Privacy Policy

1. Information we handle

We handle the information you provide to create and manage an account, including your name, email address, organization and team details. Account security records may include password hashes, multi-factor authentication settings and recovery information.

When you use messaging features, we may process phone numbers, contacts, consent records, message content and attachments, templates, campaign activity and delivery events. We also keep wallet and transaction records, usage information, support correspondence, and technical or security logs such as IP addresses and request activity.

If you enable an AI assistant, the business knowledge, documents, instructions and conversation content needed to respond may be processed as part of that feature. Providing information to an assistant is optional; do not include information you are not authorized to share.

2. Google and GitHub sign-in

If you choose Google or GitHub sign-in, we receive your provider account identifier, verified email address and basic profile information to create or authenticate your customer account. GitHub sign-in does not request access to your repositories. Sendlyy does not store the provider’s access or refresh tokens for this sign-in flow.

We do not automatically merge accounts because their emails match. Existing customers must sign in and explicitly link an additional provider. You can manage connected providers from your account, subject to retaining a way to sign in, and revoke authorization through the provider’s own settings.

3. How and why we use information

We use information to provide the service you request, authenticate users, manage organizations and permissions, deliver messages, operate enabled assistants, account for charges, provide support, prevent abuse and meet legal obligations.

Depending on the activity and applicable law, processing is based on performing our agreement with you, your consent, legal obligations or legitimate interests in operating and securing the service. Where consent is required, you may withdraw it without affecting earlier lawful processing.

For account administration, security and billing, Sendlyy determines how information is used. When a business uses Sendlyy to handle its customers’ messages and contacts, that business generally determines the purpose of processing and Sendlyy processes that information to provide its service. Contact that business first about its customer records.

4. Providers and disclosure

Delivering enabled features can require sharing relevant information with infrastructure providers, Meta/WhatsApp, email services, payment providers and the AI provider configured for the service. Google or GitHub processes information under its own policy when you choose that sign-in method. Your organization’s authorized teammates may access its workspace information according to their permissions.

We do not sell personal information. We may disclose information when legally required, to investigate fraud or security threats, or to protect the rights of users and the service. Providers may process data outside your country; applicable transfer requirements and safeguards must be considered when configuring services for your business.

5. Security and retention

We use controls such as HTTPS, access permissions, multi-factor authentication for staff, and protected credentials and session keys. No online service can guarantee complete security. Keep your account credentials and recovery codes private and report suspected compromise promptly.

We retain information for as long as needed to provide the service, maintain required financial records, investigate abuse, resolve disputes and meet legal obligations. Retention depends on the record and purpose. Deletion requests may be limited by those obligations, and copies may remain in backups until their normal replacement cycle.

6. Cookies and browser storage

Sendlyy uses essential session and security cookies to sign you in, protect forms and complete optional social sign-in. Browser storage can remember preferences such as your theme. Demonstration workspaces may also store sample edits locally in your browser.

You can clear browser storage or block cookies using your browser settings. Doing so can sign you out, reset preferences or prevent authentication from working. Google and GitHub may use their own cookies when you visit their sign-in pages.

7. Your choices and rights

Subject to applicable law, you may request access, correction, deletion, restriction or a copy of your personal information, object to certain processing, or withdraw consent. We may need to verify your identity before acting on a request. You may also complain to the relevant data protection authority, including the Nigeria Data Protection Commission where applicable.

Business customers are responsible for handling their contacts’ consent, opt-outs and privacy requests. The service is intended for adults acting for a business, not for children to create accounts.

8. Changes to this policy

We will update the date above when this policy changes and provide additional notice where a material change or applicable law requires it.

9. Privacy questions and requests

For questions or requests, contact ReenEdge Solutions Limited at [email protected].