Privacy Policy
Effective date: 20 July 2026
SendGuard checks marketing emails before they're sent. To do that, we need to handle some of your data. This policy explains what we collect, why we collect it, who we share it with, and what your rights are. If anything is unclear, email us at privacy@sendguard.io.
Who we are
SendGuard is operated by The Good Spot Ltd (company number 11460271), a company registered in England and Wales ("SendGuard", "we", "us"). We are the data controller for the personal data described in this policy, except where this policy says otherwise. For anything privacy-related, contact privacy@sendguard.io.
What this policy covers — and our role
This policy applies to sendguard.io, app.sendguard.io, and the test email addresses we issue under try.sendguard.io and track.sendguard.io.
For your account, billing, website, and free preview check data, we act as the data controller. The emails you submit for checking may themselves contain personal data — for example, a name in a test recipient line or sample merge-tag data. For that content we act as a processor on your behalf: we analyze it only to produce your check results and never use it for anything else. Please send us test campaigns, not emails containing real customer data.
Data we collect
Account and workspace data. When you sign up we collect your email address and name (through our authentication provider, WorkOS), plus the organization and workspace names you create. Each workspace gets a unique tracking address (for example, yourname@track.sendguard.io).
Emails you send us for checking. When you send a test campaign to a SendGuard address, we receive and store the full email — headers, HTML body, links, and images — encrypted at rest, together with the results of our checks and the sending address and domain.
Free preview check. If you use the free check on our homepage, we collect the email address you enter, the test address we generate for you, the test email you send to it, and the check results.
Billing. Payments are handled by Stripe. We keep records of your plan and invoices. We never see or store your full card number.
Logs and technical data. Our servers keep structured logs — including IP addresses and request identifiers — for security, debugging, and abuse prevention. We do not log full email bodies.
Site analytics. The marketing site uses Cloudflare Web Analytics, which is cookieless and gives us only aggregate statistics. We cannot identify individual visitors from it.
Cookies. app.sendguard.io sets essential cookies to keep you signed in. We do not use advertising or cross-site tracking cookies anywhere.
How we use your data
- Providing the service — receiving your test emails, running checks (authentication, links, content, images, headers), and showing you the results (performance of our contract with you).
- Verifying links — we fetch the URLs found in your emails to test whether they work. These requests go out from our infrastructure and, in some cases, through a proxy network so results reflect what real recipients would see (contract and legitimate interests).
- Billing and account management (contract and legal obligations).
- Service communications — check results and important account notices (contract).
- Security, rate limiting, and abuse prevention (legitimate interests).
- Understanding site usage through aggregate, anonymous analytics (legitimate interests).
We do not sell personal data, and we do not use your data for advertising.
Who we share data with
We share data only with the providers we need to run SendGuard:
| Provider | What they do for us |
|---|---|
| Amazon Web Services | Hosting, email receiving, and encrypted storage (London, UK region) |
| WorkOS | Authentication and sign-in |
| Stripe | Payment processing |
| Neon | Database hosting |
| Cloudflare | Site analytics and DNS |
| Evomi | Proxy network used when verifying links found in your emails |
We may also disclose data if required to by law, and in connection with a merger, acquisition, or sale of assets — in which case this policy continues to apply to your data.
International transfers
Your data is primarily stored in Amazon Web Services' London (UK) region. Some of our providers process data in the United States or other countries. Where that happens, transfers are protected by appropriate safeguards such as the UK Addendum, the EU Standard Contractual Clauses, or the EU–US Data Privacy Framework.
How long we keep data
- Account and workspace data — for as long as your account is active.
- Submitted emails and check results — until you delete them or close your account.
- Free preview checks — the test address works for 24 hours and results are viewable for 30 days; after that they are no longer accessible. We may keep underlying records for a limited period for security and abuse prevention.
- Billing records — for as long as tax and accounting law requires.
You can ask us to delete your data at any time by emailing privacy@sendguard.io.
Your rights
Under UK and EU data protection law, you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- have your data erased;
- restrict or object to our processing;
- receive your data in a portable format.
To exercise any of these rights, email privacy@sendguard.io — we respond within one month. You also have the right to complain to a supervisory authority: the Information Commissioner's Office in the UK, or your local data protection authority in the EU.
Security
Data is encrypted in transit (TLS) and at rest, and access is restricted to what our systems and team need to operate the service. No internet service can guarantee absolute security — if you believe you've found a security issue, please tell us at security@sendguard.io.
Children
SendGuard is a business tool and is not directed at children under 16. We do not knowingly collect their data.
Changes to this policy
When we change this policy, we will post the new version here and update the effective date. If a change is material, we will give account holders reasonable advance notice by email.
Contact
The Good Spot Ltd (company number 11460271), registered in England and Wales.
Email: privacy@sendguard.io