Your list is an asset. We treat it like one.

Your list never leaves your workspace

Each workspace's data is isolated. We do not pool lists across customers, cross-match one customer's contacts against another's, or build shared graphs from your data.

Enrichment lookups are performed per-address on your behalf; results belong to your workspace only.

Encryption

All traffic is encrypted in transit with TLS. Data at rest is stored on Cloudflare's infrastructure (D1), which encrypts at rest by default.

Provider API keys are supplied via environment configuration and are never stored in the application database or exposed to the browser.

Deletion is deletion

Resetting or deleting a workspace removes its lists, people, events, segments, and lookalikes. We don't keep shadow copies for 'analytics'.

Waitlist emails are used to contact you about access, nothing else, and are removed on request.

No sending, ever

ListFunnel holds no sending credentials for your email tools and cannot email your list. Lookalike invites exist only as drafts until you approve and send them from your own tools.

Responsible disclosure

Found a vulnerability? Write to security@listfunnel.ai. We commit to acknowledging reports within 72 hours and will credit fixes unless you prefer otherwise.