Legal

Privacy Policy

Effective date: April 28, 2026 · Last updated: April 28, 2026

1. Who We Are

ListGuard (“ListGuard”, “we”, “us”, or “our”) operates the website at listguardhq.com and the application at app.listguardhq.com. We provide automated Klaviyo list health management, including engagement scoring, win-back campaigns, and list hygiene automation.

Questions about this policy can be directed to support@listguardhq.com.

2. Information We Collect

Account information

When you sign up, we collect your name, email address, and authentication credentials through Clerk, our identity provider. If you sign in via Google or another OAuth provider, we receive only the information that provider shares (typically name and email).

Klaviyo data (accessed, not owned by us)

When you connect your Klaviyo account via OAuth 2.0, ListGuard is granted read and write access to the following data in your Klaviyo account:

• Subscriber profiles (email address, creation date, suppression status)
• Engagement events (email opens, clicks, last activity dates)
• Purchase and order history (used for cold-but-buying protection)
• List and segment memberships
• Campaign and flow metadata

This data belongs to you and your subscribers. We access it solely to provide the ListGuard service.

Usage data

We collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This is used for security, debugging, and improving the service.

3. How We Use Your Data

We use the data we access or collect to:

• Score every Klaviyo subscriber by engagement health (Hot, Warm, Cold, Dead)
• Identify inactive profiles that may be hurting your deliverability
• Execute suppression rules you configure — profiles are suppressed in your Klaviyo account, not deleted by us
• Enroll profiles into win-back campaigns in your connected Klaviyo account
• Protect cold-but-buying profiles from accidental suppression using purchase history
• Track suppressed profiles through their 90-day re-evaluation window
• Forecast list growth and engagement trends
• Send you product and account-related emails
• Respond to your support requests

We do not use your Klaviyo data to train machine learning models, sell advertising, or for any purpose outside of delivering the ListGuard service to you.

4. Data Storage and Retention

Paid plans: To deliver features like suppression scheduling, the Jail Tracker, and Growth Forecast, we cache engagement scores and suppression records in our database. Specifically, we store:

• Engagement scores per profile (score value and tier — not raw profile data)
• Suppression event logs (timestamps, rule names, profile counts)
• Daily list size snapshots for forecasting
• Win-back campaign activity records

When you disconnect your Klaviyo account or delete your workspace, all cached data associated with that workspace is permanently deleted within 30 days. You can request immediate deletion by contacting support@listguardhq.com.

5. Data Sharing

We do not sell, rent, or share your data with third parties for marketing purposes. We share data only with:

• Klaviyo — all list actions (suppressions, campaign enrollments) are executed directly in your Klaviyo account via their API
• Clerk — handles authentication and stores your login credentials securely
• Infrastructure providers — our hosting, database, and queue providers process data on our behalf under strict data processing agreements
• Legal requirements — if required by law, court order, or to protect the rights and safety of ListGuard or its users

6. Agency and Multi-Workspace Accounts

If you use ListGuard as an agency managing multiple client workspaces, each client workspace is fully isolated. Data from one workspace is never accessible from another. Agency administrators can view aggregate statistics across workspaces but cannot access raw subscriber data from client accounts.

7. Cookies

We use strictly necessary cookies to maintain your login session. We do not use advertising cookies or third-party tracking pixels on the application. The marketing website (listguardhq.com) may use analytics cookies to understand page traffic. You can disable cookies in your browser, but this will prevent you from staying logged in to the application.

8. Your Subscriber Data Responsibilities

ListGuard processes your Klaviyo subscriber data on your behalf. You remain the data controller for all subscriber records. You are responsible for ensuring you have the legal basis to collect, store, and process your subscribers' data under applicable laws including GDPR, CCPA, and CAN-SPAM. ListGuard acts as a data processor under your instructions.

9. Your Rights

You have the right to:

• Access — request a copy of all data we hold about your account
• Correction — request correction of inaccurate account information
• Deletion — request deletion of your account and all associated cached data
• Portability — request an export of your suppression logs and campaign records
• Disconnect — revoke ListGuard's access to your Klaviyo account at any time from the Settings page

To exercise any of these rights, email us at support@listguardhq.com. We will respond within 30 days.

10. Security

We use industry-standard security practices including encrypted connections (TLS), encrypted storage for sensitive credentials, and regular security reviews. Klaviyo OAuth tokens are stored encrypted and used only to make API calls on your behalf. We do not store your Klaviyo password at any point.

11. Children's Privacy

ListGuard is a business tool intended for adults. We do not knowingly collect information from anyone under the age of 16. If you believe a minor has created an account, contact us at support@listguardhq.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the effective date at the top of this page. Your continued use of ListGuard after the effective date constitutes your acceptance of the updated policy.