Privacy Policy & UK GDPR Compliance

1. Data Controller Identification

SiSender Technologies Ltd ("SiSender", "we", "us", or "our"), registered in England and Wales under Company Registration Number 14892011, with registered office at 100 Bishopsgate, London EC2N 4AG, United Kingdom, acts as Data Controller for customer account data and Data Processor for outbound prospect records uploaded by our subscribers.

2. Lawful Basis for Processing

We process personal data under the following legal bases recognized under UK GDPR Article 6:

• Contractual Performance (Art 6(1)(b)): To deliver our software platform, process subscription fees via Stripe or Razorpay, and provide customer support.
• Legitimate Interests (Art 6(1)(f)): For B2B commercial business development, fraud prevention, infrastructure security, and rate limiting.
• Legal Obligation (Art 6(1)(c)): To maintain corporate tax records and comply with statutory law enforcement directives.

3. Data Categories Collected

• Subscriber Account Data: Full name, corporate email address, encrypted password hash (Bcrypt), business billing address, and IP address.
• Prospect Data (Processor Scope): Contact name, corporate email address, job title, company name, and custom attributes imported into customer accounts.
• Telemetry Data: Message delivery timestamps, open tracking pixels, link clicks, bounce reports, and error codes.

4. Sub-Processors & Hosting Architecture

All core databases and worker queues are hosted within ISO 27001 and SOC 2 certified data centres located in London, United Kingdom and Frankfurt, European Union. Our primary sub-processors include:

• Google Cloud Platform: AI inference processing (Gemini API) and OAuth identity services.
• Stripe Payments Europe Ltd: Payment processing and subscription lifecycle management.
• Razorpay Software Ltd: Regional commercial payment gateway.

5. Data Retention & Erasure Rights

Customer account data is retained for the active duration of the subscription plus 6 years to satisfy statutory UK accounting requirements. Outbound prospect data and email telemetry can be permanently purged by customers at any time using our console deletion tools or via written request to privacy@sisender.com.

6. Data Protection Officer

For all inquiries regarding UK GDPR compliance, Subject Access Requests (SARs), or data processing agreements (DPAs), contact our Data Protection Officer at: dpo@sisender.com.