Privacy Policy

Last updated:

This policy explains what personal data Sendveo collects through its website, dashboard, API and MCP server, why we use it, who helps us process it, how long we keep it and the rights you have.

1. Who we are

Sendveo is a WhatsApp messaging gateway for businesses, offered at sendveo.com. In this policy, "Sendveo", "we" and "us" mean the business that runs it, and that business is responsible for the data described here.

2. Our two roles

Your account data. For the details of your account, your billing and your use of the service, Sendveo decides how the data is used. We are responsible for it, and this whole policy applies.

The data in your conversations. For the messages, contacts, groups and files of the people you talk to on WhatsApp through Sendveo, our customer is responsible for that data, and Sendveo processes it only on the instructions of that customer, to run the service. Our Terms of Service set out that processing.

If a business that uses Sendveo contacted you and you have a question about your data, please ask that business first. We will help it answer you.

3. What we collect

  • Account details: your workspace name, your email address and your password. We store the password only as a one-way hash, never in readable form.
  • Billing records: your price, the credits and charges on your account and the credit available. When you pay by card, card details go to our payment processor, never to us.
  • Connected numbers: each number you connect, its status and connection history, and the profile WhatsApp shows for it, such as its name, picture and about text.
  • Messages: the messages sent and received on your numbers, including the ones typed on the phone itself, with their delivery and read status, reactions, edits and deletions. When a number connects, we also import its recent conversations.
  • Contacts and groups: what WhatsApp shows about the people and groups in your conversations, such as a name, a phone number, a profile picture or a member list, and the labels you add.
  • Files: for images, voice notes, videos and documents, we store the file details (type, name and size), not the file itself: it is fetched when you open it, and the files you send pass through without being stored.
  • Integration settings: your API keys, stored only as a fingerprint, your webhook address and its delivery log, and the AI assistants you have approved.
  • Security data: the IP address and browser type of each sign-in session, and the technical logs our servers keep to run the service.

4. How we use it

We use personal data to:

  • run the service: connect your numbers, send and receive messages, show them in your dashboard and deliver them to your webhook;
  • bill you: count the numbers connected each month, charge your account and record the credits you pay in;
  • keep the service and your account secure, prevent abuse and investigate problems;
  • answer your questions and tell you about your account, the service and changes to these documents;
  • meet our legal obligations, such as keeping accounting records.

We do not sell personal data. We do not use your messages for advertising, and we do not use them to train AI models.

Where data protection law requires a legal basis, we rely on:

  • Contract: to provide the service you signed up for and to bill it;
  • Legal obligation: to keep accounting records and answer lawful requests from authorities;
  • Legitimate interests: to secure the service, prevent abuse and improve it, in ways you would reasonably expect;
  • Consent: where we ask for it, and you can withdraw it at any time.

6. Who we share it with

We share personal data only with the service providers that help us run Sendveo, and each one receives only what it needs:

  • Messaging infrastructure provider: connects your WhatsApp numbers and carries messages between Sendveo and WhatsApp.
  • Hosting provider: runs our servers and our database.
  • Payment processor: handles card payments, when card payment is offered.

These providers act on our instructions and must protect the data. We name them here by category.

Personal data also reaches:

  • WhatsApp, which carries the messages you send, as it does for any WhatsApp message;
  • the destinations you choose: your webhook address and the AI assistants you connect, whose providers handle the data under their own policies;
  • authorities, when the law requires us to disclose it;
  • a buyer or successor if the Sendveo business is transferred, who must respect this policy.

7. Where your data is stored

Our servers and database run on the infrastructure of our hosting provider, and the providers listed above may process data in countries other than yours. When data leaves your country, we rely on the safeguards the applicable law provides.

8. How long we keep it

  • Account details, messages, contacts and settings: as long as your account is open. When your account is closed, we delete them and keep only the records we must hold as accounting evidence.
  • Charges and credits on your account: kept as accounting records after your account is closed, for as long as the law requires us to keep them.
  • Sign-in sessions and technical logs: sign-in sessions and the access tokens of connected AI assistants are deleted about 7 days after they expire or are revoked. Technical logs are kept only for the time we need them to run and secure the service.

9. How we protect it

The measures we take include:

  • all connections to Sendveo are encrypted with HTTPS;
  • passwords and API keys are stored only as one-way hashes;
  • the data of each customer is kept apart from that of every other customer by rules enforced in the database itself;
  • access to production systems is limited to the people who need it to run the service.

No system is perfectly secure. If a breach affects your personal data, we will inform you and the authorities as the law requires.

10. Cookies and local storage

Sendveo uses no advertising or analytics cookies. It stores only what the site needs to work:

  • Session cookie: keeps you signed in to the dashboard;
  • Language cookie: remembers the language you chose;
  • Theme setting: remembers light or dark mode, in your browser only.

You can clear them in your browser settings at any time. Clearing the session cookie signs you out.

11. Your rights

Depending on the law that applies to you, you can ask us to:

  • give you a copy of the personal data we hold about you;
  • correct it if it is wrong or incomplete;
  • delete it, when we have no legal reason to keep it;
  • stop or limit some uses of it;
  • send it to you in a portable format.

Contact us to exercise these rights. We may ask you to confirm your identity before we act. You also have the right to complain to the data protection authority of your country.

12. Children

Sendveo is a service for businesses and is not meant for anyone under 18. We do not knowingly open accounts for minors.

13. Changes to this policy

We may update this policy. The date at the top of this page shows the current version. When a change matters for you, we will tell you by email or in the dashboard before it applies.

14. Contact

For any question about this policy or your personal data, contact us.