Last updated: February 2026
This Privacy Policy describes how SendWing collects, uses, and protects your personal information. We are committed to handling your data responsibly.
Key Points
- ✓ We never sell, rent, or share your data with third parties for marketing
- ✓ All connections encrypted with TLS 1.3
- ✓ Passwords hashed with bcrypt - we can never see them
- ✓ Export or delete your data at any time
- ✓ No third-party tracking or advertising cookies
- ✓ GDPR, CAN-SPAM, and CCPA compliant
1. Information We Collect
Account Information
- Name and email address
- Password (encrypted, never plain text)
- Company name (optional)
- Billing info (processed by Stripe)
Usage Data
- Pages visited and features used
- Campaign performance metrics
- IP addresses for security
- Login timestamps
Subscriber Data
When you upload subscriber lists, you are the data controller for that data. We process it on your behalf as a data processor. This includes email addresses, names, custom fields, and engagement data.
2. How We Use Your Information
- Provide the Service - Operate the platform, send emails, track engagement
- Process payments - Handle billing via Stripe
- Communicate - Send account notifications and security alerts
- Improve - Analyze usage to enhance features and fix issues
- Security - Detect and prevent fraud and unauthorized access
- Support - Respond to your questions
We do not sell, rent, or share your personal information with third parties for their marketing purposes. Ever.
3. Data Security
Encryption
TLS 1.3 in transit, AES-256 at rest.
Password Hashing
Bcrypt with unique salts per account.
Access Controls
Role-based access to all systems.
Regular Backups
Every 6 hours, 30-day retention.
DDoS Protection
Cloudflare enterprise mitigation.
2FA Available
Two-factor auth for all accounts.
4. Data Retention
| Data Type | Retention |
|---|---|
| Active account data | For as long as your account is active |
| Cancelled accounts | 30 days (then permanently deleted) |
| Campaign analytics | Aggregate: indefinite. Individual tracking: 12 months |
| Encrypted backups | 30 days |
5. Third-Party Services
| Service | Purpose |
|---|---|
| Stripe | Payment processing |
| Cloudflare | CDN and security |
Your SMTP provider is chosen and configured by you. Data shared with your SMTP provider is governed by your agreement with that provider.
6. Your Rights
Access
View all personal information we hold about you.
Export
Download subscribers, templates, and campaigns anytime.
Correct
Update inaccurate info through account settings.
Delete
Request complete deletion of your account and data.
Object
Object to certain types of data processing.
Portability
Receive your data in machine-readable format.
To exercise any of these rights, contact [email protected]. We respond within 30 days.
7. Cookies
We use only essential cookies for login sessions, preferences, and CSRF protection. No third-party tracking or advertising cookies.
8. Your Subscribers
As a SendWing user, you are the data controller for your subscribers. You are responsible for obtaining consent, providing your own privacy policy, honoring unsubscribe requests, and complying with applicable laws (GDPR, CAN-SPAM, CCPA).
9. Changes
We may update this policy from time to time. Significant changes will be communicated via email.
10. Contact
For privacy questions: [email protected]
Ready to get started?
Create your free account and start sending campaigns in minutes.