sendqube

GDPR

Last updated: July 31, 2026

1. Security Safeguards

  • Physical security — Sendqube runs on managed cloud infrastructure hosted on AWS, which provides physical data center security and environmental controls.
  • Encryption — customer data is encrypted at rest (AES-256) and in transit (TLS/SSL) between your browser, Sendqube, and our database.
  • Data usage — we don't mine or access your data for advertising purposes.
  • Data privacy — we only use your data to provide the service; we don't sell or rent it, and access is limited to authorized personnel.
  • Data recovery — your database is backed up daily by our hosting provider.
  • Data ownership — your data belongs to you (see Data Retention below for what happens when you close your account).
  • Protected connections — all connections to Sendqube are encrypted via TLS/SSL.

2. Our Role Under GDPR

For account data (your name, email, workspace, and billing details), Sendqube is the data controller.

For the contacts you upload and email through Sendqube, your workspace is the data controller and Sendqube acts as a data processor, processing that data only on your instructions to provide the service — sending sequences, tracking opens/clicks/replies, and honoring unsubscribes.

4. Data Subject Rights

If you're located in the EU/EEA, UK, or a jurisdiction with similar rules, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request erasure ("right to be forgotten").
  • Restrict or object to certain processing.
  • Receive your data in a portable format.
  • Withdraw consent where processing relies on it.
  • Lodge a complaint with your local data protection authority.

Account holders can export or delete contacts, sequences, and mailbox connections directly from the product at any time. Contacts who want a workspace to stop emailing them can use the unsubscribe link included in every campaign — this is honored across the entire workspace, not just one sequence.

5. International Data Transfers

Sendqube runs on managed cloud infrastructure. Where data is transferred outside your region, we rely on the hosting providers' own compliance frameworks and standard contractual safeguards to protect it in transit and at rest.

6. Data Retention

We retain workspace data for as long as your account is active. When you close your account, workspace data is deleted within a reasonable period, except where retention is required for legal, accounting, or security reasons. See the Privacy Policy for the full retention and deletion policy.

7. Subprocessors

We use a small set of subprocessors to run the service — cloud hosting, database, and email delivery infrastructure — each contractually bound to protect data and process it only on our instructions. Full detail is in the Privacy Policy.

8. Data Processing Agreement

Business customers who need a signed Data Processing Agreement (DPA) covering Sendqube's role as a processor can request one by emailing dev@sendqube.in.

9. Exercising Your Rights

To exercise any of the rights above, or with questions about how Sendqube handles data under GDPR, email dev@sendqube.in.