Privacy Policy

The short version

We do not store the contents of your emails. Not the HTML, not the plain text, not the values you merge into a template. The message is rendered in memory, handed to the delivery network, and gone.

What we keep is the metadata needed to run an account, count a quota and answer "did that send work" — and the list below is all of it.

What we collect

Your account. Email address, an optional name, the date you signed up, your plan, and the status of the account.

Your signup. The IP address the signup came from, and any flags our screening raised about it. This exists to stop one person opening a hundred accounts to spam from our domain, and for no other purpose.

Sending metadata. For each send: the recipient address, the subject line, which template was used, the time, whether it succeeded, the delivery network's message id, any error, and the first few characters of the API key used. Not the body.

Your design. The colours, corners, fonts and logo URL in your brand kits.

Delivery outcomes. Addresses that hard-bounced or reported your mail as spam, with the reason and the time.

Addresses you have confirmed. While in the sandbox, the addresses you proved you control, so we can check sandbox mail only goes to them.

Rate-limit counters. Short-lived counters keyed to an account or an IP, which delete themselves automatically.

What we do not collect

No message bodies. No card numbers — payments go directly to Stripe. No tracking pixels in your mail, no open or click tracking of your recipients, and no third-party analytics or advertising on this website.

This site sets no cookies. The builder keeps your in-progress design in your own browser's local storage; it never leaves your machine until you save.

Why we are allowed to hold it

Account and sending data: because we need it to provide the service you asked for. Signup IP, screening flags and rate-limit counters: because we have a legitimate interest in preventing abuse of a shared sending reputation. Billing records: because the law requires us to keep them.

Where it lives and who else sees it

We use a small number of other companies to run the service. Each one only receives what it needs to do its job.

• Amazon Web Services — hosting, storage and email delivery. United States (Northern Virginia). This is where your account record, your brand kits and your sending metadata live, and it is who physically delivers your mail.
• Stripe — payment processing, once paid plans are enabled. Stripe receives your billing details directly; we never see or store a card number.
• Cloudflare — hosting for this website. It does not receive customer data.

We will give notice here before adding or replacing any of them.

How long we keep it

Account records, brand kits and sending metadata are kept while the account is open, and deleted within 30 days of the account being closed.

We do not currently expire sending metadata automatically while an account is open. If you want your send history cleared sooner, email us and we will do it.

Confirmation tokens expire on their own. Rate-limit counters delete themselves. Suppression records outlive the account on purpose, so we do not mail someone who already told us to stop.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email us and we will do it within 30 days.

If you are in the UK or the EU you also have the right to complain to your data protection authority. We would rather you told us first.

Children

This is a tool for developers and is not directed at children. We do not knowingly hold data about anyone under 16.

Changes and contact

If this policy changes materially we will email account holders before it takes effect, and the date at the top of this page will change.

Questions, requests and complaints: support@sendslice.com.