Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The document footer references a Privacy Policy as a companion document, indicating that data collection, use, and sharing practices are governed by a separate policy document linked from the platform.
This analysis describes what ConvertKit's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Privacy policies incorporated by reference into terms of service form part of the overall contractual framework; the specific data types collected, sharing authorizations, and user rights established by Kit's Privacy Policy govern the data relationship between Kit and its users.
Interpretive note: The full Privacy Policy text was not provided in the document extract; specific data practices, sharing authorizations, and user rights cannot be confirmed from available content.
Under this structure, the terms of the Privacy Policy apply to users alongside the Terms of Service, meaning data collection, use, and sharing practices are established by a document separate from the primary terms. Users should review the Privacy Policy to understand which data types are collected and how they are used.
Cross-platform context
See how other platforms handle Privacy Policy Incorporation and similar clauses.
Compare across platforms →Monitoring
ConvertKit has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
(1) REGULATORY LANDSCAPE: Privacy policy incorporation by reference engages the FTC Act's unfair or deceptive practices framework, which requires that incorporated privacy terms be accurate, accessible, and consistent with actual practices. State privacy laws including the California Consumer Privacy Act and similar state frameworks may impose specific disclosure and opt-out requirements depending on user geography. (2) GOVERNANCE EXPOSURE: Medium. The Privacy Policy was not provided in this document extract, meaning the specific data collection categories, sharing authorizations, retention periods, and user rights cannot be assessed from available content. (3) JURISDICTION FLAGS: California residents have specific CCPA rights that the Privacy Policy should address. Virginia, Colorado, Connecticut, and other US states with comprehensive privacy laws may also create jurisdiction-specific obligations. EU and UK users are addressed via the separate GDPR documentation. (4) CONTRACT AND VENDOR IMPLICATIONS: B2B customers using Kit as a vendor should confirm that the Privacy Policy and any associated Data Processing Agreement are consistent with their own privacy obligations and vendor management requirements. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should obtain and review the full Privacy Policy to assess data collection categories, third-party sharing practices, retention schedules, and the mechanisms provided for user rights requests including access, deletion, and portability.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Privacy policies incorporated by reference into terms of service form part of the overall contractual framework; the specific data types collected, sharing authorizations, and user rights established by Kit's Privacy Policy govern the data relationship between Kit and its users.
Under this structure, the terms of the Privacy Policy apply to users alongside the Terms of Service, meaning data collection, use, and sharing practices are established by a document separate from the primary terms. Users should review the Privacy Policy to understand which data types are collected and how they are used.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ConvertKit.