
• To meet legal obligations.

We do not sell personal data. Ever. We also don't use it for advertising.

We use a small number of service providers to run Retensive — cloud hosting, email delivery infrastructure, and error monitoring. They process data only to provide their service to us, under contract, and can't use it for anything else. Beyond that, we only disclose data if the law genuinely requires it.

• Account data: for as long as your workspace is active, then deleted within 30 days of closure.
• Uploaded contact data: controlled by the customer. When a customer deletes contacts or closes a workspace, the data is removed from live systems within 30 days and from backups within 90 days.
• Form submissions: for as long as the conversation is live, then archived or deleted.

Data is encrypted in transit and at rest, workspaces are isolated from each other, access is role-based, and sensitive actions are logged. The full picture is on our security page.

You can ask us to show you the personal data we hold about you, correct it, delete it, export it, or stop using it for a particular purpose. Depending on where you live — the EU, UK, California, and elsewhere — some of these rights are backed by law. We honor them for everyone, regardless of where you live. Write to privacy@retensive.com and we'll respond within 30 days.

Our infrastructure may process data in countries other than yours. Wherever data moves, it stays under this policy and under contractual safeguards with our providers.

Retensive is a business tool and isn't directed at children. We don't knowingly collect data from anyone under 16.

If we change this policy, we'll update the date at the top and, for significant changes, tell our customers directly before the change takes effect.

Questions, requests, or concerns about privacy: privacy@retensive.com.