Privacy Policy

Client Pages and private project content

Sendyori Client Pages can contain project proposals, estimates, previews, images and client names. Drafts are available to the signed-in owner. Published pages require the private link and PIN and remain subject to the sender’s release time, expiry and access controls. Published versions are kept separately from draft edits.

If the sender enables optional open tracking, the PIN screen explains it and lets you decline while still opening the page. If you agree, the sender can see opening times and the version opened. A one-day browser cookie helps avoid counting repeats; stored view records use a derived browser identifier rather than a raw IP address. Counts are approximate and do not verify who opened a page. Turning tracking off prevents future recording in that browser; earlier records remain until deleted with the page or account.

Submitting Accept or Request changes shares your entered name, message, time and the version you responded to with the sender. Names are self-reported. Access to private content can be revoked, but content already viewed, downloaded or independently copied cannot be recalled. Senders should only include project information they have permission to share.

When PDF attachments are enabled, uploaded originals and filenames are stored privately. PDF bytes are sent to a separately operated, authenticated document scanner for structural and malware checks before anyone can download them. The scanner request excludes your account email, client name and original filename; the file contents themselves may contain personal information. Unscanned or rejected files stay blocked. Originals are not stripped of document metadata, and a successful scan cannot guarantee that a file is harmless. Only upload documents you are permitted to share and process this way.

When you confirm publishing, we record your account, the Client Pages terms version and its first acceptance time. Your account JSON export includes this record. The record is removed on account erasure request or account deletion; this preview does not claim a separate legal retention requirement for it.

What we collect

To create and deliver a page, we collect only what the page needs:

• The recipient’s name and your message.
• Your email when you sign in or send a contact or build request. Signed-in activity is associated with your account.
• Photos you upload, their descriptions and captions, and optional external media links. We re-encode new uploaded photos and remove embedded metadata before storing them privately.
• Payment is handled entirely by Razorpay. We never see or store your card or UPI details.

How we use it

• To build, publish, and deliver your surprise page.
• To email you about your order — or, for a “build it for me” request, to email our team your brief.
• To process your payment through Razorpay.
• To keep the service secure and prevent abuse, including rate-limit records and restricted audit records of administrative actions and PIN changes.

Who processes your data

We rely on a small number of trusted providers, each receiving only what it needs:

• Supabase — manages account authentication and hosts order and page content.
• Vercel — hosts the application and processes incoming requests.
• Razorpay — processes payments.
• Resend — sends transactional email (such as order and request notifications).

Processing locations and backup retention

The operator must confirm the actual hosting providers, processing locations and scanner arrangements before general release. PDF attachments remain unavailable until their scanner is configured and verified.

The operator must publish the actual backup retention and deletion schedule before general release. Removing access or queuing deletion does not establish that every backup copy has already expired.

Cookies

Our site uses essential authentication, draft, checkout and gift-unlock cookies. This browser stores only a draft identifier for resuming; it does not store the PIN or draft content in local storage. New uploaded photos are private. Older pages may contain external photos or audio; those hosts receive connection information when media loads. YouTube and Instagram videos load only when you choose to load them and follow their own policies.

How long we keep it

Unsubmitted builder drafts expire after seven days. Scheduled cleanup removes expired drafts and orphaned uploads when enabled. Published pages have no automatic age-based deletion at present; this is not a lifetime hosting guarantee. Signed-in owners can take a page offline immediately or queue deletion of its content. Content deletion runs separately from removing access. Payment and audit records may be retained for security, legal or accounting purposes; backup copies follow the operator’s backup expiry schedule.

Client Pages use sender-selected access expiry dates. Retained published versions can continue to reference the same private PDF. Removing an attachment from a newer draft does not delete older published versions. Page deletion or account erasure blocks access immediately and queues document removal; quarantined, rejected and abandoned PDF copies are cleared by scheduled cleanup. Account JSON exports include document metadata and references; ready originals can be downloaded separately from the owner library.

Your choices

Signed-in owners can use My pages to take a page offline or request content deletion. To request a data export, exercise another privacy right or get help with a guest order, email Contact support or use the contact page.

Children

Do not include another person’s personal information or photographs without the appropriate permission, including permission from a parent or guardian where required. Contact support if a page includes information about a child that should be removed. We review requests before disclosing information or changing ownership.

Changes to this policy

If we change how we handle your data, we will update this page and revise the “last updated” date above.

Contact

Questions about your privacy? Email Contact support.