1. Scope and roles
This Privacy Policy describes how Core Infinite LLC, doing business as RouteKite (“RouteKite,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information when you visit routekite.com, create or use an Account, contact us, receive communications from us, or otherwise interact with the Service.
This Policy applies when RouteKite decides why and how to process information, such as Account, website, support, security, and billing information. When a RouteKite customer uploads contacts, creates audiences, sends Messages, or otherwise provides data through the Service (“Customer Data”), that customer generally decides the purpose and means of processing. RouteKite processes Customer Data on the customer’s documented instructions and the customer is responsible for its own privacy notices, lawful basis, and recipient rights.
This Policy does not govern a customer’s websites, forms, messages, recipient lists, integrations, or privacy practices. If you receive an email from a RouteKite customer, contact that sender for questions about its message or use its unsubscribe process where applicable.
2. Information we collect
We collect information in the following categories, depending on how you use the Service:
- Account and profile information
- Name, email address, password or authentication method, profile image, organization or Workspace details, role, and preferences.
- Workspace and sender information
- Workspace names, member roles, domain and sending-address details, verification status, business identity details, and configuration records.
- Customer Data
- Recipient contact details, lists, segments, topics, consent records, templates, Messages, assets, attachments, custom fields, suppression records, and instructions submitted by a customer.
- Payment information
- Plan selection, billing contact details, payment status, purchase amount, credit activity, receipts, and transaction identifiers. Payment-card details are handled by our payment processor rather than stored by RouteKite.
- Usage and technical information
- Log data, IP address, browser and device information, pages or features used, timestamps, approximate location derived from IP, error information, request identifiers, and security signals.
- Support and communications
- Information you provide in support requests, feedback, surveys, emails, and other communications.
Do not submit highly sensitive personal information through the Service unless you have confirmed that it is appropriate and met every applicable legal requirement. Examples include government identifiers, precise health information, payment-card data, biometric identifiers, credentials, and information about race, religion, sexual orientation, political views, or union membership.
3. Sources of information
We collect information directly from you when you register, configure a Workspace, submit content, make a purchase, request support, or communicate with us. We also collect information automatically through the Service, from browsers and devices, from authentication and payment providers, from integrations you choose to enable, and from users who invite you to a Workspace or provide information about you.
Customer Data is provided by customers or users acting for them. We do not control whether a customer collected Customer Data lawfully. Customers must ensure that their collection and use comply with Applicable Law.
4. How we use information
We use personal information to provide, operate, maintain, personalize, and improve the Service; create and manage Accounts and Workspaces; authenticate users and support recovery; process purchases and provide receipts; verify domains and sending configurations; submit Messages and process operational events; respond to support requests; and send requested service notices.
We also use information to protect the security, integrity, availability, and reliability of the Service; detect, investigate, prevent, and respond to spam, scams, fraud, misuse, policy violations, security incidents, and unlawful activity; comply with legal obligations; enforce agreements; protect legal rights; and develop aggregate or de-identified insights that do not reasonably identify an individual.
Where a legal basis is required, it may include performance of a contract, legitimate interests such as security and abuse prevention, compliance with legal obligations, consent where required, and other lawful bases permitted by Applicable Law.
5. Customer Data
RouteKite processes Customer Data to provide the Service, follow a customer’s instructions, prevent abuse, maintain reliability, and comply with law. This can include storing contacts and templates, compiling email content, transmitting Messages, processing delivery or complaint events, maintaining suppression records, and preserving operational records.
Customers control Customer Data and are responsible for providing required notices, honoring requests, choosing a lawful basis, and ensuring content and Recipients are appropriate. If you are a Recipient of a customer’s email, RouteKite generally cannot change that customer’s contact record, preferences, or consent evidence. Use the sender’s unsubscribe or privacy contact, or contact the sender directly.
We may access Customer Data only when reasonably necessary to provide support, investigate a security or abuse issue, comply with law, enforce agreements, or maintain the Service. Access is limited to personnel and service providers with a legitimate operational need.
6. Service communications
We may send transactional or administrative messages about your Account, security, password recovery, Workspace invitations, payment status, policy changes, delivery issues, and Service availability. These messages are necessary to operate the Service and generally cannot be opted out of while you maintain an Account.
We may also send product updates or marketing communications where permitted. You can opt out using the unsubscribe mechanism in the message or by contacting us. Opting out of marketing does not stop essential service, security, billing, or legal notices.
7. Analytics and measurements
We use usage and diagnostic information to understand feature performance, troubleshoot errors, improve reliability, and measure the effectiveness of our own website and communications. We use reasonable safeguards designed to limit collection to information relevant to those purposes.
A RouteKite customer may choose to use available delivery information and, where a feature is available and deliberately enabled, engagement measurements. Those measurements can be affected by privacy tools, mailbox providers, image blocking, link scanners, forwarding, and automated security systems. They are operational signals, not proof that an individual read, clicked, or acted on a Message.
8. Security, abuse, spam, scams, and fraud
We process information to protect Recipients, customers, and the Service from spam, phishing, impersonation, malware, scams, payment fraud, account takeover, bulk abuse, and other harmful conduct. This may include reviewing Account information, Message metadata, domain and sender configuration, authentication events, delivery signals, complaint patterns, request rates, payment risk indicators, and support reports.
We may use these signals to investigate, limit, pause, reject, or terminate activity that presents a reasonable security, legal, deliverability, or abuse risk. We may preserve relevant information and share it when necessary to protect the Service, enforce agreements, respond to a lawful request, or comply with law. We do not use these safeguards to make decisions about credit, employment, housing, insurance, or similar high-impact purposes.
11. International transfers
RouteKite is based in the United States and may process information in the United States and other countries where we or our service providers operate. Those countries may have privacy laws that differ from the laws of your country. When required, we use appropriate safeguards for international transfers, such as contractual commitments, recognized transfer mechanisms, or other measures permitted by Applicable Law.
12. Sale, sharing, and targeted advertising
RouteKite does not sell personal information for money. We do not share personal information for cross-context behavioral advertising or use Customer Data to build advertising audiences for third parties. We do not knowingly use sensitive personal information to infer characteristics about an individual.
If our practices materially change, we will update this Policy and provide any notice or choice required by Applicable Law before using information for a materially different purpose.
13. Retention and deletion
We retain personal information for as long as reasonably necessary to provide the Service, maintain security and reliability, meet legal, accounting, tax, dispute, and audit obligations, enforce agreements, and resolve issues. Retention periods vary by data type, account state, feature, contractual terms, and legal requirements.
Customer-controlled content may be deleted through the Service, but deletion can be subject to technical delay, backups, immutable operational records, message or delivery history, financial records, legal holds, and security or fraud-prevention requirements. We do not guarantee that every copy can be immediately or completely deleted from all systems.
Certain temporary files, assets, and attachments may be subject to product-specific retention rules. Recipient copies remain under the Recipient’s and receiving service’s control after delivery.
14. Security
We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. These measures include access controls, authentication safeguards, encryption in transit where appropriate, logging, monitoring, and role-based access practices. No internet service, storage system, or transmission is completely secure, and we cannot guarantee absolute security.
You are responsible for safeguarding credentials, API keys, devices, and Workspace access. Notify us promptly at support@routekite.com if you believe an Account or data has been compromised.
15. Your privacy rights and choices
Depending on where you live and the nature of our processing, you may have rights to request access to, correction of, deletion of, restriction of, objection to, or portability of personal information. You may also have the right to withdraw consent where processing is based on consent, opt out of certain marketing communications, or appeal a decision about a privacy request.
To make a request, email support@routekite.com with the subject “Privacy Request.” We may need to verify identity and authority before responding. We will respond within the period required by Applicable Law. If a request concerns Customer Data controlled by a RouteKite customer, we may direct you to that customer or assist the customer as required by our agreement and Applicable Law.
Authorized agents may submit requests where permitted. We may require proof of authorization and identity verification before acting. You will not be discriminated against for exercising applicable privacy rights, although some features require information that is necessary to provide them.
16. California disclosures
California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including rights to know, correct, delete, and limit certain uses of sensitive personal information. The categories we may collect are described in Section 2, and our purposes and disclosures are described in Sections 4 and 10.
In the preceding twelve months, we may have disclosed the categories described in Section 2 to service providers, Workspace members as directed by a customer, services necessary to carry out instructions, professional advisers, authorities when required, and transaction counterparties. We do not sell personal information or share it for cross-context behavioral advertising.
17. European privacy information
If European data-protection law applies, Core Infinite LLC is generally the controller for Account, website, support, billing, and security information described in this Policy. For Customer Data processed through the Service, the RouteKite customer is generally the controller and RouteKite is generally a processor acting on that customer’s instructions.
You may have the right to lodge a complaint with a supervisory authority in your country of habitual residence, place of work, or place of the alleged infringement. We encourage you to contact us first so we can attempt to resolve your concern.
18. Children
The Service is not directed to children and is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided information to RouteKite without appropriate authorization, contact us and we will take appropriate steps to investigate and delete it where required.
19. Changes and contact
We may update this Privacy Policy to reflect changes in our practices, the Service, or Applicable Law. We will post the updated version with a revised date and, when a change is material, provide additional notice as required by law. Continued use after the effective date is subject to the updated Policy.
For privacy questions, requests, or complaints, contact support@routekite.com.
Core Infinite LLC, doing business as RouteKite5900 Balcones Drive, STE 100
Austin, Texas 78731
United States