Back to home

Privacy Policy

Last updated: 2026-06-10

This Policy explains what data SendItWhenever (the "Service") collects, and how we use, store, and protect it.

1. Data We Collect

  • Account information: your email address and authentication details.
  • Schedule metadata: operational metadata such as the target URL, fire time, HTTP method, payload size, and delivery status.
  • Webhook payloads: the body data you submit with a schedule.
  • Payment information: payments are processed by Lemon Squeezy; we do not store your card details.
  • Technical logs: minimal logs such as IP address and request time, used for security and fraud prevention.

2. Data Protection (Encryption at Rest)

  • Webhook payloads are encrypted at rest with AES-256-GCM and decrypted only in memory, exactly at fire time. Decrypted plaintext is never written to logs, databases, or error messages.
  • We do not store raw API keys; we retain only a SHA-256 hash of each key.
  • Outgoing webhooks carry an HMAC signature to protect their integrity.
  • Data in transit is encrypted with TLS (HTTPS).

3. How We Use Data

We use the data we collect only to (1) execute your scheduled webhook deliveries, (2) manage your account and billing, (3) maintain security and prevent abuse, and (4) improve the Service and provide customer support. We do not sell your data to third parties.

4. Retention

  • Delivery logs are retained for 7 days on Free and longer on paid plans (up to 180 days), then deleted, depending on your plan.
  • Payloads of completed schedules are destroyed after delivery in accordance with our policy.
  • Upon an account-deletion request, we delete the associated data within a reasonable period.

5. Subprocessors

To operate the Service, we rely on trusted third-party processors, including infrastructure (cloud hosting), payments (Lemon Squeezy), and transactional email (Resend).

6. Your Rights

You may request access to, correction of, or deletion of your personal data. Please send your request to contact@sendit-whenever.com.

7. Contact

The Service is operated by soft37, a business registered in the Republic of Korea (D-U-N-S No. 696554688). For any privacy-related questions, please contact us at contact@sendit-whenever.com.