Privacy Policy

Effective Date: 07-Jan-2026

SendPromptly (“SendPromptly”, “we”, “us”, “our”) provides a web application and API for transactional email and webhook orchestration (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Service and when you visit our website.

If you do not agree with this Privacy Policy, do not use the Service.

1. Information we collect

1.1 Information you provide

We may collect information you provide directly, including:

  • Account information: name, email address, password (or authentication tokens if using single sign-on), and billing contact details.
  • Billing information: subscription status and invoice metadata (payments are processed by our payment processor; we do not store full card numbers).
  • Project information: project name, identifiers, and configuration settings.
  • API keys and credentials you store in the Service: for example, SMTP credentials or email-provider API keys, webhook endpoints, headers, or secrets that you configure to use the Service.
  • Support communications: messages you send to support, feedback, and bug reports.

1.2 Information generated by your use of the Service

When you use the Service, we may generate and store:

  • Usage and telemetry: API request metadata (e.g., time, endpoint, status, counts), and quota usage counters.
  • Message and delivery metadata: scheduling fields, delivery status and timestamps, and related identifiers needed to operate and troubleshoot the Service.
  • Webhook delivery results: success/failure status codes and timestamps (we do not need to store full request/response bodies to provide the MVP Service).

1.3 Website information and cookies

When you visit our marketing site, we may collect:

  • IP address, browser type, device identifiers, pages visited, and referral information.
  • Cookie and similar technology data (see our Cookie Policy for details).

2. How we use information

We use information to:

  • Provide, operate, and maintain the Service (including scheduling, retries, and message delivery).
  • Authenticate users and secure accounts.
  • Process subscriptions, invoices, and tax-related records.
  • Monitor usage, enforce quotas, prevent abuse, and improve reliability.
  • Provide customer support and respond to requests.
  • Comply with legal obligations and enforce our Terms of Service.

Where required by law, we process personal information based on:

  • Contract: to provide the Service you requested.
  • Legitimate interests: to secure, maintain, and improve the Service and prevent abuse.
  • Consent: for certain cookies and marketing communications (where applicable).
  • Legal obligation: to comply with applicable laws and regulations.

4. How we share information

We may share information with:

  • Service providers that help us run the Service (e.g., hosting, monitoring, email support tooling).
  • Payment processors (e.g., Stripe) to process subscriptions and payments.
  • Legal and compliance recipients if required to comply with law, respond to lawful requests, or protect rights and safety.
  • Business transfers in connection with a merger, acquisition, or sale of assets (with appropriate notice where required).

We do not sell your personal information.

5. Data retention

We retain information for as long as necessary to:

  • provide the Service,
  • meet legal and accounting requirements,
  • resolve disputes, and
  • enforce our agreements.

Retention periods may vary by data type (e.g., billing records vs. operational logs). You may request deletion of certain personal information as described below, subject to legal obligations.

6. Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect information. However, no method of transmission or storage is 100% secure.

Your responsibilities: keep your login credentials, API keys, and provider credentials confidential, rotate them if exposed, and use least-privilege configurations where possible.

7. International transfers

Your information may be processed in jurisdictions other than where you reside, depending on where our service providers operate. We take steps designed to ensure appropriate protections for cross-border transfers where required by law.

8. Your rights and choices

Depending on your jurisdiction, you may have rights to:

  • access, correct, or delete personal information,
  • object to or restrict certain processing,
  • withdraw consent (where processing is based on consent), and
  • receive a copy of certain information.

To exercise rights, contact us using the details below.

9. Children’s privacy

The Service is not directed to children and is not intended for use by individuals under the age of majority in their jurisdiction.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date.

11. Contact us

For questions or requests related to privacy, contact:

Email: [email protected]
Website: https://sendpromptly.com