Our data manifesto

Your data stays yours.

Sendgate is a governance layer on top of the sending tool you already use. Your contacts live in your sending tool, not with us. We store the bare minimum to run the tool, and nothing more.

The minimum, by default

We don't copy your contact base. We only keep the metadata needed for compartmentalization: segment names, sizes, who can access what.

Encrypted, never in the clear

Your API key is encrypted (AES-256-GCM) and only used to call your sending tool on your behalf. It never appears in plain text, not in the app, not in our logs.

Zero resale, zero ads

We sell nothing, rent nothing, and train no model on your data. No ad trackers, no profiling. Our business model is your subscription.

What we store

  • The user accounts in your workspace: email, name, role.
  • Groups and authorizations (which group can access which segment / sender).
  • Segment metadata: name and size, recomputed from your sending tool, not the contacts.
  • Campaign metadata: name, subject, status, send counters.
  • Your API key, encrypted.
  • Billing data, handled by Stripe (we never see your card).

What we don't store

  • Your contact base: it stays in your sending tool, we don't copy it.
  • The content of sent emails beyond basic tracking (we don't re-archive your messages).
  • Any behavioral data about your recipients for advertising.
  • Your API key in plain text: never, anywhere.
  • Resellable profiles or third-party tracking cookies.

How access to your sending tool works

You connect your account once (Brevo or Mailchimp). Sendgate uses it to read your segments and trigger your sends, on the sending-tool side and on your behalf. We don't duplicate your contacts into a parallel database: every time you open the app, segment sizes are recomputed live from your sending tool.

In short Sendgate adds access rules on top of your sending tool. The sensitive data, your contacts, never flows in to be stored with us: it stays in your sending tool.

Hosting & location

The application and its database are hosted on a dedicated server in the European Union. Traffic is encrypted in transit (TLS). Application secrets (API keys, tokens) are encrypted at rest.

Retention

We keep your workspace data while your account is active. On cancellation, your data is deleted or anonymized within 30 days, except where law requires otherwise (e.g. billing).

Deletion & export

You can request an export or deletion of your data at any time. Disconnecting your key immediately cuts off all of Sendgate's access to your sending tool.

Sub-processors

Sendgate is not affiliated with any of the brands mentioned.

A question about your data?

Write to us and we'll answer clearly, no jargon.

Email us