Privacy Policy

We are the controller for data about visitors of this website, people who request an invite, and the users of our Clients who sign in to Sendvant.

We are a processor for the data of our Clients’ subscribers and customers (the people who receive email from an online store through Sendvant). For that data the store is the controller; we process it only on the store’s instructions. If you receive email from a store and have a question about your data, please contact the store first. We will help the store answer your request.

• Invite requests: name, work email, company, store website, list size, how the store collects consent, your optional message, and the IP address and browser of the request. Purpose: to review the request and contact you. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in admitting only legitimate senders (Art. 6(1)(b) and (f) GDPR). Kept for 24 months, or for the duration of our cooperation if you become a Client.
• Sendvant user accounts: name, email address, workspace membership and a log of actions in the account. Purpose: to provide the service and keep it secure. Legal basis: contract and legitimate interest. Kept while the account exists and up to 12 months after it is closed.
• Communication: emails and messages you send us. Kept as long as needed to answer and to defend legal claims.

On behalf of each store, Sendvant processes:

• contact data: email address, name, phone, location and other profile fields the store provides;
• consent data: whether the person subscribed or unsubscribed, when, and through which source (for example a sign-up form, checkout consent, or double opt-in confirmation);
• store activity: orders, carts, viewed products and similar events sent by the store, used for segmentation and automated emails;
• email engagement: delivery, bounce, complaint, open and click events, with the time and the browser or mail client (user agent). We do not store the recipient’s IP address for opens and clicks.

This data is used only to send the store’s emails, honour unsubscribes and complaints, and report results to the store. It is never sold, never shared with other Clients and never used for our own marketing.

Every marketing email sent through Sendvant contains an unsubscribe link and a link to a preference centre. Unsubscribing takes effect immediately. To make sure an address that unsubscribed, bounced or complained is never emailed again, we keep that address on the store’s suppression list even after other data is deleted.

All Sendvant data is hosted in the European Union. We use the following sub-processors:

• Amazon Web Services EMEA SARL (Luxembourg): hosting, database, storage and email delivery (Amazon SES), region eu-north-1 (Stockholm, Sweden).

When a store connects its online shop (for example Shopify), Sendvant reads data from that shop on the store’s instructions; the shop platform remains the store’s own provider. We may disclose data to authorities where the law requires it.

Data is encrypted in transit (TLS) and at rest. Access is limited to authorised staff, every workspace is isolated from the others, integration credentials are encrypted with dedicated keys, and links in emails are signed so they cannot be forged.

This website does not use analytics or advertising cookies. The Sendvant dashboard stores your sign-in session and your selected workspace in your browser’s local storage; this is strictly necessary for the service to work. Stores that use the Sendvant tracking script on their own website are responsible for asking their visitors for consent where the law requires it.

You have the right to access your data, to correct it, to have it erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise these rights, write to martintankov@sendvant.com. We answer within one month.

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or with the authority in your country.

We may update this policy. The effective date at the top shows the current version. See also our Terms of Service and Acceptable Use & Anti-Spam Policy.

BM Tech Company EOOD, Ovcha Kupel 1, bl. 604, entr. D, fl. 5, apt. 71, 1618 Sofia, Bulgaria. Email: martintankov@sendvant.com, phone: +359 888 419 335.