Privacy policy

1. Introduction 

Intro Labs Ltd, trading as Sendr (company number 15204378, Third Floor Broadwalk House, Southernhay West, Exeter, Devon, EX1 1TS) ("Sendr", "we", "us") is the controller of the personal data described in this Privacy Policy. 

We are committed to protecting your personal data and being transparent about how we collect, use and share it. This Privacy Policy sets out the types of personal data we collect, the purposes for which we process it, and the legal bases for that processing, in accordance with the UK General Data Protection Regulation (UK GDPR). 

2. Scope 

This Privacy Policy applies to the personal data we collect and process in connection with the services we provide. Personal data means any information relating to an identified or identifiable individual, as defined under UK GDPR. This policy explains how we handle personal data across our operations, including data collected through our website and through our interactions with customers and users. 

When our customers use Sendr to store and process information about their own contacts and prospects, we act as a processor on their behalf under our Terms of Service, and the customer is responsible for how that data is used. This Privacy Policy covers personal data where we act as controller, including data about our website visitors, customers and their authorised users. 

Information about how we source business contact data is available at https://www.sendr.ai/data-sourcing. 

3. Data We Collect 

We may collect and process the following types of personal data: 

Contact Information: such as your name, email address, phone number and company details. 

Usage Data: information about how you interact with our website and services, such as IP address, browser type and operating system. 

Payment Data: We do not collect card data directly. Payments are handled by third-party payment processors (such as Stripe) or, where you buy through AWS Marketplace or a reseller, by that provider. 

Purchase Data: If you buy Sendr through AWS Marketplace or one of our reseller partners (such as AppSumo or Pax8), we receive information from them to set up and manage your subscription, such as your name, business email address, company, account identifiers and subscription details. Their own privacy policies govern the data they hold. 

Integration Data: When you connect third-party accounts (such as email providers, messaging services or social media platforms), we may collect and process the data needed to enable those connections. This may include account authentication details and message metadata. Where the connected platform makes it available, it may also include performance data such as delivery status and engagement metrics (for example, opens or clicks). 

Video and Voice Recordings: If you record or upload video or voice content, we process those recordings to provide our video and voice features. 

You are responsible for ensuring you have the necessary rights and permissions to connect and use third-party accounts and to send communications through them. 

4. Purposes and Legal Bases for Processing 

We process your personal data for the specific purposes set out below. 

4.1. To Provide and Improve Our Services 

We process personal data to deliver and maintain our services, keep our systems secure and improve the functionality of our platform. 

Legal basis: Legitimate interests (to provide and improve our services). 

4.2. Aggregated Data and Recommendations 

We derive information about campaigns run on Sendr, such as industry, geography, persona type, channel, tone, timing and outcomes like reply and meeting rates. We combine this information across many customers to create statistics that do not identify any customer or individual. 

We use these statistics to: 

• power and improve recommendations in Sendr; 

• develop data products and services; 

• share with our research partners. 

Once created, these statistics are not personal data. We never use or share the content of messages, contact lists or prospect data for this purpose. 

Legal basis: Legitimate interests (to improve our services and develop new ones), and, where we act for our customers, their instructions under our Terms of Service. 

4.3. Training Video Features (optional) 

We plan to offer an optional setting that lets you choose whether original video recordings of you (excluding any video generated or modified by third-party providers), recorded or uploaded through Sendr, may be used to develop and train AI systems for video generation features such as lip synchronisation. This setting is not yet available, and we do not currently use recordings for this purpose. 

When the feature is live, you will be able to opt in, and change your choice at any time, in your account settings. We will not use your recordings for this purpose unless you opt in. Where you do, we may carry out this work ourselves or with research partners, such as the University of Exeter, under obligations of confidentiality. This option will not be available on AWS Marketplace or enterprise subscriptions unless agreed separately. 

If you withdraw, your recordings will not be used in any further training, although we cannot remove their contribution from systems already trained. We will delete recordings held for training within 30 days of your withdrawal. You can also contact privacy@sendr.ai at any time about this feature. 

Legal basis: Consent. 

4.4. Marketing and Communications 

With your consent, we may use your personal data to send you marketing materials or to tell you about products or services you may be interested in. 

Legal basis: Consent (where required) and legitimate interests (for customer engagement). 

4.5. Compliance with Legal Obligations 

We may need to process personal data to comply with the law or to respond to lawful requests from regulators and other authorities. 

Legal basis: Compliance with legal obligations. 

4.6. Business Operations and Security 

We may process your personal data to keep our business running smoothly, including for security monitoring, fraud prevention and internal audits. 

Legal basis: Legitimate interests (to protect our business and maintain operational efficiency). 

4.7. Website Visitor Identification 

We may use visitor identification services that use cookies and similar technologies to link your visit to our website with your business contact details, so that we can send you relevant communications. We only use these services if you accept marketing cookies through our cookie banner, and you can withdraw your consent at any time via our cookie settings. 

Legal basis: Consent. 

5. Data Sharing 

We only share your personal data with third parties in specific circumstances: 

Service Providers: We engage trusted service providers to perform functions on our behalf. These include hosting, payment processing, email and messaging delivery, and AI, video and voice generation providers. 

Select Partners: If you request local or in-person support, or where it is relevant to your use of Sendr, we may introduce you to a Sendr Select partner in your region and share your business contact details with them for that purpose. 

AWS Marketplace and Reseller Partners: We share data with these partners to set up, bill and manage subscriptions purchased through them. 

Research Partners: We share only aggregated, anonymised statistics, or video recordings where you have opted in to video training. 

AI Providers: Where you connect your own AI model account to Sendr, relevant data is sent to that provider on your instructions to generate outputs. 

Business Transfers: If we are involved in a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction, subject to this Privacy Policy. 

Legal Obligations: Where required, we may share personal data to comply with legal obligations or to respond to lawful requests. 

6. International Data Transfers 

Our operations may involve transferring data outside the UK. Where they do, we put appropriate safeguards in place to protect your personal data. These include the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or transfers to countries with an adequacy decision. 

7. Your Rights 

Under UK GDPR, you have rights over your personal data, including the right to: 

• access your personal data; 

• rectify inaccurate or incomplete data; 

• erase your data in certain circumstances; 

• restrict or object to processing in specific situations; 

• request data portability; 

• withdraw consent at any time, where we rely on consent; 

• lodge a complaint with the Information Commissioner's Office (ico.org.uk). 

You can contact us at privacy@sendr.ai to exercise any of these rights. We will respond within one month. 

8. Data Retention 

We keep personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by law. Specific retention periods vary depending on the type of data and the context in which it was collected. 

Account data is kept for the duration of your subscription and for up to 12 months afterwards, unless a longer period is required by law. Aggregated statistics that do not identify any individual may be kept indefinitely. 

9. Changes to this Privacy Policy 

We may update this Privacy Policy from time to time to reflect changes in our data processing activities or legal obligations. Please review this page periodically for the latest information on our privacy practices. Where we make material changes, we will notify you by email or within Sendr. 

10. Contact Us 

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us: 

Email: privacy@sendr.ai 

Post: Intro Labs Ltd t/a Sendr, Third Floor Broadwalk House, Southernhay West, Exeter, Devon, United Kingdom, EX1 1TS