Privacy policy.

Which data we process

Account data. When you create a Xendy account, we process your name, email address, organization name and billing details. We use these to deliver the service, to invoice you and to help you when you ask a question.

Customer contact lists. The contacts you manage in Xendy, your newsletter subscribers and customers, are and remain yours. For that data Xendy is the processor and you are the controller; we process it solely on your instructions and in line with the data processing agreement.

Usage data. We record how Xendy is used (such as logins and error messages) to keep the service secure and working. On our own website we use functional cookies and privacy-friendly statistics, with no advertising tracking.

Where your data sits and for how long

All data sits on servers in the Netherlands and Germany, inside the European Union. We keep your data for as long as your account is active. If you cancel, you can export all your contacts and data; after that we delete everything definitively from our systems and backups within 30 days, following a fixed deletion schedule.

For the technical delivery we work with a limited number of sub-processors, such as hosting providers. A data processing agreement has been concluded with each of them; you can request a current overview from us.

Your rights

You have the right to access, correct and delete your data, to data portability and to object to processing. If you are on the mailing list of a Xendy customer, you unsubscribe through the link in every email; for access or deletion you can go to the sender of that email, and if the two of you cannot work it out, we will help. You can also always lodge a complaint with the Dutch Data Protection Authority.

We secure all connections with encryption (TLS), work with strict access control and log changes to accounts. Do you suspect a security problem? Report it to us straight away and we will respond with priority.