Privacy policy clauses for ConvertKit (Kit)
ConvertKit (Kit) is an email marketing platform designed for creators and newsletter publishers to build subscriber lists, send campaigns, and monetize their audiences. Websites integrate it to capture email addresses and manage subscriber relationships.
Free scan · No signup · Results in 60 seconds
What data ConvertKit (Kit) collects
Your privacy policy must disclose each of the following data types when you use ConvertKit (Kit).
When does ConvertKit (Kit) trigger privacy obligations?
ConvertKit (Kit) begins collecting data the moment a signup form is embedded on your site or app. Specifically, email addresses, names, signup sources, and tag data flow directly to ConvertKit LLC's servers in the United States.
GDPR applies if: You process any EU resident's data. ConvertKit's US location means data crosses borders—triggering GDPR Chapter 5 (transfers) requirements. You must establish a lawful transfer mechanism (Standard Contractual Clauses, adequacy decision, or binding corporate rules). Additionally, GDPR Article 13 requires you to disclose to EU visitors that their email is transferred to a US processor *before* they submit the form.
CCPA applies if: You collect California residents' data and meet CCPA thresholds (gross annual revenue >$25M, data on 100k+ consumers/households, or >50% revenue from selling personal information). CCPA Section 1798.100 requires you to disclose what data ConvertKit collects and its purposes in your privacy policy.
