Privacy Policy

SendCore provides a platform for businesses to send and receive WhatsApp, email and SMS messages. Businesses that use SendCore ("customers") decide whom they message and what they send. For the contacts and messages a customer stores in SendCore, the customer is the data controller and SendCore processes that data on the customer's instructions.

• Account information — name, work email, company and role of people who use the dashboard.
• Enquiries — details you submit through our Get Started or Contact forms, such as name, email, phone, company and message.
• Customer content — contacts, templates, campaigns and messages that customers upload, send or receive through SendCore.
• Usage and security data — sign-in times, IP address, browser details and an activity log of actions taken in the dashboard.
• Provider credentials — the API keys and tokens customers enter to connect their WhatsApp, email and SMS providers.

• To provide the platform: delivering messages, showing delivery status, inboxes and reports.
• To keep accounts secure: authentication, rate limiting, audit logs and investigating misuse.
• To respond to enquiries and support requests.
• To improve SendCore and fix problems.

We do not sell personal information. We share it only:

• With the messaging providers a customer connects (for example Meta, Twilio, Gupshup, MSG91 or SendGrid) to deliver that customer's messages.
• With service providers that host and operate our infrastructure, under confidentiality obligations.
• When required by law, or to protect the rights, safety and security of SendCore, our customers or others.

We keep customer content for as long as the customer's account is active or as needed to provide the service, and account and security records for as long as reasonably necessary for security, legal and accounting purposes. Customers can ask us to delete their data when they close their account.

Access to the dashboard is protected by passwords and role-based permissions. API keys are stored only as hashes, provider webhooks are verified by signature, and sign-ins and administrative actions are logged. No system is perfectly secure, but we work to protect your information.

You can ask to access, correct or delete personal information we hold about you by contacting us. If your information was uploaded by one of our customers (for example, you received a message from a business), please contact that business first; we will help them respond.

We may update this policy. The date at the top shows when it last changed.