Privacy Policy

Introduction

VIP13 ("we," "us," or "our") is an engagement intelligence service operated by Send13, LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit vip13.ai, use our services, or when our scoring engine processes engagement data on behalf of our customers.

VIP13 is designed with privacy as a structural feature: the engagement events we score are hashed before they reach our scoring layer, and we operate as a data processor on behalf of email senders who are themselves the data controllers for their own subscriber lists.

Please read this Privacy Policy carefully. By using our services, you consent to the practices described in this policy.

Information We Collect

Information You Provide

We collect information you voluntarily provide when you:

• Create an account or request a demo of VIP13
• Integrate VIP13 with your sending platform or ESP
• Contact us via email or our website
• Subscribe to our communications

This information may include:

• Contact Information: Name, email address, business address, phone number
• Business Information: Company name, website URL, role, industry
• Account Information: Login credentials, API keys, integration tokens
• Payment Information: Billing details (processed securely through our payment processor — we do not store full card numbers)

Information Collected Automatically

When you visit our website or use our dashboard, we may automatically collect:

• IP address and browser type
• Pages visited and time spent on our site
• Referring website addresses
• Device and operating system information
• API request logs and usage metrics

Engagement Data Processed on Behalf of Customers

When VIP13 customers (typically email senders, ESPs, and partner platforms) send us engagement events for scoring, those events are processed under our customers' data controller relationships with their own subscribers. We act as a data processor.

Engagement events may include:

• Hashed identifiers for email recipients
• Event types (open, click, bounce, complaint, unsubscribe)
• Event timestamps and aggregation windows
• Sender, campaign, and ESP metadata

How We Use Your Information

We use the information we collect to:

• Provide engagement intelligence scoring and classification services
• Operate, maintain, and improve our services
• Authenticate API requests and enforce rate limits
• Process payments and send transaction confirmations
• Communicate service updates, changes, and security notices
• Respond to your inquiries and provide customer support
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with legal obligations

Email Communications

We send email communications for:

• Account confirmations and security notices
• Service updates, downtime notifications, and changelog summaries
• Payment receipts and billing notices
• Responses to your inquiries

You may unsubscribe from non-essential emails by clicking the unsubscribe link in any email or contacting us directly. Operational and security communications cannot be unsubscribed from while your account is active.

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share information with:

• Service Providers: Third-party vendors who assist in operating our business (cloud hosting, payment processing, email delivery, analytics, customer support). These providers are contractually obligated to protect your information and use it only for the purposes we specify.
• Affiliates: Other companies within the Send13, LLC family of products (including Send13 and Klean13), where doing so is necessary to provide the services you've requested.
• Sender Platforms You Authorize: Aggregated scoring outputs delivered back to the customer who submitted the underlying engagement events.
• Legal Requirements: When required by law, court order, subpoena, or governmental authority, or to protect our rights, property, or safety, or that of others.
• Business Transfers: In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.

Data Security

We implement appropriate technical and organizational measures to protect personal information, including:

• TLS encryption in transit for all API and dashboard traffic
• SHA3-256 hashing of recipient identifiers before they reach our scoring layer
• Access controls, authentication, and audit logging
• Network isolation between scoring infrastructure and public-facing services
• Routine review of dependencies, secrets, and infrastructure

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain personal information for as long as necessary to:

• Provide our services and maintain your account
• Compute and serve engagement scores over rolling time windows
• Comply with legal, accounting, and reporting obligations
• Resolve disputes and enforce our agreements

Aggregated, hashed engagement data may be retained indefinitely for the purpose of supporting longitudinal scoring and reputation modeling. Identifiable account data is deleted upon verified request, subject to legal retention requirements.

International Data Transfers

VIP13 operates infrastructure primarily in the United States. If you access our services from outside the United States, your information may be transferred to, stored, and processed in the United States. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses for international transfers of personal data.

Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict processing of your information
• Opt out of certain communications
• Request a copy of your data in a portable format
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information below. We may need to verify your identity before responding.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information is collected, request deletion, correct inaccurate information, and opt out of the sale or sharing of personal information. We do not sell personal information.

Cookies and Tracking

Our website and dashboard may use cookies and similar tracking technologies for authentication, session management, security, and analytics. You can control cookie settings through your browser preferences, though disabling certain cookies may impact functionality.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Children's Privacy

Our services are intended for businesses and are not directed to individuals under 18 years of age. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. For significant changes, we will provide additional notice (such as via email or in-product notification). Continued use of our services after the effective date constitutes acceptance of the updated policy.

Contact Us