In short: we collect what we need to run your campaigns and nothing from your chat beyond what you send to Tellnod tools. Your contact lists are yours. We never sell them, never mail them ourselves and never use them to train AI.
1. Who we are
Tellnod (“we”, “us”) is operated by [legal entity name], [registered address]. Tellnod lets businesses draft, preview and approve email marketing campaigns from inside an AI chat such as Claude or ChatGPT, through a connector built on the Model Context Protocol.
Contact us about privacy at support@tellnod.com.
2. Our two roles
We handle personal data in two different capacities:
- As a controller for data about our own visitors and customers: waitlist sign-ups, account holders, billing contacts and people who write to us.
- As a processor (service provider) for the contact lists our customers upload and the campaigns they send. The customer decides whom to contact and is the controller of that data. We process it only on their instructions, under our Terms of Service and a data processing agreement [DPA to be published].
If you received an email sent through Tellnod and want to stop receiving it, use the unsubscribe link in that email. It takes effect immediately. For other requests about that data, contact the business that sent it; we will help them respond.
3. Data we collect
Waitlist and website
- Your email address, where you signed up on the page, and when you confirmed it.
- How you found us, if the sign-up form can tell: the campaign tags (utm_ parameters) of the link you followed, the referring website without its query string, and the page you landed on. We use this only to see which guides and channels bring sign-ups.
- Server logs needed to run and protect the site, such as IP address, user agent and request time. We use them for rate limiting and abuse prevention.
Accounts
- Name and email address from your Google sign-in, and your workspace settings.
- Brand details you ask us to read from your website: logo, colors, fonts, sender name and the postal address shown in your email footer.
- Sending domains and their DNS verification status.
- Billing contact and plan. Card details go to Stripe and never reach our servers.
Customer content
- Contacts you import: email addresses and other channel addresses, names, tags, custom attributes, and consent records (source, time and status).
- Segments, message drafts, and the frozen audience and content of each send.
- Delivery events: delivered, opened, clicked, bounced, complained and unsubscribed, and orders attributed to a click within seven days.
Activity in the AI chat
We receive only the inputs the AI client sends to Tellnod tools (for example, “create a segment of VIP customers”) and return their results. We do not receive or read your chat history, the assistant’s memory, conversation summaries or files you upload to the chat unless you pass them to a Tellnod tool. Every tool call is recorded in an audit log: who or which AI client called it, the tool, a redacted summary of its parameters and the result.
4. Product usage data and feedback
To find where Tellnod is confusing, slow or broken, we record how the service is used. This is on by default, and an account holder can turn it off at any time on the account card in the chat (or by asking the assistant). When it is off, we record no usage data for that workspace.
What we record
- Each Tellnod tool call: the tool’s name, whether it succeeded or which error it returned, how long it took, and its order within your working session.
- The shape of the inputs, never their content: which fields were filled, their approximate length and how many items they had (for example, “a segment with two conditions”).
- Buttons pressed and tabs opened on Tellnod cards and on the confirmation page, and how long a card or the page was open.
- The AI client and the kind of experience it supports (cards or text only), and a one-way keyed hash of your workspace instead of its ID.
We do not record your conversation, contact data, names, email addresses, or the content of your emails. Usage data is kept for 30 days and then deleted automatically. Deleting a workspace deletes its usage data and feedback.
Feedback
You can rate a card or report a problem in your own words; email addresses and phone numbers in that text are masked before it is stored. If you tell the assistant something is not working, it may offer to send a short summary to us: what you were trying to do, where it went wrong and your suggestion. It sends nothing without your agreement, and summaries that contain contact details, links or quoted conversation are refused. Feedback is kept for 30 days, read by the Tellnod team to improve the product, and sent whether or not usage data is on, because you chose to send it.
5. How we use data
- To provide the service: build segments, render previews, send test and live campaigns, and report results.
- To keep sending safe: verify domains, enforce unsubscribes and suppression, ramp up new accounts gradually, and pause sending automatically when bounce or complaint rates pass our thresholds.
- To confirm your waitlist sign-up and send you updates about Tellnod, which you can stop at any time.
- To bill paid plans and keep financial records.
- To secure the service, investigate abuse and meet legal obligations.
We do not sell personal data, use customer contact lists for our own marketing, or use customer content to train AI models.
Where the GDPR or UK GDPR applies, our legal bases are: performance of a contract (providing the service), legitimate interests (security, abuse prevention, product improvement), consent (waitlist updates), and legal obligation (tax and accounting).
7. Where data is stored
We store data in the United States. When we transfer personal data from the EEA, the UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism. [Confirm transfer mechanism and EU data residency position]
8. How long we keep data
- Waitlist entries: until you unsubscribe, or [period] after the public launch, whichever comes sooner. Confirmation links expire after seven days; unconfirmed sign-ups are deleted after [period].
- Customer content: for as long as the workspace exists. When a trial ends, the workspace moves to the Free plan and nothing is deleted. After you delete a workspace, we delete its content within [period], except backups, which roll off within [period].
- Unsubscribe and suppression records: kept for as long as the workspace exists, so an unsubscribed person is never emailed again, including after a re-import.
- Audit logs: [period]. Billing records: as long as tax law requires.
- Product usage data and feedback: 30 days, then deleted automatically.
9. Security
Data is encrypted in transit and at rest. Each customer sends through an isolated Amazon SES tenant. Confirmation tokens and waitlist tokens are stored only as one-way hashes. Sending a campaign requires a separate confirmation that only a person can give, and that step is not available to the AI model. Access to production systems is limited to the people who run the service. No method of storage or transmission is perfectly secure; if a breach affects your data, we will notify you as the law requires.
10. Your choices and rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know, delete and correct, and the right not to be discriminated against for using these rights. We do not sell or share personal data for cross-context behavioral advertising.
Account holders can export or delete workspace data by asking in the chat or by writing to us. To make any request, email support@tellnod.com. We will verify your request and reply within the time the law sets. You may also complain to your local data protection authority.
12. Children
Tellnod is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 16. Customers must not use Tellnod to market to children in violation of applicable law.
13. Changes to this policy
We will post any change here and update the date at the top. For material changes, we will notify account holders by email before the change takes effect.