Provision record
ConvertKit · ConvertKit Terms of Service · View original document ↗

Privacy Policy Incorporation

Medium severity Low confidence Inferred from context Unique · 0 of 352 platforms
Stay ahead of the changes
Track ConvertKit and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

The document footer references a Privacy Policy as a companion document, indicating that data collection, use, and sharing practices are governed by a separate policy document linked from the platform.

This analysis describes what ConvertKit's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Privacy policies incorporated by reference into terms of service form part of the overall contractual framework; the specific data types collected, sharing authorizations, and user rights established by Kit's Privacy Policy govern the data relationship between Kit and its users.

Interpretive note: The full Privacy Policy text was not provided in the document extract; specific data practices, sharing authorizations, and user rights cannot be confirmed from available content.

Consumer impact (what this means for users)

Under this structure, the terms of the Privacy Policy apply to users alongside the Terms of Service, meaning data collection, use, and sharing practices are established by a document separate from the primary terms. Users should review the Privacy Policy to understand which data types are collected and how they are used.

Cross-platform context

See how other platforms handle Privacy Policy Incorporation and similar clauses.

Compare across platforms →
ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

(1) REGULATORY LANDSCAPE: Privacy policy incorporation by reference engages the FTC Act's unfair or deceptive practices framework, which requires that incorporated privacy terms be accurate, accessible, and consistent with actual practices.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • Federal Trade Commission (ftc)
    Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
    Who can file: Anyone affected by the company's practices (US or international)
    What you need: Your account details, a timeline of relevant events, and a description of the specific issue
    What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
    File a complaint →
  • State Attorney General
    State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
    Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
    What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
    What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.

    Search "[your state] attorney general consumer complaint" to find your state's direct complaint form

Provision details

Document information
Document
ConvertKit Terms of Service
Entity
ConvertKit
Document last updated
May 20, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-015232
Document ID
CA-D-00889
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
5cc6394e0108a834e3b320148feeb88101c02362d078b6827015574d273d1f1c
Analysis generated
July 9, 2026 07:32 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: ConvertKit
Document: ConvertKit Terms of Service
Record ID: CA-P-015232
Captured: 2026-07-09 07:32:00 UTC
SHA-256: 5cc6394e0108a834…
URL: https://conductatlas.com/platform/convertkit/convertkit-terms-of-service/provision/CA-P-015232/privacy-policy-incorporation/
Accessed: Sept. 21, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does ConvertKit's Privacy Policy Incorporation clause do?

Privacy policies incorporated by reference into terms of service form part of the overall contractual framework; the specific data types collected, sharing authorizations, and user rights established by Kit's Privacy Policy govern the data relationship between Kit and its users.

How does this clause affect you?

Under this structure, the terms of the Privacy Policy apply to users alongside the Terms of Service, meaning data collection, use, and sharing practices are established by a document separate from the primary terms. Users should review the Privacy Policy to understand which data types are collected and how they are used.

Is ConductAtlas affiliated with ConvertKit?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ConvertKit.