What we send to the AI
Your copy and your brand — never your contacts.
One line governs all of it: you describing your own business is fine; anything describing a recipient is not. Everything below follows from that.
Sent, and not sent
| Sent | Never sent |
|---|---|
| The campaign copy you’re working on | Contact names, addresses or phone numbers |
| Your brand profile | Anything stored in a custom field |
| The names of your custom fields | The values in them |
| The names of lists and segments you’re targeting | Who is in them, or the rules that define them |
| Aggregate counts, for a report summary | Who opened or clicked |
How personalization stays private
Penny writes {{firstName}} — the tag, not a name. Real values are substituted at send time, long after the AI is out of the loop. So a personalized campaign to fifty thousand people involves the AI seeing zero of them.
Why segment rules aren't sent either
A rule can quote contact data — “email contains @acme.com”, “city equals Leeds”. So when Penny needs to know what a flow does, she gets the segment’s name, not its rules.
Report summaries
When you ask Penny to summarise a campaign report, she gets the counts and rates, the campaign’s own subject line, and the links that were in it. She does not get the list of who clicked — that’s the part of a report that identifies people.
Even your colleagues' names
When Penny reviews an automation containing a “notify your team” step, she’s told the step emails the account owners — not who they are. A structural review learns nothing from knowing which colleague gets the alert.
FAQs
Is my content used to train models?+
No. Requests go to the model provider to produce your result and are not used for training.
Can I stop using the AI entirely?+
Yes — every AI feature is something you press. If you never press them, nothing about your account is sent anywhere.
Does the abuse check send my campaign to the AI?+
A screening step reads campaign copy before a bulk send, on the same terms as everything else here: your copy, never your contacts. It exists so that one account can’t use the platform to send phishing under a shared reputation.