Draft: replace the [bracketed] parts with your details and have this reviewed by a lawyer in your country before launch.

Privacy policy

Last updated: [date]

SendBuzzPro is operated by [your name or company], [address, country], the same operator as LeadBuzzPro. This policy explains what data SendBuzzPro handles and why. Contact: hello@sendbuzzpro.com.

1. What SendBuzzPro stores

• Your license and account: your license key, email address, plan and sign-in sessions. Licenses are handled by the LeadBuzzPro license server at api.leadbuzzpro.com. Payments are handled by Freemius, Inc., our reseller and merchant of record; we receive your email, name, plan, purchase IDs and renewal, cancellation or refund status, never your card details.
• API keys: stored only as hashes, with the budgets and settings you choose.
• Your domains: the domains you add and their DNS verification status.

2. Email you send and receive

When you send or receive email through SendBuzzPro, we process it on your behalf. You are the controller of that data and we act as your processor.

• Messages: sender, recipients, subject, the full message (stored so you can inspect it), attachments, tags and the events that follow (delivered, bounced, complained, opened or clicked if you turn that on in SES).
• Inboxes: email received at your inbox addresses, threaded with the email it answers.
• Contacts: the opted-in contacts you add or import, their topics and unsubscribe status.
• Suppression list: addresses that bounced, complained or unsubscribed, kept so they are not emailed again.

Messages, events and stored email are deleted automatically after your plan's history window (7, 30 or 90 days). Suppressions are kept for as long as your account exists, to protect recipients.

3. Service providers

• Amazon Web Services (Amazon SES and SNS) to send and receive email, in a US region.
• Cloudflare (hosting, database and message storage).
• Freemius, Inc. (checkout, payments, invoices, sales tax and VAT, as merchant of record; checkout loads from checkout.freemius.com and is covered by Freemius' privacy policy) and the LeadBuzzPro license server (license checks).

4. Cookies and website analytics

sendbuzzpro.com only uses analytics if you allow it. On your first visit a banner asks you to Accept all, Reject or Choose. Nothing below loads until you decide, and rejecting is as easy as accepting. If your browser sends a Global Privacy Control or Do Not Track signal, we treat that as "Reject" and don't show the banner; you can still opt in from "Cookie settings".

• Google Analytics 4 (Google Ireland Limited, and Google LLC in the US), the "Analytics" switch. It records the pages you view, how you arrived (the referring site, search engine, and campaign tags in the link such as utm_source or ref), your device type, browser, screen size and language, an approximate location derived from your IP address (Google does not store the IP address itself), and actions on this site such as clicking "Add to Chrome", opening checkout, joining the early-access list or following a link to one of our sister sites. It sets first-party cookies _ga and _ga_<ID>, which last up to 2 years. When you follow a link between leadbuzzpro.com, postbuzzpro.com and sendbuzzpro.com, a _gl parameter is added to the link so the visit counts as one session. We keep Analytics data for [14] months. Advertising storage, ads personalisation and Google Signals are off. See Google's privacy policy and how Google uses data from sites that use its services.
• Microsoft Clarity (Microsoft Corporation), the "Session recording" switch. It records how you use our pages (clicks, taps, scrolling, mouse movement and the page layout) so we can replay sessions and build heatmaps that show where pages confuse people. It also records your device, browser and approximate location. Text you type, such as email addresses and license keys, is masked in your browser and never sent. It sets first-party cookies _clck (up to 1 year) and _clsk (1 day). Clarity is linked to our Google Analytics, so we can open a recording from an Analytics report. Microsoft keeps recordings for about 30 days. See the Microsoft privacy statement.
• Your choice is saved in your browser's local storage (bz-consent) for 6 months, then we ask again. It is not a cookie and is not sent to us. Each of our three sites asks separately.
• Cloudflare Web Analytics, if we turn it on, counts visits without cookies or personal identifiers, so it doesn't need your consent.
• Links to our sister sites carry a ref parameter and campaign tags so we can count visits between them; they identify the site you came from, not you.

Changing your mind. You can withdraw or change your consent at any time: click Cookie settings at the bottom of any page (or the button below), turn the switches off and save. We then stop Google Analytics and Clarity on this site and delete their cookies; clearing this site's data in your browser does the same. Withdrawing doesn't affect data collected before.

Our legal basis is your consent (GDPR Article 6(1)(a), and the ePrivacy rules for cookies). Google and Microsoft may process this data in the United States; both are certified under the EU-U.S. Data Privacy Framework. [Check this paragraph against your local law before launch.]

5. Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by emailing us. Deleting your account deletes your content; we keep billing records as the law requires.

6. Security

Data is encrypted in transit, secrets are encrypted at rest, and API keys are stored only as hashes.

7. Changes

We'll post changes here and update the date above. For significant changes we'll email you.