Privacy Policy
Effective 12 October 2026
Sendicorn is an email service for newsletters, automated emails and transactional email, run by MSECAMP LLC, 12 Daniel Road, Suite 318-333, Fairfield, NJ 07004, United States ("we", "us"). This policy explains what personal data we handle, why, who receives it, how long we keep it and what you can ask of us. Questions go to hello@sendicorn.com.
Our two roles
- For your account and our own website we decide how data is used, so we are the controller.
- For the people on your lists (your subscribers and contacts) you decide what is collected and what they receive, and we process their data on your instructions. You are the controller and we are your processor. If you are one of those people, contact the sender of the email you received; we help them answer you.
What we collect
Your account. Your email address, the name you give us, the organizations and projects you belong to and your role in each, invitations you send and receive, and a record of who approved which campaign or template. We sign you in with one-time codes sent by email, so we keep no password for you.
What you create. Newsletters, campaigns, templates, automation flows, images you upload, API keys, webhooks and sender domains.
Your contacts' data. What you or your signup forms send us: email address, name and other fields you choose, tags, subscription status and the record of their consent (when and where they signed up, and the IP address if your form sends it), and events you send, such as a purchase. When we send an email we record whether it was delivered, bounced or marked as spam, and, if you turn tracking on, when it was opened and when a link was clicked. Amazon SES reports opens and clicks with the reader's IP address and browser; we use the browser to tell link scanners from people and pass both on only to webhooks you set up. We don't store them with the message.
Technical data. IP addresses are used for a short time to stop abuse, such as too many sign-in attempts, and are kept in memory only. When someone takes an important action in an account, such as sending a campaign, creating an API key, inviting a member or deleting a project, we log who did it, when, and from which IP address, and our team gets a notice by email, so we can spot a taken-over account. Our servers keep short technical logs for security and fixing errors.
AI assistants you connect. When you connect an assistant such as Claude or ChatGPT, it receives the results of the tools it calls, like a campaign report or a draft. Your contacts' full email addresses stay masked unless you grant that permission when you connect. We never receive your conversations with the assistant.
How we use it
- To run the service: send the emails you ask us to send, follow delivery, show your reports, and run your automations.
- To keep sending safe: watch bounce and complaint rates, pause sending that harms deliverability, suppress addresses that bounced or complained, and stop abuse.
- To contact you about your account: sign-in codes, invitations, alerts and service notices.
- To answer your support requests.
We don't sell personal data, don't use it for advertising, and don't run analytics or advertising trackers in the product or on our website.
Legal bases (EU and UK GDPR): the contract with you for your account; your instructions as our customer for your contacts' data; our legitimate interest in security and preventing abuse; and your consent where we ask for it.
Who receives it
We use these providers to run the service:
| Provider | What for | Where | |---|---|---| | Hetzner Online GmbH | Servers and database | Nuremberg, Germany | | Amazon Web Services (Amazon SES) | Sending email and reporting deliveries, bounces, complaints, opens and clicks | Frankfurt, Germany | | Cloudflare, Inc. | DNS and the network in front of our servers | Global network | | Stripe, Inc. | Billing, once paid plans start | United States |
Others receive data only at your direction: the AI assistants you connect and the webhooks you set up. We disclose data to authorities only when the law requires it.
Data at rest stays in Germany. Cloudflare and Amazon are US companies; where their processing involves a transfer out of the EU, it relies on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
How long we keep it
| Data | Kept | |---|---| | Your account | While it's open; deleted within 30 days after you close it | | Campaigns, templates, flows, contacts | Until you delete them or close your account | | Addresses that bounced or were marked as spam | Kept on the suppression list so they aren't emailed again | | Logs of emails sent through the API | 30 days | | Events you send for your contacts | 400 days | | Webhook delivery records, background job records | 30 days | | Sign-in codes | 10 minutes | | Sessions | 7 days | | Invitations | 7 days, unless accepted |
Cookies
The product sets three cookies, all needed for it to work: one that keeps you signed in, one that remembers which project you have open, and one with your time zone so times show in yours. Our website sets no cookies; it remembers your light or dark theme in your browser's local storage. We use no analytics or advertising cookies, so there's nothing to opt out of.
Security
Everything travels over HTTPS. API keys and connection tokens are stored only as hashes, and webhook secrets are encrypted. People in your organization reach data according to their role, and an AI assistant reaches only the project and permissions you approve.
Your rights
You can ask to see, correct, export or delete your personal data, object to its use, or withdraw consent at any time. Write to hello@sendicorn.com and we answer within 30 days. You can also complain to your data protection authority. Every marketing email we send carries a one-click unsubscribe link.
Children
Sendicorn is not meant for anyone under 16.
Changes
If we change this policy in a way that matters, we email account holders before it takes effect. The date at the top shows the latest version.
Contact
MSECAMP LLC, 12 Daniel Road, Suite 318-333, Fairfield, NJ 07004, United States, hello@sendicorn.com