Last updated: 2026-05-29

Privacy Policy

This Privacy Policy explains how Neurabyte LLC(dba SenderKit) (“SenderKit,” “we,” “us”) collects, uses, and protects personal information when you visit our website or use the Services. It is incorporated into our Terms of Service.

1. Introduction

This Policy covers personal information about visitors to our website and personnel of our customers and prospects (for example, the people who sign up for and administer a SenderKit workspace). Where we process the personal data of your message recipients or end users on your behalf, we act as a processor and you act as the controller; that processing is governed by our Data Processing Addendum rather than by this Policy.

2. Definitions

“Personal Data” means information that identifies, relates to, or could reasonably be linked to an identified or identifiable individual.
“Usage Data” means information collected automatically about how the Services are accessed and used.
“Services” has the meaning given in the Terms.

3. Information we collect and how we use it

We collect information that you provide directly (such as when you create an account, contact support, or pay for a plan), information we collect automatically when you use the Services, and information from service providers such as our payment processor.

4. Types of data collected

Personal Data

We may collect: name; email address; workspace and account details; billing contact and limited payment information (processed by our payment processor — we do not store full card numbers); and the content of your communications with us.

Usage Data

We may collect IP address, browser and device type, pages and features used, timestamps, referring pages, and diagnostic and log data, which may be collected through cookies and similar technologies as described in our Cookie Policy.

5. How we use data

to provide, operate, maintain, and secure the Services;
to authenticate users, process payments, and manage subscriptions;
to provide customer support and respond to your requests;
to detect, prevent, and investigate fraud, abuse, and security incidents;
to improve and develop the Services, including aggregated and de-identified analytics;
to send service, security, and transactional communications, and — where permitted — product updates you can opt out of; and
to comply with legal obligations and enforce our Terms.

6. Legal bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on one or more of the following legal bases: performance of a contract with you; our legitimate interests in operating and securing the Services; your consent (which you may withdraw at any time); and compliance with legal obligations.

7. Retention of data

We retain Personal Data for as long as needed to provide the Services and for the legitimate and lawful purposes described above, including to comply with legal, tax, accounting, and security obligations and to resolve disputes. Retention periods for data we process on your behalf are described in the DPA.

8. International transfer of data

SenderKit is based in the United States and may process Personal Data in the United States and other countries. Where we transfer Personal Data out of the EEA, the UK, or Switzerland, we use appropriate safeguards such as the Standard Contractual Clauses, as further described in the DPA.

9. Disclosure of data

Service providers

We share Personal Data with the service providers and subprocessors that help us run the Services, listed at senderkit.com/subprocessors, under contracts that require them to protect it.

Legal and safety

We may disclose Personal Data to comply with law, regulation, legal process, or enforceable governmental request; to enforce our Terms; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of SenderKit, our users, or the public.

Business transfers

If SenderKit is involved in a merger, acquisition, financing, or sale of assets, Personal Data may be transferred as part of that transaction, subject to this Policy.

10. Security of data

We maintain commercially reasonable administrative, technical, and physical safeguards designed to protect Personal Data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to applicable law, you may have the right to access, correct, update, port, restrict, or delete your Personal Data, to object to certain processing, and to withdraw consent. To exercise these rights, contact privacy@senderkit.com. You also have the right to lodge a complaint with a supervisory authority.

12. Your rights under the CCPA / CPRA (California)

California residents may have the right to know what Personal Information we collect and how we use and disclose it, to request deletion or correction, and to opt out of any “sale” or “sharing” of Personal Information. We do not sell Personal Information. You may exercise these rights by contacting privacy@senderkit.com, and we will not discriminate against you for doing so.

13. Analytics

We use Vercel Web Analytics to understand how the Services are used and to improve them. Vercel Web Analytics is designed to be privacy-friendly: it measures aggregate usage without using cookies to track or identify individual visitors across sites.

14. Payments

Paid plans are billed through our third-party payment processor, Stripe. Your payment-card details are provided directly to and processed by the payment processor under its own privacy policy; SenderKit does not store full payment-card numbers.

15. Children’s privacy

The Services are intended for business and developer use and are not directed to children. You must be at least 18 years old to use the Services, consistent with Section 1.2 of the Terms. We do not knowingly collect Personal Data from children.

16. Links to other sites

The Services may link to third-party sites we do not control. This Policy does not apply to those sites, and we are not responsible for their content or privacy practices.

17. Changes to this Privacy Policy

We may update this Policy from time to time. We will post the updated Policy with a new “Last updated” date and, for material changes, provide additional notice where required by law.

18. Contact us

Neurabyte LLC (dba SenderKit), 1309 Coffeen Avenue, STE 1200, Sheridan, WY 82801, United States. Privacy inquiries: privacy@senderkit.com.