Privacy Policy

Account information. Your name, email address, and a cryptographic hash of your password (we never store the password itself). If you sign in with Google, we receive your Google account's basic profile (name and email address) instead of a password. We also store account settings, your plan, and email-verification status.

Billing information. Payments are processed by PayPal. Your full card number is entered directly with PayPal and never reaches Sendar's servers. We retain payment-provider references, subscription details, transaction records and any payment-method summary supplied by PayPal for billing and account history.

Content you send through the Service. When you send email, we process and store the message — recipient addresses, subject, body, attachments — along with delivery metadata (status, timestamps, sending domain) so you can view your email log, retrieve messages via the API, and so we can operate the platform safely.

Usage and technical data. Like most services, we keep API request logs and server logs that include IP address, user-agent, endpoint, response status, and timestamps. We use a single session cookie to keep you signed in — see our Cookie Policy.

Support messages. If we contact you, or you reply to us, through the Messages inbox in the dashboard or by email, we keep those communications.

• To provide, operate, and maintain the Service, including delivering the emails you ask us to send and showing you logs and metrics.
• To process subscriptions and payments, send receipts, and manage renewals and payment failures.
• To secure the platform: authenticating sessions and API keys, rate limiting, detecting and preventing abuse and fraud. Automated systems analyze sending patterns and raise flags, but account suspension decisions are reviewed and made by people, not by automation alone.
• To communicate with you about the Service — verification emails, security and billing notices, suspension or policy notices, and replies to your support messages.
• To comply with legal obligations and enforce our agreements, including the Terms of Service and Acceptable Use Policy.

Connecting a third-party tool is optional. Installing a Sendar skill or plugin does not by itself grant access to your account. When you authorize an OAuth connection, we record the client, account and workspace, approved permissions, connection dates, usage and revocation status. We store hashes of access and refresh tokens rather than their original values.

Read access allows the connected tool to retrieve message content, recipient addresses, recorded delivery status, domains and templates. Sending access is a separate permission. The requesting AI platform or client receives the results of the tools it invokes and handles them under its own terms and privacy policy. Only connect a tool you trust and are authorized to share your workspace information with.

You can review and revoke OAuth access in Agent connections. Revocation stops future use of that connection; it does not recall emails already sent or delete copies previously received by the third party. Request deletion of those copies from that provider. API keys have their own account permissions and must be revoked separately in API Keys.

Sendar does not use message content or recipient lists to train AI models. A connected AI provider's own data-use and retention rules still apply to information you choose to share with it. Sendar does not receive your entire conversation simply because you install a skill; it receives requests and content passed to Sendar's endpoints.

Our first-party website measurement records page paths, referring-site origins, campaign parameters and events such as signup or completion of a public tool. A random visit identifier is kept in browser session storage. Signup attribution may be linked to your account to measure activation, connected tools and paid plans. Internal reports use aggregate counts. We do not use third-party advertising trackers.

When a sender enables email tracking, tracking pixels and redirected links record opens and clicks. These signals can be affected by email clients, proxies and automated scanners and do not prove that a person read a message. Senders are responsible for providing recipients with required notices and obtaining any necessary consent.

Where laws such as the GDPR or POPIA apply, we process your information on these bases: performance of our contract with you (providing the Service, billing); our legitimate interests (securing the platform, preventing abuse, improving the Service), balanced against your rights; your consent, where we ask for it; and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.

We do not sell personal information, and we do not share it with advertisers. We share information only with the service providers that make Sendar work, under agreements that restrict their use of it:

• Oracle Cloud Infrastructure — transmits email on our behalf (delivery infrastructure, hosted in the Johannesburg, South Africa region).
• OVHcloud — hosts our production application and related infrastructure.
• Neon — provides our managed PostgreSQL database in the United States (AWS US East, Ohio).
• PayPal — processes payments; PayPal collects your card details directly under its own privacy policy.
• Google — only if you choose to sign in with Google, under Google's terms.

We may also disclose information if required by law, legal process, or a governmental request; to protect the rights, safety, or property of Sendar, our customers, or the public; or in connection with a merger, acquisition, or sale of assets (in which case this policy continues to apply to your information and we will notify you of any change of controller).

If we detect content whose creation or distribution is itself a crime — such as child sexual abuse material — or credible threats of imminent harm to a person, we may preserve the related records and report them to law enforcement or child-protection authorities on our own initiative, as permitted or required by law.

Our customers use Sendar to send their own email. For recipient personal data — your email address and the contents of messages addressed to you — the sender is the data controller and Sendar is a processor acting on the sender's instructions. We use recipient data only to deliver and log the sender's mail and to keep the platform safe (for example, abuse detection); we do not use it for advertising and we do not sell it.

If you want mail from a particular sender to stop, or want your data corrected or deleted, the fastest path is to contact the sender — they control their lists. You can also write to privacy@sendar.app and we will forward your request to the sender and assist as required by law. To report spam or abuse involving our platform, see the reporting section of our Acceptable Use Policy.

We keep your account information for as long as your account exists. Email logs and attachments remain available in your account while it is active so you can consult and retrieve them. Server and request logs are kept for a limited period for security and troubleshooting.

When you delete your account (Settings → Account), deletion is immediate and permanent: your domains, API keys, email logs and attachments, webhooks, messages, and profile are removed from the live database. We may retain limited records after deletion where we have a legal basis to do so — transaction records required for financial compliance and internal administrative audit entries (which may reference a deleted account's identifier) — and residual copies may persist in backups until those backups are replaced or removed under the applicable retention process. Revoked connection records may remain for security and audit purposes; revocation does not delete message history.

Measures we use to protect your information include:

• Encryption in transit (TLS) for the website, API, and email submission.
• Passwords stored only as strong one-way hashes (scrypt); API keys stored hashed, shown once at creation.
• HttpOnly, signed session cookies; session invalidation on password change.
• Rate limiting on authentication endpoints and platform-wide abuse monitoring with human review.
• Webhook payloads signed with per-endpoint HMAC secrets so you can verify authenticity.
• Administrative actions on accounts are recorded in an audit log.

No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we work to protect your information and to notify you of any breach as required by law.

We use OVHcloud for application hosting, Neon in the United States for our database, and Oracle Cloud Infrastructure in South Africa for email delivery. Connected third-party tools may process data in the countries described in their own privacy policies. Your information may therefore be processed outside your own country. Where required — for example, for transfers of European personal data — we rely on appropriate safeguards such as standard contractual clauses with our providers, as described further in our Data Processing Addendum.

Depending on where you live, you may have rights to access, correct, export, delete, or restrict the processing of your personal information, and to object to certain processing or withdraw consent. Many of these are self-serve in Sendar:

• Update your name and email in Settings → Profile.
• Review and revoke OAuth connections in Agent connections, and revoke API keys separately.
• Review your sending history and retrieve content via the dashboard and API.
• Delete your account — and the data listed above — permanently in Settings.

For anything else, contact privacy@sendar.app; we respond within the timelines required by applicable law and may need to verify your identity first. If you are unsatisfied with our response, you may lodge a complaint with your local data protection authority.

The Service is not directed to children and may not be used by anyone under 18. We do not knowingly collect personal information from children; if you believe a child has provided us personal information, contact us and we will delete it.

We use a single strictly-necessary session cookie to keep you signed in, and no advertising or third-party analytics cookies. Details, including the third-party cookies that PayPal and Google may set during checkout or sign-in, are in our Cookie Policy.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the dashboard before they take effect, and we will update the "Last updated" date above. Your continued use of the Service after a change takes effect means the updated policy applies.

For privacy questions or requests, contact privacy@sendar.app. For general support, use support@sendar.app.