Skip to main content
SendPulse logo

SendPulse

Based exclusively on public evidence • 20 criteria (Privacy + AI)
Last review: 26 Feb 2026

C-
AITS IA

AI Trust Summary

AI Training
NO — explicit policy
Data Retention
Not specified in documentation
Opt-out
Implicit opt-out (company does not train with data)
AIPrivacy
C-
BasePrivacy
C-
  • Regarding AI: it does not mention a mechanism for contesting automated decisions, which may limit user rights.
  • Regarding Core Privacy: it clearly defines the roles of controller and processor, ensuring well-defined responsibilities in data protection.

Safer Alternatives

Higher-rated software in the same category

See Full Alternative Comparison

Attention Points in AI (3)

AI criteria that require attention. Buy the Premium Analysis to see all 3 criteria.

  • SendPulse
  • Does not mention AI data retention, creating uncertainty about information usage.
  • Omission regarding international data transfer may create protection risks.
  • Require clarification on retention and transfer in the contract to mitigate uncertainties.

AI decision contestation mechanism not available

The policy does not specifically mention the possibility of human review of automated decisions, which may limit user rights.

AI data retention (prompts and responses) is not disclosed

The policy does not mention the retention of AI data in a granular way, which may create uncertainty about the use of email addresses and campaign interactions.

Ethical AI principles and anti-bias measures not documented

The policy does not mention ethical AI principles, which may raise concerns about the responsible use of email addresses and campaign interactions.

Source: vendor public documents

Compliances in AI (3)

AI criteria the company meets. Buy the Premium Analysis to see all 3 criteria.

  • SendPulse
  • Documents that it does not use user data to train AI without explicit consent.
  • Clearly defines SendPulse as the data controller, ensuring clarity on responsibilities.
  • These practices strengthen due diligence by demonstrating a commitment to data protection.

Policy on data use for AI training clearly stated

SendPulse states that it does not use email addresses and campaign interactions to train AI models without explicit consent, ensuring greater user control.

AI training opt-out control available

Users can revoke consent for the use of their email addresses and campaign interactions in AI training at any time, promoting transparency.

Use of artificial intelligence clearly disclosed in policies

SendPulse clearly informs about the use of AI tools, which helps users understand how their campaign interactions are processed.

Source: vendor public documents

Highlights in Privacy (3)

Most relevant criteria for this category. Buy the Premium Analysis to see all 3 criteria.

Information about international data transfers is missing

The policy mentions international operation, but does not explicitly detail all destination countries, which may create uncertainty about data protection.

Data controller and processor roles clearly defined

The policy identifies SendPulse as the controller of email addresses and campaign interactions, ensuring clarity on responsibilities.

Data controller identity and contact clearly disclosed

SendPulse provides clear information about its identity and contact, facilitating communication regarding email addresses and campaign interactions.

Source: vendor public documents

Critical Alerts

  • Retenção de dados de IA (prompts e respostas) não é informada: Importante para que os usuários saibam como seus dados são tratados em interações com IA..
  • Informações sobre transferência internacional de dados ausentes: Importante para que os usuários saibam onde seus dados estão sendo transferidos e como são protegidos.

Conformance analysis (20)

Premium Feature
AITS Criterion 2
Compliant

Policy on the use of email addresses for AI training declared

Reference: ISO/IEC 42001 (8.2) + ISO/IEC 23894 + EU AI Act

AITS Criterion 3
Compliant

Opt-out control for AI training available

Reference: ISO/IEC 42001 (8.3) + ISO/IEC 29100 + EU AI Act

AITS Criterion 4
Compliant

Use of artificial intelligence clearly stated in policies

Reference: ISO/IEC 42001 (7.4)

Source: vendor public documents

Follow this company and access all 20 criteria

Track score changes, get alerts on policy updates, and view the full conformance analysis

Sign up free

Don't miss any update

Sign up to follow this company and track changes in privacy and AI scores

Sign up free

Why trust the AITS Index: Open Community Audit

Public transparency, peer review and open evidence trails — all verifiable by the community

Trust guarantees

Peer review

users, professionals and experts confirm or contest items online.

Public history

vendor and index changes are versioned and accessible.

Participate

Evidence, confirmations and contestations

participate in the collaborative validation of AITS criteria

Contact us

Understanding SendPulse: Privacy and AI Governance Insights

Clear Data Usage Policy for AI

SendPulse stands out with its transparent policy regarding the use of email addresses for AI training. This clarity is crucial for users who want to ensure their data is handled responsibly. The platform explicitly states that it does not utilize email addresses without user consent, which aligns with privacy regulations like GDPR and LGPD. By having a clear policy, SendPulse allows users to feel more secure about how their data is being used, contributing to a stronger trust relationship.

Defined Roles in Data Protection

Another strength of SendPulse is its well-defined roles of data controller and data processor. This distinction is important as it clarifies the responsibilities of each party in protecting user data. Users can feel reassured knowing that SendPulse takes its obligations seriously, ensuring that data protection measures are in place. This is particularly relevant under ISO 27701 guidelines, which emphasize the importance of clear accountability in data management.

Lack of Mechanism for Contesting AI Decisions

Despite its strengths, SendPulse has a notable weakness: the absence of a mechanism for contesting automated AI decisions. This gap can limit users' rights, particularly in scenarios where AI-driven decisions impact their experience or access to services. Without this feature, users may feel powerless if they disagree with an AI-generated outcome. It’s advisable for users to remain vigilant about how AI decisions are made and to seek clarification from SendPulse when necessary.

Unclear Data Retention Policies

Another significant weakness is the lack of information regarding the retention of AI-related data, such as prompts and responses. Users should be aware that without clear retention policies, their data could be stored longer than necessary, potentially increasing the risk of data breaches. To mitigate this risk, users should inquire directly with SendPulse about their data retention practices and consider limiting the amount of sensitive information shared through the platform.

Practical Settings to Enhance Privacy

To enhance privacy while using SendPulse, users should review their account settings carefully. Ensure that consent options are enabled for data sharing and that any features related to AI training are clearly understood. Users should also consider utilizing features that allow them to manage their data preferences actively. Regularly checking these settings can help users maintain control over their personal information and ensure compliance with privacy regulations.

Exploring Alternatives and Precautions

Given the identified weaknesses, users might want to explore alternative email marketing platforms that offer more robust privacy features, especially concerning AI decision-making and data retention. Additionally, users should stay informed about their rights under GDPR and LGPD, which empower them to request data deletion or contest decisions. Engaging with SendPulse’s support team for clarification on these issues can also be beneficial, ensuring that users are fully aware of their rights and the platform's practices.

Other Email Marketing software

Dive into in-depth research and analysis of each player

Source: vendor public documents

Evidence, confirmations and contestations

participate in the collaborative validation of AITS criteria

Contact us

Scope & Limitations

TrustThis/AITS assessments are based exclusively on publicly available information, duly cited with date and URL, following the AITS methodology (privacy & AI transparency).

The content is indicative in nature, intended for screening and comparison, not replacing internal audits.

TrustThis/AITS does not perform invasive tests, does not access vendor technology environments and does not process customer personal data. Conclusions reflect only the vendor's public communication at the date of collection.

Source: vendor public documents