Privacy Policy

This Privacy Policy describes how SendStackr ("we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with our websites, applications, APIs, and related services (collectively, the "services").

Depending on your location, additional rights may apply as described below. The formal legal entity name operating SendStackr may be updated from time to time and should be confirmed with counsel for your records.

We may collect the following categories of information:

• Account and identity data: name, email, organization, authentication identifiers, and profile details you provide.
• Billing and payment data: billing contact, payment instrument details, and transaction records (processed by payment service providers where applicable).
• Service and usage data: configuration, workflow and project metadata, API usage, logs, diagnostics, performance metrics, and security signals.
• Communications: messages you send us (support tickets, feedback) and related correspondence.
• Content you submit: prompts, messages, attachments, knowledge-base or document uploads, webhook payloads, and other materials you choose to process through the services.
• Device and technical data: IP address, browser or client type, device identifiers, and similar data from your interaction with our sites and apps.
• Cookies and similar technologies: as described in our cookie notice and your cookie preferences where available.

We use information for the following purposes, as permitted by applicable law:

• Provide, operate, secure, and improve the services, including AI-assisted features, routing, delivery, and troubleshooting.
• Authenticate users, prevent fraud and abuse, enforce our Terms of Service, and protect rights and safety.
• Bill and collect fees, provide invoices, and manage accounts.
• Communicate about the services, security, and policy updates; send transactional messages.
• Comply with legal obligations and respond to lawful requests.
• Analyze usage in aggregate or de-identified form to understand product performance and plan capacity.

When you use AI features, your prompts and related context may be transmitted to third-party model and infrastructure providers you enable or that we integrate to operate the services. Those providers process inputs to generate outputs and may apply their own terms and safeguards.

SendStackr does not use your Customer Content to train SendStackr-owned machine learning models. Third-party model providers may have separate policies governing retention, logging, abuse prevention, and, where applicable, optional training programs; review their terms if you require specific commitments.

Where GDPR or similar laws apply, we rely on one or more of the following: performance of a contract with you; legitimate interests (such as securing and improving the services, fraud prevention, and internal analytics) where not overridden by your rights; consent where required; and legal obligation.

We may share information with:

• Service providers and subprocessors that host infrastructure, process payments, provide analytics, email delivery, customer support tooling, security monitoring, and AI inference, subject to contractual protections.
• Professional advisers (lawyers, accountants) where necessary.
• Authorities or third parties when required by law, legal process, or to protect rights, safety, and security.
• A successor entity in a merger, acquisition, financing, or sale of assets, subject to this Policy or notice to you.

We may process and store information in the United States and other countries. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms. Details can be provided upon request or as required by law.

We retain information for as long as needed to provide the services, comply with law, resolve disputes, and enforce agreements. Retention periods vary by data category and configuration (for example, logs versus uploaded documents). You may request deletion as described below, subject to legal exceptions.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict or object to certain processing, or port your data. You may opt out of non-essential cookies where our cookie controls provide that option.

To exercise privacy rights, contact [email protected]. We may verify your request as permitted by law. You may also have the right to lodge a complaint with a supervisory authority.

If you are a California resident, you may have additional rights under the CCPA/CPRA, including to know, delete, and opt out of certain "sharing" or "sales" as defined by law. We do not sell personal information in the conventional sense; we use cookies and analytics as described in our cookie tools and notices.

We implement administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

If we become aware of a breach affecting personal information under our control, we will investigate and take steps in line with our incident response procedures. We will notify affected users or regulators where required by applicable law. Notifications may be delayed to address risk or at the direction of law enforcement. Nothing in this Policy is an admission of fault or liability.

Service status and incident communication may also be posted at https://status.sendstackr.com/

The services are not directed to children under 13 (or 16 where a higher age applies by law), and we do not knowingly collect personal information from children. If you believe we have collected information from a child, contact [email protected].

We may update this Policy from time to time. We will post the updated version and revise the "Last updated" date. If changes are material, we will provide additional notice as required by law (for example, email or in-product notice). Continued use after the effective date constitutes acceptance where permitted.

Privacy inquiries: [email protected]

Legal and copyright notices: [email protected]

Qualified counsel should review this Policy, subprocessors, and product data flows before reliance.