Legal

Privacy Policy

Effective Date: December 21, 2025

SendPigeon ("we," "us," or "our") values your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our transactional email API and related services ("Service"). By using the Service, you consent to the practices described below.

1. Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address
  • Password (securely hashed)
  • Organization name

Email Data

When you send emails through our Service, we collect:

  • Sender and recipient addresses (to, from, cc, bcc)
  • Email subject lines and body content (HTML and plain text)
  • Attachment metadata (filename, size, type)
  • Delivery status, timestamps, bounces, and complaints

Purpose: This data is necessary to provide the Service, track deliveries, handle bounces, and support debugging.

Inbound Email Data

If you use our inbound email feature, we collect:

  • Incoming email content and attachments
  • Sender information
  • Processing timestamps

Technical Data

We automatically collect:

  • IP address and user agent
  • API request logs and error logs

Billing Information

Payments are processed by a third-party payment processor. We store only:

  • Payment processor customer ID
  • Subscription plan details

We do not store credit card numbers.

2. How We Use Your Information

We use information to:

  • Provide, maintain, and improve the Service
  • Send emails and track delivery status
  • Handle bounces and complaints
  • Process payments and manage subscriptions
  • Send service notifications (account, billing, security)
  • Debug and troubleshoot issues
  • Prevent abuse and enforce our Terms of Service

Legal bases for processing (GDPR): consent, contract performance, and legitimate interests (security, fraud prevention, analytics).

3. Data Retention

We retain data according to your subscription plan:

  • Email logs and body content: Varies by plan (7 to 30 days)
  • Account data: Retained while active and for 30 days after deletion request
  • Inbound emails: Retained according to your plan limits

You may request earlier deletion of your data by contacting us.

4. Data Sharing

We do not sell your personal information. We may share data with:

Service Providers

  • Cloud infrastructure: Email delivery and data storage
  • Payment processors: Subscription billing
  • Hosting providers: Website and application hosting
  • Analytics providers: Website analytics (with consent)

Legal Requirements

To comply with law, protect our rights, or respond to legal claims.

Other Uses

Aggregated or anonymized data for analytics or research purposes.

5. Data Security

We implement security measures, including:

  • Encrypted connections (HTTPS/TLS)
  • Secure password hashing
  • API key authentication
  • Domain verification requirements
  • Regular backups, monitoring, and access controls

Note: No system is completely secure. Absolute security cannot be guaranteed.

6. Your Rights

Depending on your location, you may have rights including:

  • Access: Request a copy of your personal data
  • Correction: Update inaccurate data
  • Deletion: Request deletion of your data
  • Export: Receive data in a portable format
  • Objection: Object to certain processing
  • Withdraw Consent (where applicable)
  • Lodge a complaint with a data protection authority (GDPR users)

To exercise your rights, contact info@sendpigeon.dev.

7. Cookies

We use essential cookies for authentication and session management. With your consent, we also use cookies for analytics purposes. We do not use advertising cookies.

8. Analytics

With your consent, we use analytics tools including session recordings to understand how visitors interact with our website. This may record page views, clicks, scrolls, and form interactions (with sensitive data masked). You can manage your preferences via the "Cookie Settings" link in the footer.

9. International Transfers

Your data may be processed in countries outside your own, including:

  • United States (AWS infrastructure)
  • Sweden (our headquarters)

We implement appropriate safeguards to protect your data during international transfers.

10. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service. Continued use after changes constitutes acceptance.

12. Contact Us

For questions or to exercise your privacy rights:

Email: info@sendpigeon.dev