Privacy policy

Last updated: 2026-06-29

Draft – under legal review before launch.

This policy explains how SenseSend processes personal data. SenseSend is operated by X2 Works AS, the data controller for the data described here.

What data we process

Account data: name, company name, email address and password (hashed).
Service data: your domain and publicly available DNS records (SPF, DKIM, DMARC, MX, etc.) plus metadata from newsletters we receive to measure deliverability.
Payment data: handled by our payment provider (Stripe). We do not store card numbers.
Usage data: technical logs for operations, security and troubleshooting.

Purpose and legal basis

We process data to deliver and improve the service, to bill, to provide support and to maintain security. The legal basis is performance of a contract (GDPR Art. 6(1)(b)) and our legitimate interest in operating and securing the service (Art. 6(1)(f)).

Processors and sharing

We share data only with vendors that process data on our behalf under a data processing agreement: payments (Stripe), email sending/receiving (Domeneshop) and our hosting provider. We never sell personal data.

Retention

We retain data while you have an active account, and afterwards only as long as needed for legal obligations (e.g. accounting). You can request deletion at any time.

Your rights

You have the right to access, rectification, erasure, restriction and data portability, and to object to processing. Contact us at personvern@sensesend.com. You may also lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

Cookies

We use only essential cookies. See our cookie policy.

Contact

X2 Works AS · personvern@sensesend.com