Privacy policy

This policy explains what we collect when you use WiseSender, why, and what you can do about it. It covers two kinds of data: data about you as our customer, and the contact data you upload, which we process on your behalf.

1. Data about you

• Account data: email address, password (stored only as a salted scrypt hash), and the profile details you choose to add, such as name, company, phone and country.
• Billing data: what you bought, when and how much. Card and mobile-wallet details are handled by our payment providers (Stripe, SSLCommerz) and never reach our servers.
• Usage data: checks run, lists uploaded, emails sent, API key usage, and technical logs such as IP address and browser type, kept for security and abuse prevention.
• Messages to us: what you write in the contact form or by email.

2. Contact data you upload

Email addresses, names and list data you upload or collect with signup forms belong to you. We process them only to verify, store and send email on your instructions. We never sell them, share them with other customers, or email them for our own purposes. Mailbox passwords you connect are encrypted with AES-256.

3. Why we use your data

• To run the Service and your account (contract).
• To take payments and keep accounting records (legal obligation).
• To prevent fraud, spam and abuse, and keep the Service secure (legitimate interest).
• To send service emails such as verification codes, password resets and receipts. We send product news only if you opt in, and you can opt out at any time.

4. Who we share it with

Only with providers that help run the Service: hosting, Amazon Web Services (email delivery for the transactional API), and payment processors. Each is bound to use the data only for that purpose. We may disclose data if the law requires it.

5. Cookies

We use one essential cookie to keep you logged in, and your browser's local storage to remember small preferences such as the dashboard theme. We do not use advertising cookies or third-party trackers.

6. How long we keep it

Account data is kept while your account is open. Uploaded lists and results stay until you delete them or your account. Message logs for transactional email are kept for up to 90 days. Billing records are kept as long as tax law requires. When you close your account, we delete your data within 30 days, except records we must keep by law.

7. Your rights

You can see and change your profile in the dashboard, export your verification results at any time, and delete lists and contacts yourself. To get a copy of your data, correct it or delete your account, email [email protected]. People whose addresses are on a customer's list should contact that customer first; we will help where we can.

8. Security

Traffic is encrypted with HTTPS. Passwords are hashed, API keys are stored only as hashes, and mailbox passwords are encrypted at rest. Access to production systems is limited to the people who run the Service.

9. Changes

If we change this policy in a way that matters, we will email account holders before the change takes effect.