Privacy Policy

1. Introduction

zSender ("we", "us", "our") operates an email-sending platform (an email service provider, or "ESP"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, dashboard, and API.

2. Information We Collect

2.1 Account Information

When you create an account we collect your email address, your name (if provided), and authentication credentials (passwords are stored hashed; API keys are stored hashed).

2.2 Usage Data

We automatically collect sign-in and dashboard activity, approximate location derived from IP address, browser/user-agent, and product analytics (see Section 9).

2.3 Payment Information

Payments are processed by our payment partner Polar. We do not store full card numbers; we retain billing status and invoices needed to operate your subscription.

2.4 Customer Email Data

To deliver the service we process the email you send through us — message content, headers, sender and recipient addresses, and delivery events (sent, opened, clicked, bounced, complained), plus suppression-list entries. We process this data on your behalf as a data processor; you remain the controller of your recipient data.

3. How We Use Your Information

We use your information to provide and operate the service, deliver and monitor your email, maintain deliverability and prevent abuse, process billing, provide support, secure the platform, and understand product usage in aggregate.

4. Email & Sending Data

We retain sending metadata (messages, recipients, and delivery/open/click/bounce/complaint events) to operate the service, support you, and protect deliverability and our network from abuse. You control your recipient lists and your suppression list; we honor unsubscribe and complaint signals automatically.

5. Data Sharing

We share data only as needed to run the service:

• Service providers / sub-processors: Polar (payments), Google Analytics (website/product analytics), and our email-delivery infrastructure (a self-hosted Postal mail server on our cloud hosting).
• Legal requirements: when required by law or to protect our rights, users, or the public.

We do not sell your personal data.

6. Data Security

We encrypt data in transit (TLS), restrict access to authorized personnel, hash credentials and API keys, and run on a hardened, firewalled environment. No method of transmission or storage is 100% secure, but we work to protect your data.

7. Data Retention

We retain account data while your account is active, sending logs for a limited operational window, and payment records for as long as required by law (typically several years). When data is no longer needed we delete or anonymize it.

8. Your Rights (GDPR)

Depending on your location you may have the right to access, correct, delete, export, or object to the processing of your personal data. To exercise these rights, contact us at [email protected]. Where we process recipient data on a customer's behalf, we act as a processor and will route such requests to the relevant customer (the controller).

9. Cookies & Analytics

We use essential cookies for authentication and session management. We also use Google Analytics 4 with Consent Mode: analytics cookies are set only after you accept; until then only aggregate, cookieless measurement is collected. We never send your account identity to Google. You can change your choice at any time:

Cookie preferences

10. Children's Privacy

Our service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

11. International Transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced, and the "Last updated" date above reflects the latest revision.

13. Contact Us

For privacy-related questions or requests, contact us at [email protected].