Privacy policy

This policy covers this site and the advisory engagements described on it. Any other product you license from us is covered by its own privacy policy, because it processes a different kind of data for a different purpose.

When you enquire. Your name, email address, phone number if you give one, your company, and whatever you choose to tell us about your situation.

During an engagement. Business contact details for the people we work with, and the technical and commercial information an engagement requires — DNS records, sending statistics, bounce and complaint data, analytics exports, campaign content.

For billing. Billing name, address, GSTIN where applicable, and the payment reference returned by our payment provider. We never see or store your card details.

• We do not ask for, receive custody of, or store your subscriber or contact lists. Where an audit needs to look at list data, we work from aggregate statistics or a de-identified sample.
• We do not require production credentials. Read-only access is requested wherever read-only access is sufficient.
• We do not buy, sell, rent or supply personal data to anyone.

• To answer your enquiry and prepare a proposal — at your request, before entering a contract.
• To perform the engagement you have agreed — performance of a contract.
• To invoice you and meet tax and accounting obligations — a legal obligation.
• To secure our systems and keep records of what was advised — our legitimate interest in operating the practice.

We do not use your data to train models, and we do not use information learned in one engagement for the benefit of another client.

Only the processors needed to run the practice, each bound to confidentiality and to using the data only as instructed: our hosting and email providers, our payment provider, and our accountants for the purpose of statutory filings.

We disclose data to anyone else only where the law compels it, and we will tell you when that happens unless we are prohibited from doing so.

• Enquiries that do not become engagements: deleted within 12 months.
• Engagement materials and deliverables: kept for 3 years after the engagement ends, so we can answer questions about what was advised and when.
• Invoices and tax records: kept for 8 years, which is what Indian tax law requires.

Technical data collected for an audit is deleted once the engagement closes.

You may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it where we have no continuing obligation to keep it, and withdraw consent where consent is the basis we rely on.

Write to billing@sendpository.com and we will respond within 30 days. If you are not satisfied with our response you may complain to the Data Protection Board of India.

Data is held on access-controlled systems, encrypted in transit and at rest. Access is limited to the people working on your engagement. Any credential you share is stored in a password manager and revoked at the end of the engagement — and you are entitled to revoke it yourself at any point.

This site sets no advertising or tracking cookies and embeds no third-party analytics. The only storage used is what is technically necessary to serve the page.

Material changes to this policy will be notified to clients with an active engagement. For anything relating to your data, contact: