Privacy Policy.

1. Who we are

Coastar LNC, Inc. ("we", "us", "our") is a transactional email infrastructure company. This policy applies to the website at coastarlnc.com (the "site"), the Coastar LNC platform (the "platform"), and to information you share with us when you request a quote or send email through our platform.

For your account data and for information you provide through the site, we act as the data controller. For the recipient data you send through the platform, we act as a data processor on your behalf.

2. Information we collect

• Account details — your name, work email, company name, billing address, and payment method reference.
• Technical details — API keys, sending domain, configuration data, and access logs.
• Recipient data — email addresses and content you send through the platform, which we process as a data processor.
• Service history — quote requests, invoices, support tickets, and incident communications.
• Email engagement data — delivery, bounce, complaint, open, and click events, collected for deliverability and reputation purposes.
• Website usage data — browser type, device type, approximate location (city level), pages visited, and referring URL, collected via server logs and (where applicable) privacy-respecting analytics.

We do not knowingly collect information from children under 13. We do not collect sensitive categories of personal data through the site.

3. How we use information

• Provide, operate, and secure the platform and the site.
• Authenticate your account and enforce access controls.
• Deliver the emails you send through the platform.
• Process bounce and complaint events and maintain suppression lists.
• Enforce our transactional-only sending policy and detect prohibited sending.
• Invoice you and maintain business, tax, and accounting records.
• Respond to support requests and deliverability questions.
• Detect and prevent abuse, fraud, and violations of our acceptable-use policy.
• Improve the platform through aggregated, non-identifying analytics.
• Comply with legal obligations and enforce our terms of service.

We do not sell your personal information, and we do not use it for third-party advertising.

4. Legal basis for processing

If you are located in a jurisdiction that requires a legal basis for processing personal data, we rely on: performance of a contract (to provide the platform), legitimate interests (to operate and improve the platform, and to secure it against abuse), compliance with legal obligations, and, where required, your consent.

5. Transactional email only — strict policy

Coastar LNC is a transactional email platform. Every email sent through our infrastructure must be triggered by an authenticated user action or an internal application event. Marketing, promotional, newsletter, bulk, and unsolicited email are prohibited on the platform.

We are strict on bad and unsolicited email. We do not permit purchased, rented, scraped, harvested, or unknown-source email address lists. Recipients must have a direct, existing relationship with the sender. Accounts found sending to purchased lists, ignoring suppression, or sending unsolicited email are suspended immediately.

6. Recipient data

For recipient data you send through the platform, we act as a data processor under your instructions. We do not use recipient data for our own marketing or for any purpose other than providing the service. We store recipient data for as long as required to deliver the emails and to maintain delivery records, and we delete it in accordance with your account settings and the retention policy in Section 9.

7. Email communications

We use email only for legitimate transactional and operational purposes related to your account — onboarding confirmations, billing notices, deliverability alerts, and support replies. We do not send marketing, promotional, newsletter, or bulk email to our own customers, and we do not rent, scrape, or buy third-party email lists.

Our own transactional email is delivered through a reputable email service provider. Delivery results, bounce notifications, and complaint notifications are processed so we can maintain a good sending reputation and suppress addresses with permanent delivery problems or complaints. SPF, DKIM, and DMARC are enabled on our domain.

8. Cookies and analytics

The site uses a small number of cookies and similar technologies to function correctly and to understand aggregate visitor behavior. These may include essential cookies (site functionality), analytics cookies (aggregate page views), and preference cookies (remembered settings). You can control or delete cookies through your browser settings. More detail is in our cookie policy.

9. How we share information

• Service providers — trusted vendors who help us operate the platform (sending infrastructure, payment processors, support tooling, hosting). They are permitted to use your information only to provide the service to us.
• Legal requirements — when required by law, subpoena, or court order, or to protect our rights, property, or safety, or the safety of others.
• Business transfers — if we sell or transfer all or part of the business, your information may be transferred as part of that transaction, subject to the same privacy commitments.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

10. Data retention

We retain account data for as long as your account is active, plus a reasonable period afterward for backup, legal, and accounting purposes. We retain recipient data in accordance with your account settings and delete it on request. Suppression lists are retained indefinitely because they exist to prevent harm (re-sending to addresses that bounced or complained).

11. Data security

We take reasonable technical and organizational measures to protect the information we hold, including encrypted credentials, scoped API keys, audit logging, restricted access to production systems, and staff training on handling personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information in proportion to its sensitivity.

12. Your rights

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you; to object to or restrict certain processing; to request a portable copy of the information you provided to us; and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us using the details in Section 15. We will respond within a reasonable timeframe and in accordance with applicable law, and may need to verify your identity before acting on a request.

If you are a recipient of an email sent through our platform and want to exercise your data rights, please contact the sender of that email — they are the data controller for the recipient data. We will assist them in responding to your request.

13. International visitors

The platform is operated from the United States. If you access it from outside the U.S., your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your country. By using the site or the platform, you consent to this transfer.

14. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will change, and material changes will be announced on the site home page. Continued use of the site or the platform after a change constitutes acceptance of the revised policy.

15. Contact us

Coastar LNC, Inc.
General: [email protected]
Support: [email protected]
Orders: [email protected]
Website: coastarlnc.com

Version history

• · v1.0 — 24 Oct 2026 · initial publication

Effective date · 24 October 2026