Privacy Policy
Beta version — June 10, 2026
What we process
- Your account: your sign-in email address (magic link, no password).
- Your sending accounts: SMTP/IMAP credentials — passwords are encrypted (AES-256-GCM) and never displayed.
- Your contacts: the emails, names and variables you import. You are the data controller; Sendwren acts as a processor.
- Replies: subjects and excerpts of replies to your campaigns, read over IMAP to stop sequences and classify them.
Subprocessors
Hosting and database: Railway (US). Text generation and classification: Anthropic (reply excerpts are sent to the Claude API for sorting). Payments: Stripe. Sign-in emails: Resend. Address verification: ZeroBounce (when enabled).
Your rights — and your contacts'
Full CSV export and contact deletion are available in the app. Every email sent contains a one-click unsubscribe link; an unsubscribed contact receives nothing. For GDPR requests (access, rectification, erasure), write to us — we answer within 30 days.
What we don't do
No selling of data, no ads, no model training on your contacts or your emails. Open/click tracking is optional and can be turned off per campaign.
Data controller: Sendwren — Lausanne, Switzerland (Swiss FADP + GDPR for European contacts).