Draft policy — adapt before launch
Identify the legal controller, address, legal basis, actual processors, retention schedules and data subject rights procedures before production launch.
Data categories
- Account details: name, email, password hash and 2FA settings.
- API telemetry: request identifiers, HTTP status, latency and payload size.
- Security data: login IP and audit events.
- Billing records: amount, status and payment identifier; LiqPay handles card information.
Message content
SendSend's API event logs do not store recipient IDs or message text. Requests are forwarded over HTTPS to the configured processor.
Contact and rights
Email [email protected] to request access, corrections or removal where applicable. Some accounting and security records may require retention.
Validate this draft against actual data flows and hosting before publishing.