Privacy Policy

Overview

This Privacy Policy applies to our website at sayuratech.com, our applications, dashboards, APIs, customer support channels and related services (collectively, the "Services"). It describes the information we may collect, why we process it, when it may be shared and the choices available to you.

If you do not agree with this Policy, please do not use the Services. This Policy should be read together with any service terms, order forms or product-specific notices that apply to your use of the Services.

Important for business customers: If you use our Services to upload or manage information about your own customers, contacts or recipients, you are generally responsible for ensuring that you have the necessary rights, notices and permissions to provide that information and to send communications to those people. Depending on the service and applicable law, you may act as the data controller/business and Sayura Technology may process that information on your behalf as a service provider/data processor.

1. Information we collect

Information you provide

We may collect information that you choose to provide when registering, purchasing a plan, requesting a demonstration, contacting support, completing a form or using a feature. Depending on the interaction, this may include:

• Name, business name, job title and account username.
• Email address, telephone number and business or mailing address.
• Account credentials and authentication information.
• Billing details, transaction references and subscription information. Payment card details may be collected and processed directly by our payment provider rather than stored by us.
• Support requests, feedback, survey responses and other messages you send us.
• Content, contact lists, tags, templates, campaign details and other information you choose to upload or create through the Services.

Information collected automatically

When you access the Services, we and our service providers may automatically collect technical and usage information, such as IP address, browser type, device identifiers, operating system, language, referring pages, approximate location derived from IP address, access times, pages viewed, features used, error logs and diagnostic data.

Information from other sources

We may receive information from business partners, publicly available sources, advertising or analytics providers, social networks, identity providers and other third parties, where permitted by law. The information received depends on the source and your settings with that provider.

Sensitive information

Please do not submit sensitive personal information through the Services unless a feature specifically requests it and we have provided appropriate instructions. We do not intend to collect sensitive personal information as part of ordinary account registration.

2. How we use information

We may use personal information for the following purposes, subject to applicable law:

• Create, authenticate and administer accounts, subscriptions and user permissions.
• Provide, operate, maintain and troubleshoot the Services, including messaging, campaign, contact-management and reporting features you choose to use.
• Process payments, manage invoices and provide transaction-related support.
• Respond to enquiries, provide customer support, and send service announcements or security notices.
• Personalise the user experience and remember settings, preferences, templates and configurations.
• Monitor performance, analyse usage, develop new features and improve reliability.
• Detect, investigate and prevent fraud, abuse, unauthorised access, security incidents and violations of our terms.
• Comply with legal obligations and establish, exercise or defend legal claims.
• Send promotional communications where permitted. You can opt out of marketing communications at any time.
• Carry out another purpose disclosed to you when information is collected or with your consent.

3. Legal bases for processing

Where required by applicable privacy law, we process personal information only when a valid legal basis applies. Depending on the circumstances, this may include:

• Contract: processing needed to provide the Services or take steps you request before entering into a contract.
• Legitimate interests: processing for purposes such as securing, maintaining and improving our Services, provided those interests are not overridden by your rights.
• Consent: processing based on your permission, which you may withdraw where applicable.
• Legal obligation: processing required to comply with applicable laws or lawful requests.
• Vital interests or public interest: processing where permitted or required to protect someone’s vital interests or perform a task in the public interest.

Where we process customer-uploaded recipient or contact data on behalf of a business customer, that customer is responsible for determining the appropriate legal basis for collecting and using the data. We process it in accordance with the customer’s documented instructions and our agreement, subject to applicable law.

4. When we share information

We do not disclose personal information indiscriminately. We may share it with the following categories of recipients when reasonably necessary for the purposes described in this Policy:

• Service providers and processors: hosting, cloud storage, security, analytics, customer support, communication delivery, payment processing and other vendors that support our operations.
• Communication platforms and integrations: providers you choose to connect to the Services, including messaging, email, social media or business software platforms. Their own terms and privacy policies may also apply.
• Professional advisers: lawyers, auditors, accountants, insurers and other advisers who are subject to confidentiality obligations.
• Business transfers: a buyer, investor or successor in connection with a merger, financing, restructuring, acquisition or sale of all or part of our business.
• Legal and safety purposes: regulators, courts, law enforcement or other parties where disclosure is required by law or reasonably necessary to protect rights, safety, property or the security of the Services.
• At your direction: other parties when you ask us to share information or enable an integration that requires it.

We may share aggregated or de-identified information that does not reasonably identify an individual for analytics, reporting, research or business purposes.

5. Cookies and similar technologies

We may use cookies, pixels, SDKs, local storage and similar technologies to keep you signed in, remember preferences, understand how the Services are used, improve performance, protect accounts and measure marketing effectiveness.

You can manage cookies through your browser settings and, where provided, our cookie preference tool. Disabling certain cookies may affect the availability or functionality of parts of the Services. If we use non-essential cookies that require consent in your location, we will request consent as required by law.

6. Messaging, contact lists and campaign information

If you use our Services to manage contacts or send messages, we may process information such as recipient names, phone numbers, email addresses, tags, message content, templates, delivery events, timestamps, campaign identifiers and interaction or status data (for example, queued, sent, delivered, failed or read where supported by the connected platform).

Your responsibilities: You must collect and use recipient information lawfully, provide required privacy notices, obtain any consent or other permission required for your communications, honour opt-out requests and comply with applicable messaging-platform policies and anti-spam laws. You must not upload contact lists or send messages where you lack a lawful basis or authorisation.

Delivery and integrations: Messages may be transmitted through third-party platforms or providers that you connect or that are required to deliver the service. Those providers may process message and recipient data under their own terms and policies. Delivery, read and failure statuses depend on the capabilities and reporting made available by the relevant provider; we cannot guarantee delivery.

Customer data: You retain responsibility for the content and recipient data you submit. We use such data to provide the requested functionality, maintain the Services, provide support and meet legal or security obligations. We do not use customer contact lists for our own unrelated marketing purposes.

7. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining business records, resolving disputes, enforcing agreements and meeting legal, tax, accounting or regulatory requirements.

Retention periods vary depending on the type of information, the nature of the Services, customer instructions, account status and applicable law. When information is no longer required, we will take reasonable steps to delete it, anonymise it or securely isolate it until deletion is possible, including where it remains in routine backup systems.

Business customers should consult their service agreement or account settings for any product-specific data retention and deletion controls. Do not rely on a fixed retention period unless it is expressly stated in your agreement.

8. How we protect information

We use reasonable technical, organisational and administrative safeguards designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Safeguards may include access controls, authentication, monitoring, encryption where appropriate, secure development practices and vendor review.

No internet transmission or storage system can be guaranteed to be completely secure. You are responsible for keeping your login credentials confidential, using strong passwords and notifying us promptly if you suspect unauthorised access to your account.

9. Children's privacy

Our Services are intended for businesses and individuals who are legally able to use them. They are not directed to children, and we do not knowingly collect personal information directly from children in violation of applicable law. If you believe a child has provided personal information to us, contact us so that we can review and take appropriate action.

10. Your privacy rights and choices

Depending on your location and applicable law, you may have the right to:

• Request confirmation of whether we process your personal information and obtain access to it.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information, subject to lawful exceptions.
• Request restriction of or object to certain processing.
• Request a portable copy of information you provided, where applicable.
• Withdraw consent where processing is based on consent.
• Opt out of certain targeted advertising, sale or sharing activities where applicable law provides that right.
• Complain to a competent data protection authority.

To protect your information, we may need to verify your identity and the validity of your request. We may decline or limit a request where permitted by law, and we will explain the reason where required. If you use our Services through a business account, please direct requests relating to contact or recipient data managed by that business to the relevant business first; we will assist the customer as required by our agreement and applicable law.

You can opt out of marketing emails by using the unsubscribe link in the message or contacting us. Even after opting out, we may send essential account, transactional, security or service communications.

11. International data transfers

Your information may be processed in countries other than the country where you live, depending on where we and our service providers operate. Those countries may have data protection laws that differ from the laws in your jurisdiction. Where required, we use appropriate safeguards for international transfers and take steps intended to ensure that personal information receives an adequate level of protection.

12. Third-party websites and services

The Services may contain links to third-party websites, applications or integrations. We do not control and are not responsible for the privacy, security or content practices of those third parties. Review their privacy notices before providing information or enabling an integration. A third-party service may process information under its own agreement with you.

13. Updates to this Privacy Policy

We may update this Policy from time to time to reflect changes in our Services, business practices or legal requirements. We will revise the “Last updated” date at the top when changes are published. Where required by law, we will provide additional notice or seek consent for material changes. We encourage you to review this page periodically.

14. Contact Sayura Technology

If you have questions, concerns or requests relating to this Privacy Policy or our handling of personal information, contact us using the details below.

We will review and respond to privacy requests within the time required by applicable law.