← Back to Sendcore

Privacy Policy

Last updated: September 29, 2026

This policy describes how Sendcore (“Sendcore”, “we”), a trademark of LAIONF LLC, processes personal data when you use the website and the platform (together, the “Service”).

1. Data controller

The data controller is LAIONF LLC, a limited liability company established in Delaware, United States, which operates Sendcore. You can reach it for any privacy matter at hello@sendcore.me. If you use Sendcore to send communications to your customers, you act as data controller for recipients’ data and Sendcore processes it on your behalf. In that case, this policy covers the data processed by Sendcore as the platform provider.

2. Data we process

Depending on the features you use, we may process the following categories of data:

  • Account data: email, user identifier, authentication data (handled via Supabase Auth).
  • Email settings: sending domain, domain verification status, DNS records needed for setup (SPF/DKIM/DMARC), sender name, “from” and “reply-to” addresses.
  • Campaign data: subject line, preheader, content (HTML/text), campaign settings and metadata, UTM parameters.
  • Address books/segments: lists or segments created by the user and related email addresses entered/imported.
  • Integrations: if you connect Shopify or WooCommerce, we process store identifiers and access tokens required for connection and syncing; if you connect a Meta asset (Pixel, Conversions API), the identifiers and tokens Meta issues for it.
  • Delivery and engagement data: technical identifiers of sent messages and engagement metrics (e.g., opens/clicks). If you enable tracking, providers may also include technical details (e.g., IP address and user agent) in webhook payloads.
  • Technical data: logs and data necessary for security, abuse prevention, and diagnostics (e.g., timestamps, error events).

3. Purposes and legal bases

  • Service delivery (contract performance): account creation and management, campaign creation, message sending, reporting.
  • Security and fraud/abuse prevention (legitimate interest): infrastructure protection, technical logging and auditing.
  • Legal obligations (legal obligation): where applicable.
  • Optional features: for example AI suggestions for copy/email (if enabled), and third‑party integrations (contract performance or legitimate interest, depending on the case).

Note: sending marketing emails to recipients requires that you have an appropriate legal basis (e.g., consent, soft opt‑in, etc.) and that you provide recipients with your privacy notice and unsubscribe mechanism.

4. Recipients and service providers (processors)

To provide the Service we use vendors that may process data on our behalf, for example:

  • Supabase (authentication and database).
  • Vercel (hosting and application delivery).
  • Resend (email sending and deliverability/engagement webhooks).
  • Shopify, WooCommerce, Meta (each only if you enable the integration).
  • Anthropic Claude API (only if you enable AI features and configure an API key).

We may also disclose data to competent authorities when required by law.

5. International transfers

Some vendors may process data outside the European Economic Area. In such cases, we rely on appropriate safeguards (for example, Standard Contractual Clauses) as required by applicable law.

6. Data retention

We retain data for as long as needed to provide the Service and to comply with legal obligations, resolve disputes, and enforce our rights. Campaign and reporting data is kept while your account remains active or until you delete it, unless different retention obligations apply.

Some data has a fixed, shorter life, and is deleted automatically when it ends:

  • the storefront browsing (visits, product views, carts) of visitors who have not identified themselves to the store: 90 days after it happened;
  • the records that route the links of emails sent up to September 28, 2026, one per link and recipient: 90 days after the send, unless the recipient clicked the link;
  • the logs of the webhooks we receive from Shopify and Resend: 30 days;
  • the counters that limit repeated requests, which can hold an IP or email address: 1 day.

You can delete your account and its data yourself at any time from Your account in the dashboard. Every path to deletion, including for Shopify stores and for people who only received emails, is described on the data deletion page.

7. Cookies and similar technologies

We use cookies and similar technologies for authentication, preferences, and Service functionality. Details are in the Cookie Policy, linked from the footer of every public page.

8. Your rights

Subject to applicable law, you may exercise your rights of access, rectification, erasure, restriction, portability, and objection. If you believe processing violates data protection law, you may lodge a complaint with the competent supervisory authority.

If you are a recipient of emails sent via Sendcore, to exercise rights regarding data processed by the sender you should contact the sender directly.

9. Contact

For privacy requests, including access, rectification and erasure, write to LAIONF LLC at hello@sendcore.me. We answer within 30 days.

This page is provided for informational purposes and may require legal adjustments depending on your business model, the countries you operate in, and the integrations actually enabled.