Privacy Policy

Sendout collects only what it needs to run: your account, the newsletters you make, the contacts you choose to add, and anonymous usage stats. We don't sell your data, we don't show ads, and we don't track which individual parent opened a newsletter you shared by public link. You can delete everything, anytime, from the account menu. The sections below spell out the details.

Sendout (getsendout.com) is a newsletter tool for K–8 teachers, operated by Deseret Code Studios LLC, a Utah limited liability company ("Sendout," "we," "us"). You can reach us at support@getsendout.com.

• Your account. Your email address and display name from your identity provider (Clerk), plus an anonymous user ID.
• Content you create. Newsletter titles, text, and any images you upload.
• Contacts you add. When you build a contact list, we store the email — and the optional name and phone number — you enter for each parent/guardian, along with the group label you assign. This is information you provide about other people (see section 6).
• Newsletter responses. If you add an RSVP block, parents who respond submit their name and email. If you add a poll, we store an anonymous vote (no name or email).
• Anonymous usage analytics. For published newsletters we record anonymous view and click events — a random per-browser ID, device type (mobile/desktop), and link destinations as host + path only. Query strings, email addresses, and phone numbers are stripped before anything is stored, so these events cannot identify an individual parent.
• Delivery tracking. If you send a newsletter to your contacts, we record that it was sent and whether it was opened or links were clicked, tied to that contact, so your Analytics page can show engagement.
• Feedback. Anything you submit through the in-app feedback form (your message, the page you were on, and any screenshot you attach).

We use this information to operate Sendout, show you your analytics, respond to your feedback, keep the service secure, prevent abuse, and comply with the law. We do not use your data for advertising, and we do not sell it.

We rely on a small set of reputable providers to run Sendout:

• Clerk — sign-in and account management. Privacy policy
• Convex — database, file storage, and app backend. Privacy policy
• Cloudflare — website hosting, content delivery, domain, and bot protection. Privacy policy
• PostHog (EU region) — product analytics. Privacy policy
• Sentry — error monitoring. Privacy policy
• Resend — sending email notifications. Privacy policy

We share data with these providers only to the extent needed to operate Sendout.

To keep usage analytics privacy-respecting, PostHog is configured with:

• EU data residency (data processed and stored in Europe)
• Autocapture disabled — only explicit product events are tracked
• Session recording disabled
• No email address stored — only an anonymous Clerk user ID

We also keep aggregate engagement counts for your newsletters in our own database to power your Analytics page. We do not identify which individual parent opened a newsletter shared by a public link, and we never track what's inside your newsletters for advertising.

When you upload contacts or collect RSVP responses, you are providing personal information about other people. You are responsible for having a proper basis to do so under your school's policies and applicable law (see our Terms of Service).

We use this information only to help you organize your lists and send your own newsletters. We never market to your contacts, and we never sell or rent their information. A parent who wants to be removed can ask you (the teacher who added them) or contact us, and we'll help.

Sendout is intended for use by educators, not students. We do not knowingly collect personal data directly from children under 13. Newsletter content is not indexed by search engines by default — parents open newsletters via a link the teacher shares, and the page carries a noindex directive.

Do not publish newsletters containing protected student education records (FERPA, 20 U.S.C. § 1232g) or personally identifiable information about minors (COPPA) without appropriate authorization. If a child under 13 submits information (for example, through an RSVP) and you become aware of it, contact us and we'll remove it.

You can delete your account at any time from the account menu. When you do, all your newsletters, contacts, responses, and feedback are permanently deleted from our database within 24 hours, and uploaded images are removed from storage. You can also delete individual newsletters and contacts whenever you like.

Data is encrypted in transit, and we rely on established providers (Clerk, Convex, Cloudflare) that maintain their own security programs. No method of transmission or storage is 100% secure, but we work to protect your information and limit access to it.

You can access, correct, or delete your information at any time from within Sendout, or by emailing us. Depending on where you live (for example, the EU/UK or California), you may have additional rights to access or delete your data or to opt out of its "sale" — which is moot here, because we don't sell data. To exercise any right, email support@getsendout.com.

We may update this policy from time to time. The date at the top reflects the latest version, and we'll surface material changes in the app. Continued use after an update means you accept the revised policy.

Questions about this policy? Email support@getsendout.com, or write to Deseret Code Studios LLC, Lehi, Utah, USA.