ConvertKit Acceptable Use Policy

This policy sets the rules for what you can and cannot do when using ConvertKit to send emails. You must have direct permission from every subscriber on your list, keep proof of that permission, and avoid specific prohibited business types and practices. If ConvertKit decides you have broken the rules, your account can be closed immediately without warning, you will not get a refund, and you may not be able to get your subscriber list back.

The ConvertKit Acceptable Use Policy establishes the conditions under which customers may use the platform, with particular focus on subscriber list hygiene, content restrictions, and enforcement authority. Customers must maintain documented proof of permission for each subscriber, and subscriber acquisition is limited to two specific bases: direct permission or a purchase within the preceding 12 months accompanied by consent. The policy prohibits specified business and content categories outright, including CPA affiliate-type sites, network marketing, and non-permission-based list collection, and it bars any content or actions that violate the CAN-SPAM Act or other anti-spam laws. ConvertKit retains broad enforcement authority, including immediate account closure without prior notice, and accounts closed for violations or health-based reasons forfeit both refunds and, at ConvertKit's sole discretion, the right to export account data, subscriber lists, or details.

As a ConvertKit customer, you are required to document proof of permission for every subscriber on your list at all times. Your account can be closed immediately and without prior notice if ConvertKit determines a violation has occurred, and a closed account is not entitled to a refund of any prepaid fees. If your account is closed for a violation or a health-based reason, ConvertKit has sole discretion over whether you may export your subscriber list or account data — there is no guaranteed right to retrieve that information. You should maintain your own independent backup of subscriber data, as the policy makes data recovery after closure uncertain.