Privacy Policy

We collect information to provide, improve, and personalize our services. The types of information we collect include:

We use the information we collect for the following purposes:

• Provide, operate, maintain, and improve the SenderWiz platform and all related services
• Process transactions, send billing notifications, invoices, and payment confirmations
• Send platform updates, security alerts, product announcements, and support messages
• Analyze usage patterns and aggregate analytics to improve features, performance, and user experience
• Detect, prevent, and investigate fraud, abuse, spam, and unauthorized access to our systems
• Personalize your experience by tailoring the dashboard, recommendations, and communications
• Comply with legal obligations, enforce our Terms of Service, and protect the rights and safety of our users
• Conduct research and development to build new features and products
• Communicate with you about your account, respond to inquiries, and provide technical support

We do not sell, rent, or trade your personal information to third parties. We may share information only in the following circumstances:

• Service Providers: Trusted third-party vendors who assist in operating our Platform (e.g., Stripe for payments, cloud hosting providers, analytics tools). All providers are bound by strict data processing agreements
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Safety & Security: To protect the rights, property, or safety of SenderWiz, our users, or the public
• Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our assets — your data will remain subject to this Privacy Policy
• With Your Consent: When you explicitly authorize us to share your information with a third party
• Aggregated Data: We may share anonymized, aggregated statistics that cannot be used to identify you (e.g., "85% of users see improved deliverability")

We retain your personal information for as long as your account is active or as reasonably needed to provide our services. Specific retention periods include:

• Account data: Retained for the lifetime of your account plus 30 days after deletion request
• Campaign analytics: Retained for 24 months after the campaign was sent, then aggregated and anonymized
• Billing records: Retained for 7 years as required by tax and financial regulations
• Support conversations: Retained for 3 years for quality assurance and dispute resolution
• Server logs: Retained for 90 days for security monitoring and troubleshooting

You can request deletion of your data at any time by visiting our contact page. We will process deletion requests within 30 days, except where retention is required by law.

We implement comprehensive, industry-standard security measures to protect your data against unauthorized access, alteration, disclosure, or destruction:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2+ (HTTPS)
• Encryption at rest: Sensitive data stored on our servers is encrypted using AES-256 encryption
• Access controls: Role-based access controls (RBAC) limit employee access to data on a need-to-know basis
• Infrastructure security: Our servers are hosted in SOC 2 Type II certified data centers with 24/7 physical security
• Regular audits: We conduct periodic security assessments, vulnerability scans, and penetration testing
• Incident response: We maintain a documented incident response plan and will notify affected users within 72 hours of a confirmed breach
• Secure development: Our development process follows OWASP guidelines and includes security code reviews

Depending on your location, you have certain rights regarding your personal data. We honor these rights for all users regardless of jurisdiction:

• Right to Access: Request a copy of the personal data we hold about you in a structured, machine-readable format
• Right to Rectification: Request correction of any inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Restriction: Request that we limit processing of your data in certain circumstances
• Right to Portability: Receive your data in a standard format and transfer it to another provider
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time for processing based on consent (without affecting prior processing)

To exercise any of these rights, visit our contact page. We will respond to your request within 30 days. For EU residents, see our GDPR Compliance page for additional information.

We use cookies and similar technologies (pixels, web beacons, local storage) to enhance your experience, analyze usage, and deliver targeted content. We categorize cookies as essential, analytics, functional, and marketing.

For complete details on the cookies we use, how to manage your preferences, and third-party cookie providers, please see our dedicated Cookie Policy.

SenderWiz operates globally and your data may be transferred to and processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA
• Data processing agreements with all sub-processors that meet GDPR requirements
• Encryption and access controls that apply regardless of where data is stored or processed

SenderWiz is a business-to-business platform and is not intended for individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

If we become aware that we have inadvertently collected personal information from a child under the applicable age, we will take steps to delete that information as quickly as possible. If you believe a child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• We will post the updated policy on this page with a revised "Last updated" date
• We will notify you via email at least 14 days before material changes take effect
• For significant changes affecting your rights, we may require you to review and acknowledge the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, we're here to help.