This policy explains what Sendza collects when you use the website and dashboard, why we collect it, and what happens to it. We collect as little as we can.
1. What we don't collect
We don't ask for your name, phone number, ID documents, selfie, address or bank card. You create an account with a username, an email address and a password.
2. What we collect
| Data | Why |
|---|---|
| Username and password. The password is stored only as a one-way hash (bcrypt), never as plain text. | To create your account and sign you in. |
| Email address. If you sign in with Google, we get your email address and whether Google has verified it, and nothing else from your Google account. | To sign you in and to send you a link when you ask to reset your password. We don't send newsletters or marketing. |
| Phone numbers you upload and whether each has been sent. | To send your messages and show you their status. |
| Files you upload: we keep a copy of each CSV or Excel file as you uploaded it. | So our team can send your list exactly as you gave it to us. |
| Message templates you write. | To send your messages. |
| Balance, price per SMS and sending on/off setting. | To run your account and charge for messages. |
| Two-step sign-in, if you turn it on: the secret key for your authenticator app, stored encrypted. | To check the 6-digit codes when you sign in. |
| Referrals: who invited you, and bonuses paid. If someone invited you, they see only a shortened version of your username. | To pay referral bonuses. |
| Payment records: network, amount, transaction hash, the address you paid, status, review notes and dates. | To credit your balance, and to keep an accurate record of payments. |
| IP address, briefly. | To limit how many accounts can be created from one network (kept in memory for up to an hour). Our server may also record IP addresses in its technical logs. |
3. Cookies and browser storage
We use one cookie to keep you signed in. It's needed for the dashboard to work and is removed when you sign out. If you choose a light or dark theme, that choice is saved in your browser's local storage. We don't use advertising or tracking cookies, and we don't use analytics.
4. Who we share data with
- SMS providers and carriers. To deliver your messages, we send the recipient phone numbers and message text to our SMS provider, which passes them to mobile carriers.
- Google. If you choose “Continue with Google”, Google handles that sign-in under its own privacy policy.
- Our email provider. When you ask for a password reset, your email address and the reset link pass through the service we use to send email.
- Blockchain data services. To confirm a payment, we look up its transaction hash with public blockchain services (TronGrid and public BNB Smart Chain and Ethereum nodes). We don't send them your account details.
- Public blockchains. USDT payments are recorded on a public blockchain by their nature. Anyone can see a transaction there; we don't publish which account it belongs to.
- Font and icon providers. Our pages load fonts from Google Fonts and icons from jsDelivr. Your browser connects to them directly, so they can see your IP address.
- When the law requires it. We may disclose data if a valid legal request requires us to, or to protect the service and others from fraud or abuse.
We don't sell your data and don't share it for advertising.
5. How long we keep data
- Account data is kept until your account is deleted.
- Phone numbers and templates are kept until you delete them, or until your account is deleted. You can delete finished numbers from the dashboard at any time.
- Uploaded files are kept until your account is deleted.
- Payment records are permanent. They can't be edited or deleted, by you or by us, and they're kept even after an account is deleted. This keeps the payment history accurate and helps prevent fraud.
6. Security
Passwords are hashed, sign-in sessions expire, and payment records are locked against changes. No system is perfectly secure, so please use a strong password that you don't use anywhere else.
7. The people you text
The phone numbers you upload belong to other people. You're responsible for having their permission to text them and for honouring opt-out requests, as described in our terms of service. If someone asks us to stop messages they're receiving, we may pass the request on to the account that sent them or remove their number.
8. Your choices
- Delete phone numbers and templates yourself from the dashboard.
- Ask for your account to be deleted. Payment records are kept, as explained above.
- Ask what data we hold about your account.
To make a request, contact our support team. We may ask you to prove the account is yours, for example by signing in or replying from the email on your account.
9. Children
The service is not for anyone under 18.
10. Changes
We may update this policy. The date at the top shows the latest version.
11. Contact
For privacy questions, contact our support team.