Legal

Privacy policy

Last updated: June 2026

1. Who we are

SendCleared ("we", "us", "our") is an email QA and client approval service operated by Engaging Enterprises Ltd. When you use SendCleared, Engaging Enterprises Ltd is the data controller responsible for your personal data.

If you have questions about this policy or how we handle your data, contact us at privacy@sendcleared.com.

2. What data we collect

Account data

• Name and email address when you sign up
• Billing information (processed by Stripe — we never store card details)
• Password (stored as a secure hash — we never see your actual password)

Email campaign data

• Email content sent to your SendCleared inbox addresses (HTML, plain text, subject line, headers)
• QA report results generated from your emails
• Approval records including approver name, timestamp, and IP address
• Change request feedback submitted by your clients

Usage data

• Log data including pages visited, features used, and timestamps
• Device and browser information
• IP addresses

3. How we use your data

• To provide the SendCleared service — receiving emails, running QA checks, generating reports, and serving approval pages
• To manage your account and subscription
• To send you transactional emails (QA report ready, approval received, changes requested)
• To improve the service and fix bugs
• To comply with legal obligations

We do not sell your data. We do not use your email campaign content to train AI models. We do not share your data with third parties except as described in section 4.

4. Third parties we share data with

• Supabase — database and authentication hosting
• Vercel — application hosting
• CloudMailin — inbound email processing
• Anthropic — AI analysis of email content (processed per request, not stored by Anthropic for training)
• Stripe — payment processing
• Resend — transactional email delivery

All third parties are bound by their own privacy policies and data processing agreements. We only share the minimum data necessary for each service to function.

5. Data retention

We retain your campaign data and QA reports for as long as your account is active. You can delete individual campaigns from your dashboard at any time. If you close your account, we delete all associated data within 30 days.

Approval records are retained for 12 months after the campaign send date to support audit trail requirements, then automatically deleted.

6. Your rights (GDPR)

If you are based in the UK or European Economic Area, you have the following rights under the UK GDPR and GDPR:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your personal data
• Portability — receive your data in a machine-readable format
• Restriction — ask us to limit how we process your data
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email privacy@sendcleared.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies

We use essential cookies only — for authentication (keeping you logged in) and security (CSRF protection). We do not use advertising or tracking cookies. We do not use Google Analytics or similar tracking services.

8. Data security

We use industry-standard security measures including encryption in transit (HTTPS/TLS), encrypted storage, and access controls. We conduct regular security reviews. In the event of a data breach that affects your rights, we will notify you within 72 hours as required by law.

9. Changes to this policy

We may update this policy from time to time. We'll notify you by email if we make material changes. The date at the top of this page shows when it was last updated.

10. Contact us

For privacy-related queries: privacy@sendcleared.com

Engaging Enterprises Ltd
Monomark House, 27 Old Gloucester Street
London, England, WC1N 3AX
Company No: 14111995