Privacy Policy
Version PRIV-2026-10-15 · Last updated October 15, 2026
RetentionSmith LLC ("we") runs retentionsmith.com and app.retentionsmith.com. This policy explains what personal information we collect, why we collect it, and your choices about it.
What we collect
- Audit requests: your email address, store URL, optional plan and revenue range, and, if you choose, a Klaviyo private key. We use the key once, read-only, and never store it.
- Clients: name, business email, billing details (handled by Stripe; we never see full card numbers), brand materials, and your Klaviyo API key, which we store encrypted.
- Contract acceptance: when you accept our agreements, we record the version, the time, your IP address and your browser's user agent, as proof of the agreement.
- Email with us: the messages you send to support@ or hello@.
- Business outreach: we may email businesses at addresses they publish for business contact. Every such email identifies us, includes our mailing address, and offers a one-reply opt-out that we honor permanently.
- Basic logs: IP address and request data our host keeps for security. We don't use advertising trackers on the Site.
Your customers' data
When we manage a client's Klaviyo account, the client controls its subscribers' data, and we process it only on the client's instructions under our Data Processing Addendum. Subscribers should contact the brand directly to exercise their rights.
How we use information
We use it to provide audits and services, bill clients, provide support, keep the service secure, meet legal obligations, and send you service messages. We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.
Service providers
- Stripe, for payments
- Google Workspace, for email
- Fly.io and Cloudflare, for hosting and security
- AI model providers, for content generation, and only the data needed for the task
- Klaviyo, as directed by clients
Retention
- Audit requests: kept for 24 months.
- Client records: kept for the contract term, plus up to 7 years for tax and legal records.
- Klaviyo keys: deleted when the contract ends.
Your choices and rights
You can ask us to access, correct or delete your information, or to stop emailing you, by writing to support@retentionsmith.com. Residents of states with privacy laws, including Utah's UCPA and California's CCPA, can exercise the rights those laws give them. We will not treat you differently for doing so.
Security
We protect your information with encryption at rest for secrets, HTTPS everywhere, least-privilege access, and limited retention. No system is perfectly secure.
Children
The Site is for businesses and is not directed to children under 16.
Contact
RetentionSmith LLC, 30 E Broadway, Suite 203, Salt Lake City, UT 84111. Email support@retentionsmith.com.