Privacy · last updated 28 October 2026
What we collect, and what we don't.
Keep Your Chain is run by Life Vitamin Co. LLC in Manhattan Beach, California. This page covers two kinds of data: yours, as a customer, and the prospect data you bring into the product to email. We sell neither, we don't track opens or clicks, and we don't use your data to train AI models.
Your account
What: your name and email address, your company name and postal address (the law puts the address in every cold email), your workspace settings, and a record of what happens in the app (sign-ins, changes, sends) so we can support you and keep it secure.
Billing: Stripe takes your card details directly; they never reach our servers. We keep your Stripe customer and subscription ids, your plan and its status.
Website: keepyourchain.com sets no cookies and runs no analytics or advertising pixels. If you joined the waitlist before launch, we kept your email, the page, the time, your browser string and IP address; email us to have it deleted.
Why we can: to provide the service you signed up for (contract), and to keep it secure and working (legitimate interest).
Prospect data you bring in
To run your outreach the product stores the prospects you import or find (names, work email addresses, titles, company, website, and any extra columns you add), the apps a storefront publicly runs, and the email threads between your sending mailboxes and those prospects. For this data you are the controller and we are your processor: we use it only to run Keep Your Chain for you, under our Data Processing Addendum. You are responsible for having a lawful basis to email the people you add, and for honoring their objections; the product helps by suppressing anyone who asks to stop, at once and for good.
We read your sending mailboxes only for messages that belong to an outreach thread the product started. Other mail in those mailboxes is not stored. We reach them through Microsoft Graph, with the two permissions you grant your own app registration in your Microsoft 365 tenant: Mail.ReadWrite (to read thread mail and, when you ask, remove your copies) and Mail.Send (to send).
Exploring with sample data: the free sandbox holds a made-up company. We keep your email address and what you do there, and nothing in it is ever sent.
Claude and other AI assistants
If you connect Keep Your Chain to Claude, or another assistant that supports MCP, you sign in with OAuth and approve the access on our consent screen. The assistant then sees what its tools return from your workspace (threads, prospects, sequences, numbers) and can act through them; that data goes to the assistant's provider under your agreement with them. We keep only a hashed token for the connection; one unused for 180 days expires. Changes made through it are in the activity log like any other. We don't receive your conversations. Disconnect it any time under Settings → Claude & connected apps.
Who processes it
| Service | What for | Where |
|---|---|---|
| Cloudflare | Hosting, database, backups, and the built-in model that drafts suggested replies | United States and Cloudflare's network |
| Stripe | Payments and invoices | United States |
| Resend | Sign-in links and account email (never outreach) | United States |
Some integrations are ones you turn on and contract with directly, with your own account or key: Microsoft 365 (your mailboxes), and optionally MillionVerifier, Apollo, Anthropic or OpenAI (for drafts), Telegram, Google Postmaster Tools and Cloudflare DNS. When you connect one, the data that integration needs goes to it under your agreement with that provider.
How long we keep it
- Workspace data (prospects, threads, sequences, settings): while your account is open. You can delete all of it any time from Settings, and we delete it within 30 days after an account closes.
- The activity log: 180 days. Sign-in sessions: 30 days.
- Database backups are replaced on a rolling basis, so deleted data leaves them over the following weeks.
- Billing records: as long as tax law requires (in Stripe).
Security
Every connection is encrypted in transit. Mailbox credentials and API keys are encrypted at rest with AES-256-GCM, under a key unique to your workspace. Every query is scoped to your workspace, and the test suite checks that one workspace can never read or change another's data. Sign-in is by one-time email link; there are no passwords to leak.
Your rights
You can export everything as CSV at any time (Settings → Your data) and delete it from Settings. To access, correct or delete your account data, or if you are a prospect who received email through Keep Your Chain, write to [email protected]. If you are a prospect, we will pass your request to the customer who emailed you, who controls that data, and add you to their suppression list if you ask. Depending on where you live (for example the EU, UK or California) you may also have the right to object, to restrict processing, and to complain to a regulator. We don't sell or share personal information for advertising.
Changes
If we change this page in a way that matters, we will email account owners before it takes effect.
Life Vitamin Co. LLC · 1601 N. Sepulveda Blvd. #584, Manhattan Beach, CA 90266 · [email protected]