Privacy policy

Effective from: 24 October 2026

This is a translation of the policy in Swedish, which is at sendora.se/privacy. If the two differ, the Swedish policy governs.

The policy says how Sendora processes personal data about those who represent a customer, about those who write to us and about visitors to our websites. Sendora is the controller of that data. For email that we send or receive for our customers, the customer is responsible.

Who is responsible

Sendora is the controller. The company’s details are in the terms of service. Questions about personal data: support@sendora.se. Sendora has no data protection officer.

If you have received email from one of our customers, or written to one

Sendora sends and receives email on its customers’ behalf. The customer is then the controller, and Sendora is the processor under the data processing agreement. If you want to know what is kept about you, or have it erased, contact the customer. If you need help finding the right one, write to support@sendora.se.

If you unsubscribe from a broadcast, through the link in the message or the button in your email client, only your choice is kept. The address is added to the sender’s suppression list for that stream, with the time and the message it concerned, and the sender is told. The unsubscribe page sets no cookies and keeps no visitor logs, and the link does not contain your address.

If you write to an address that a customer receives through Sendora, we store the message encrypted for at most 30 days and pass it to the customer’s systems. No one at Sendora reads the mail, except when a fault or an abuse case requires it.

If you represent a customer

The account. When you create an account, we process your name, your email address and, if you give it, how you heard about Sendora. If you choose a password, we keep it only as a hash, a form that cannot be read back. We keep which language you want the service and our emails in, Swedish until you choose another. We also keep that you accepted the agreement on the customer’s behalf, when that happened and which version of each document applied.

Before the account may deliver email, we review it. We then process the answers about the expected volume, what kinds of messages you will send, how the recipients were collected and, if you give it, why you are considering Sendora.

Your name and email address are needed to create the account and enter into the agreement. The answers about volume, messages and recipients are needed to approve the account. The rest is optional.

Legal basis: our legitimate interest in entering into and performing the agreement with the customer that you represent, and in letting only reputable senders send. If the customer is a sole trader, the basis is the agreement with you.

Signing in. We keep when you sign in. A sign-in link that we email works once and for at most 24 hours. To stop guessing, we count sign-in attempts per email address and per IP address. The time of each sign-in is also kept in the audit log.

Legal basis: legitimate interest in protecting the account.

SSO. The customer can let you sign in through your organisation’s own identity provider, such as Microsoft Entra ID. This is called SSO. If you type your email address with us first, we may pass it on to the identity provider. Once you have signed in there, the provider sends us your email address and an id for you, and often your name. We connect the id to your user. If you already have a user, we may first email you a link that confirms the connection. If you have none, we create one for you as a member, if the customer has chosen that. A sign-in with SSO lasts for at most twelve hours.

The customer can also require SSO. If the requirement applies to you, you sign in only through the identity provider, and the data from it is needed for you to be able to sign in. An administrator can still sign in with a link that we email, and that sign-in then lasts for at most twelve hours.

When the customer tests the sign-in, we keep what the provider sent about the person who signed in during the test, so that the result can be shown. The test signs no one in to Sendora.

SCIM. The customer can let the identity provider keep the account’s users up to date, with SCIM. The provider then sends your name, your email address, your username and the provider’s id for you. It adds, changes, deactivates and removes users. It can also read the names and email addresses of those in the account who have an address on the organisation’s domains. A user who is deactivated cannot sign in.

Link to IT. An administrator can email a link to whoever runs the organisation’s IT, so that that person can set up SSO and SCIM. We keep the address that the link was emailed to, and when the link was created, opened and revoked. The link works only in the browser that opened it first.

Legal basis for SSO, SCIM and the link to IT: legitimate interest in performing the agreement with the customer that you represent, and in protecting the account.

Email from us. We send sign-in links, invitations and notices about the account with our own service, like our customers’ email. We then keep the recipient’s address, the subject and how the delivery went, and for a while also the content. If an email to you bounces, or you complain about it in your email client, we add the address to a suppression list and stop sending that kind of email there.

Legal basis: legitimate interest in being able to show what we have sent and whether it arrived, and in not emailing anyone who does not want to or cannot receive it.

Connected apps. You can connect an app, such as an AI assistant, to the account. We then keep which app it is and what it may reach and do. We also keep when you approved it, when it was last used, and when and why the connection ends. You and the account’s administrators can see the connection and disconnect it. Connecting an app is optional.

What the app reads in the account, such as the message log, is the customer’s data. We disclose it to the app on the customer’s behalf, under the data processing agreement. After that, the app’s provider handles it. The app does not get your account details from us.

To stop abuse, we also count per IP address how many apps are registered with us.

Legal basis: legitimate interest in performing the agreement with the customer that you represent, and in protecting the account and the service.

Billing. We process the customer’s legal name, organisation number, invoice address, email address for invoices and the customer’s reference. Mollie B.V. in the Netherlands receives the payments as a controller and sends the invoices as our processor. Mollie gets the customer’s name and the email address for invoices when a card is saved, and the rest of the billing details when we invoice. You give the card details directly to Mollie, and we never see the card number.

Legal basis: legitimate interest in performing the agreement with the customer, and a legal obligation under the Swedish Accounting Act for the records.

The audit log shows which administrative actions have been taken in the service, when and by whom. The person is given by an id. When an account is created, the email address that it was created with is also kept. When an app is connected or disconnected, the app’s name is also kept. The log cannot be altered.

Legal basis: legitimate interest in being able to show what has happened in the service, and in being able to defend legal claims.

Logs and error reports. The service’s logs and error reports contain only the service’s own ids for accounts, users and messages, never names, email addresses or content. We use them to keep the service running and to find faults.

Legal basis: legitimate interest in running the service securely.

If you write to us

What you write to support@, abuse@ or postmaster@sendora.se reaches our mailbox at an email provider in Switzerland.

Legal basis: the agreement, or legitimate interest in answering what you send us.

If you visit our websites

Our websites, such as sendora.se and sendorahq.com, set no cookies, keep no visitor logs and collect nothing about you. Your IP address is used only to send the page and is not kept. If you choose a programming language in the documentation, the choice is kept only in your browser. The dashboard at app.sendora.se keeps no visitor logs, and sets only the cookies needed for signing in, for a link to IT and for connecting an app. If you must sign in first, the page you were on your way to is kept only in your browser.

Legal basis: legitimate interest in showing customers and others how the service works.

Who receives the data

• Our hosting providers in Sweden run the servers. The one that stores the data is listed among the subprocessors.
• Mollie B.V. in the Netherlands receives payments and sends invoices. Mollie may transfer data to countries outside the EU and EEA under the European Commission’s standard contractual clauses.
• Your organisation’s identity provider, if the customer uses SSO or SCIM. It may get the email address that you type with us when you sign in. Through SCIM, it can read the names and email addresses of those in the account who have an address on the organisation’s domains. The customer chooses the provider and is responsible for it. Where it processes the data depends on which provider the customer has chosen.

How long we keep the data

• The account details are kept for as long as the account exists, and are erased within 30 days after it has been closed.
• An account that is never confirmed is erased after seven days, and an account that is not approved 90 days after the decision.
• A sign-in lasts for at most 30 days, and a sign-in with SSO for at most twelve hours. The counters last for 15 minutes. Sign-ins, links and counters are erased within an hour after they expire.
• What the identity provider has sent about you is kept for as long as your user exists.
• The result of a test of the sign-in is kept for an hour, and erased within an hour after that.
• A link to IT lasts for seven days. It is erased, with the address that it was emailed to, within an hour after it has expired or been revoked.
• The details of email that we have sent are kept for 13 months, and the content for 30 days. An address on our suppression list is kept until you ask us to remove it.
• A connection to an app ends after 90 days, or after 30 days without use. The details of it are erased 30 days after it has ended.
• Logs and error reports are erased after 30 days.
• The billing records are kept for seven years, as the Swedish Accounting Act requires.
• The audit log is kept for ten years after the account has been closed, since claims under an agreement become time-barred after ten years.
• What you write to us is kept for as long as the matter requires.
• Backups of the database are kept for at most six weeks. So what we erase is gone from them too within six weeks.

Your rights

You have the right to know what data we have about you, and to have it corrected, erased or restricted. You also have the right to receive it and move it, and to object to the processing, to the extent that the General Data Protection Regulation allows. Write to support@sendora.se. You can also complain to the Swedish Authority for Privacy Protection.

We make no decisions about you that are based solely on automated processing and that have legal effects or similarly significantly affect you. The service’s brake can pause a customer’s broadcast stream automatically when there are too many complaints, but a person at Sendora reviews every such pause.