Security & your data

You're trusting us with your client list. Here's exactly what that means.

Written in plain English for the businesses we serve — agents, advisors, practices, firms — because "enterprise-grade security" is a phrase, not an answer. No badges we haven't earned; just what we store, what we never touch, and how you leave.

What we store

Your account

Email, password (hashed with a modern algorithm — we can't read it), and your publication settings: voice, schedule, standing rules.

Your subscriber list

Names, emails, and the consent record for each contact — when they opted in and how. Used only to send your issues. Exportable as a CSV anytime.

Your issues

Drafts, sent issues, and their delivery stats (delivered, opened, clicked) so you can see what's working.

What we never touch

Your client records

Drafting reads public industry news and your public website. It never connects to your CRM, AMS, practice-management system, or patient records — there's no integration to misuse.

Your subscribers' inboxes

We send your issue; we don't track your subscribers around the web, build profiles on them, or use their addresses for anything but your newsletter.

Anyone else's list

No renting, selling, sharing, or cross-promoting between customers. Your list has one purpose: your letter.

How sending stays clean

Consent required

Importing a list requires confirming your contacts opted in. No confirmation, no send — the checkbox isn't decorative; the import fails without it.

Suppression is automatic

Unsubscribes apply instantly and permanently. Bounces and complaints suppress automatically. A removed contact can't be accidentally re-imported over their objection.

New accounts are capped

Every new account's sending volume is limited until we've reviewed it — the abuse-prevention that keeps everyone's deliverability healthy, including yours.

Authenticated infrastructure

Issues send over SPF/DKIM/DMARC-authenticated domains — yours once verified, ours until then — with one-click unsubscribe headers built in.

Deletion & leaving

Export first

Your full subscriber list downloads as a CSV in one click — before, during, or after cancelling.

Deletion on request

Email privacy@newslet.ai and your account and data are deleted within 7 days, as our privacy policy promises. Subscribers can also be deleted individually anytime.

No hostage mechanics

Month to month, cancel in the app, no retention calls, no cancellation walls.

Something we haven't answered? Security questions get direct answers from the people who run the infrastructure: hello@newslet.ai. For the formal version, read the privacy policy.