Home / Legal

Privacy policy

Last updated 14 November 2026

This policy explains what we collect when you use WiseSender, why, and what you can do about it. It covers two kinds of data: data about you as our customer, and the contact data you upload, which we process on your behalf.

1. Data about you

  • Account data: email address, password (stored only as a salted scrypt hash), and the profile details you choose to add, such as name, company, phone and country.
  • Billing data: what you bought, when and how much. Card and mobile-wallet details are handled by our payment providers (Stripe, SSLCommerz) and never reach our servers.
  • Usage data: checks run, lists uploaded, emails sent, API key usage, and technical logs such as IP address and browser type, kept for security and abuse prevention.
  • Messages to us: what you write in the contact form or by email.

2. Contact data you upload

Email addresses, names and list data you upload or collect with signup forms belong to you. We process them only to verify, store and send email on your instructions. We never sell them, share them with other customers, or email them for our own purposes. Mailbox passwords you connect are encrypted with AES-256.

3. Why we use your data

  • To run the Service and your account (contract).
  • To take payments and keep accounting records (legal obligation).
  • To prevent fraud, spam and abuse, and keep the Service secure (legitimate interest).
  • To send service emails such as verification codes, password resets and receipts. We send product news only if you opt in, and you can opt out at any time.

4. Who we share it with

Only with providers that help run the Service: hosting, Amazon Web Services (delivery of transactional email and of campaigns sent through WiseSender), Cloudflare (the bot check on the signup form), payment processors and, only with your cookie consent, Google (analytics) and Meta (ad measurement). Each is bound to use the data only for that purpose. We may disclose data if the law requires it.

5. Cookies

We use one essential cookie to keep you logged in, and your browser's local storage to remember small preferences such as the dashboard theme and your cookie choice. The signup form may load Cloudflare Turnstile, which checks that you're a person without tracking you across sites. The live chat on our site and dashboard runs on AnytimeReply, which stores your conversation so our team can answer it.

Two optional categories run only after you allow them in our cookie banner, and nothing from them loads before that:

  • Analytics: Google Analytics, loaded through Google Tag Manager, counts visits and which pages people find useful. Google signals and ad personalization are off.
  • Marketing: Meta Pixel and Meta's Conversions API measure which of our ads lead to sign-ups and purchases. For signed-in visitors we send only a SHA-256 hash of the email address and of the account ID, never the plain text.

If your browser sends Global Privacy Control or Do Not Track, both stay off. You can change your choice at any time with "Cookie settings" at the bottom of every page. Declining removes the analytics and Meta cookies from your browser.

6. How long we keep it

Account data is kept while your account is open. Uploaded lists and results stay until you delete them or your account. Message logs for transactional email are kept for up to 90 days. Billing records are kept as long as tax law requires. When you close your account, we delete your data within 30 days, except records we must keep by law.

7. Your rights

You can see and change your profile in the dashboard, export your verification results at any time, and delete lists and contacts yourself. You can delete your account yourself at any time under Profile in the dashboard. To get a copy of your data or correct it, email [email protected]. People whose addresses are on a customer's list should contact that customer first; we will help where we can.

8. Security

Traffic is encrypted with HTTPS. Passwords are hashed, API keys are stored only as hashes, and mailbox passwords are encrypted at rest. Access to production systems is limited to the people who run the Service.

9. Changes

If we change this policy in a way that matters, we will email account holders before the change takes effect.