Privacy Policy

1. Scope

This Privacy Policy applies to Sendout websites, accounts, APIs, SMTP interfaces, support interactions, and operational services.

2. Information we may process

• Account and contact information.
• Authentication, security, and audit information.
• Domain, DNS, sender, API, and SMTP configuration.
• Recipient addresses and message metadata required to route email.
• Email content as necessary to transmit, troubleshoot, secure, and support delivery.
• Delivery events such as delivery, bounce, complaint, reject, open, or click signals where enabled.
• Support communications and abuse reports.
• Billing and transaction information handled directly or through payment providers.

3. Purposes

We process information to provide and secure the service, authenticate users, route email, verify senders, prevent abuse, maintain suppression, troubleshoot delivery, provide logs and webhooks, respond to support requests, comply with law, and protect platform reputation.

4. Customer and Sendout roles

For customer recipient data and message content, the customer generally determines the purpose and means of communication and is responsible for the applicable legal basis. Sendout processes such data to provide the requested infrastructure and related security and operational functions.

5. Sharing and subprocessors

Sendout may use infrastructure, email delivery, security, DNS/CDN, payment, authentication, monitoring, and support providers. We limit sharing to what is reasonably necessary for the provider’s role and maintain a subprocessor information page.

6. Retention

We retain information only for as long as reasonably necessary for service delivery, security, fraud and abuse prevention, troubleshooting, legal compliance, dispute resolution, and customer-configured functionality. Different categories may have different retention periods.

7. Security

Sendout uses or requires safeguards appropriate to the service, which may include TLS in transit, access controls, secret management, logging, monitoring, least-privilege practices, domain verification, and incident response procedures.

8. Data subject requests

Requests relating to personal data may be sent to support@sendout.com.br. Where Sendout acts only on behalf of a customer, we may direct the requester to the relevant customer or assist the customer as appropriate.

9. International processing

Infrastructure and service providers may process data in multiple jurisdictions. Where required, customers and Sendout are responsible for using appropriate legal mechanisms for international transfers.

10. Changes and contact

We may update this policy as the service evolves. Questions or privacy requests may be sent to support@sendout.com.br.