The plain-English version of how we treat data you connect for a Winback audit. The binding version is the Data Use Agreement. If we ever change either, old versions stay public in this site's history — this page is written to be held against us.
The access you grant can't send, edit, pause, or change anything in your Klaviyo. Not "we promise not to" — the permissions literally don't allow it. Check the Klaviyo consent screen: every scope we request ends in :read.
We don't request access to profiles or events. Your customer list, their emails, their behavior — none of it ever leaves your Klaviyo. What we read: your program's structure (flows, campaigns, templates, forms, segment definitions) and aggregate performance stats (opens, clicks, revenue as totals). Never any individual person's data.
We use what we read to build your audit, size your opportunities in dollars, and walk you through it on your readout. That's it — plus the anonymous math in promise 04.
Your numbers strengthen our benchmark pool only as de-identified aggregates ("median cart-abandon revenue per send across 100+ brands"). We never use or publish a benchmark drawn from fewer than 10 brands, and nothing in a benchmark can be traced back to you.
Not to anyone. The only systems that touch it are the vendors that run our platform — listed in the agreement, bound by contract. Our AI tooling processes your data under commercial terms that prohibit training AI models on it.
We're building tools that analyze what brands send publicly — the marketing emails any subscriber receives. That work uses only publicly available emails, collected by our own inboxes, on completely separate infrastructure. Nothing you connect here can end up there. It's a wall, and this promise is dated so you can hold us to it.
Brands under an active management agreement with us are excluded from that public-email tracking entirely — competitors can't buy intel on our clients from us, even the public kind.
Revoke our access in one click (Klaviyo → Settings → Integrations) or one email. Ask us to delete, and everything identifiable to your brand is gone within 30 days — only the anonymous benchmark math survives.