1. Summary
This policy explains how ZenBright ("we") handles personal data in SendBright. It covers the people who use SendBright (our customers and their team members) and visitors to this website.
2. What we collect
- Account details: your name, work email, company name, password (stored only as a secure hash) and time zone.
- Workspace details: your company's postal address, website and settings.
- Mailbox connections: the addresses you connect and their sign-in details, stored encrypted.
- Your content: the lists you upload, the emails you write and the replies they receive.
- Billing: your plan and invoices. Card details are handled by Stripe; we never see or store full card numbers.
- Usage and security logs: sign-in times, IP addresses and actions in your workspace, to keep it secure.
- Messages to us: what you write in the contact form or emails to our team.
3. How we use it
- To provide SendBright: sending your emails, reading replies to them, showing your results.
- To keep accounts secure and prevent spam and abuse.
- To send you service emails, such as confirming your address, password resets, invoices and important changes.
- To answer your questions and improve SendBright.
We do not use your content to train AI models, and we do not sell personal data.
4. Your leads' data
For the lists you upload and the emails you send, you decide what is collected and why; we process that data only on your instructions to provide SendBright. You are responsible for having a lawful reason to email each person and for honouring their requests. Unsubscribe requests are recorded automatically so you never email that person again.
5. Who we share data with
We use a small number of trusted providers to run SendBright, each bound to protect your data:
- our hosting provider in the United States (servers and backups);
- Stripe (payments);
- a transactional email service (account emails such as password resets).
Your emails are sent through the mailbox providers you connect (for example Google or Microsoft), under their own terms. We may disclose data if the law requires it.
6. Security
Data is sent over encrypted connections. Mailbox credentials are encrypted at rest with AES-256. Each workspace is kept separate, and access by our team is limited to what is needed to support you.
7. How long we keep it
We keep your data while your account is open. After you cancel or ask us to delete your account, we delete your workspace data within 30 days, except records we must keep by law (such as invoices). Backups roll over within a further 30 days.
8. Your rights
You can see, correct, export or delete your data in SendBright at any time, or ask us to do it. Depending on where you live you may have further rights, such as objecting to processing or complaining to a data protection authority.
9. Cookies
SendBright uses one essential cookie to keep you signed in. We do not use advertising or tracking cookies.
10. Contact
For privacy questions or requests, contact us. We may update this policy; significant changes will be emailed to workspace owners.