Privacy Policy

1. Introduction

SENDM INC. ("sendm," "we," "our," or "us") operates a messaging platform that enables businesses to communicate with their customers through social media channels including Instagram, TikTok, LinkedIn, and X (formerly Twitter). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

This Privacy Policy applies to all users of sendm, including business customers who register for accounts and end users (such as social media followers) who interact with businesses through our platform. By using sendm or interacting with a business that uses sendm, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the service.

sendm is a United States-based company. Our services are primarily directed at businesses and individuals located in the United States. However, individuals located outside the United States may interact with businesses that use our platform through social media messaging.

2. Information We Collect

2.1 Information You Provide

• Account registration information (name, email, password)
• Business information (company name, contact details)
• Payment and billing information (if applicable, when subscribing to paid plans)
• Content you create or upload to the platform (training data, configuration, prompts)

2.2 Information from Social Media Platforms

When you connect your social media accounts (Instagram, TikTok, LinkedIn, X, or other supported platforms), we receive:

• Your page/account identifiers and access tokens
• Messages sent to and from your connected accounts
• Basic profile information of users who message you (user ID, name, profile picture as provided by the platform)
• Message metadata (timestamps, read receipts, delivery status)
• Platform-specific data as authorized during the connection process

2.3 Automatically Collected Information

• Device and browser information (browser type, operating system, device type)
• IP address and approximate geographic location
• Usage data (features used, actions taken within the platform)
• Log data (access times, pages viewed, errors encountered)

2.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our service:

• Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
• Analytics Cookies: Used to understand how the service is used, measure performance, and identify areas for improvement. These may track usage patterns across sessions.
• Functional Cookies: Used to remember your preferences and settings.

You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using the service. Third-party analytics providers may set their own cookies subject to their respective privacy policies.

3. How We Use Your Information

We use the collected information to:

• Provide, operate, and maintain the service
• Process and deliver messages between you and your customers
• Generate AI-powered responses to messages using third-party AI services (see Section 4)
• Improve and personalize the user experience
• Analyze usage patterns and optimize performance
• Communicate with you about updates, security alerts, and support
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations

3.1 How We Do NOT Use Your Information

We do not use information collected through social media platforms to:

• Make eligibility determinations related to housing, employment, credit, insurance, education, or government benefits
• Conduct or facilitate surveillance of any individuals
• Discriminate against or target individuals based on race, ethnicity, national origin, religion, sex, gender identity, sexual orientation, disability, age, or any other protected characteristic
• Build or augment user profiles for advertising, marketing, or selling to third parties
• Re-identify de-identified or anonymized data
• Place data on search engines or make it publicly searchable
• Train artificial intelligence or machine learning models. Your message content and conversation data are never used to train, fine-tune, or improve any AI or machine learning models, including those of our AI service providers.

4. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third parties that help us operate our service, including cloud hosting, database management, analytics, and payment processing providers. All service providers are contractually bound to protect your data and may only process it for the purposes we specify, consistent with this Privacy Policy and applicable platform terms.
• Social Media Platforms: To facilitate messaging through Instagram (Meta), TikTok, LinkedIn, X, and other connected platforms as authorized by you. Data shared with these platforms is subject to their respective privacy policies.
• AI Service Providers: We use AI services to process messages and generate responses. Message content is sent to these providers for real-time processing only. Under our API agreements, AI providers do not use your data to train their models. However, AI providers may retain API inputs and outputs for up to 30 days for abuse monitoring and safety purposes, after which the data is automatically deleted.
• Observability Providers: We use observability and tracing services to monitor the quality and performance of AI-generated responses. Message content and metadata may be logged in these systems. Observability data is retained for a limited period for quality assurance and debugging purposes and is anonymized over time.
• Legal Requirements: When required by law, subpoena, court order, or governmental request, or to protect our rights, safety, or property
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, in which case your data may be transferred as part of such a transaction

We do not sell, rent, or license your personal information to third parties. We do not share your information for cross-context behavioral advertising.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specific retention periods include:

• Account data: Retained while your account is active and for a reasonable period afterward to fulfill legal obligations
• Message and conversation data: Retained according to your organization's settings and applicable legal requirements
• AI processing logs: Retained for up to 30 days by AI service providers for safety monitoring
• Observability and tracing data: Retained for quality assurance purposes and progressively anonymized
• Platform-specific data: Subject to the retention requirements of each connected social media platform (e.g., data must be deleted when a platform user revokes authorization)

You may request deletion of your data at any time (see Section 8 ). Upon account termination, we will delete or anonymize your data within a reasonable period unless retention is required by law.

6. Data Security

We implement administrative, technical, and physical safeguards designed to protect your information in accordance with industry standards, including:

• Encryption of data in transit (TLS) and at rest
• Secure authentication mechanisms with multi-factor options
• Regular security assessments and vulnerability monitoring
• Access controls, role-based permissions, and audit logging
• Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6.1 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users and applicable regulatory authorities as required by law. We will provide notification without unreasonable delay and in accordance with applicable state and federal breach notification requirements.

7. Consent and Your Choices

7.1 Consent to Data Collection

Before connecting a social media account, you will be informed of the types of data we will collect, how it will be used, and how it will be shared. By authorizing the connection, you provide your consent to these data practices. You may withdraw consent at any time by disconnecting the account (see Section 7.5).

7.2 Access and Portability

You may request a copy of your personal data in a commonly used, machine-readable format by contacting us.

7.3 Correction

You may update your account information through the platform settings or by contacting us.

7.4 Deletion

You may request deletion of your data. See our Data Deletion Instructions for details. Please note that data previously sent to AI service providers for processing may be subject to their retention policies (up to 30 days for safety monitoring). Observability logs containing message data are retained for a limited period and progressively anonymized.

7.5 Disconnect Social Accounts

You may disconnect your social media accounts at any time through sendm's platform settings or through the respective platform's account settings (e.g., Meta Apps and Websites settings, TikTok connected apps, LinkedIn authorized applications, or X connected apps). Disconnecting will stop new data collection from that platform.

7.6 Withdraw Consent

You may withdraw your consent to data processing at any time by disconnecting your social media accounts, requesting data deletion, or contacting us. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

8. Your Privacy Rights

8.1 CCPA Rights (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at privacy@sendm.ai. We will respond to verifiable requests within 45 days.

8.2 GDPR Rights (EEA/UK Residents)

Although sendm is a U.S.-based company that primarily serves U.S. businesses, individuals located in the European Economic Area or the United Kingdom may interact with businesses that use our platform through social media messaging. If you are in the EEA or UK, you may have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure ("right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing
• The right to lodge a complaint with a supervisory authority

To exercise these rights, please contact us using the information in Section 12.

8.3 Other State Privacy Rights

Residents of other U.S. states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, and others) may have similar rights to access, correct, delete, and opt out of certain processing of personal information. To exercise any applicable rights, please contact us using the information in Section 12.

9. International Data

sendm is based in the United States, and your data is primarily stored and processed in the United States. Our AI service providers may process data on servers located in the United States or other countries. If you are located outside the United States and interact with a business that uses sendm, your message data will be transferred to and processed in the United States.

For transfers of personal data from the EEA, UK, or Switzerland, we rely on applicable legal mechanisms such as Standard Contractual Clauses or your explicit consent to ensure adequate protection of your data in compliance with applicable law.

10. Children's Privacy

Our service is not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly. If you believe a child under 13 has provided us with personal information, please contact us at the address below.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will also provide notice through the platform or via email. Your continued use of the service after any changes constitutes acceptance of the new policy.

12. Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise any of your privacy rights, please contact us at:

SENDM INC.
Email: privacy@sendm.ai
Address: 327 Plaza Real #215, Boca Raton, FL 33432

We will respond to privacy-related inquiries within 30 days, or sooner where required by applicable law.