Scope
This notice covers the free public analyzer and, when enabled, the separate private workspace. SenderOwner is for authorized business users, including MSP and Microsoft 365 operations personnel. Using the free analyzer does not create an account or subscription.
Local CSV analysis
Your selected CSV is parsed in your browser. The original file, file name, CSV contents, row values, sender or recipient addresses, tenant labels, and file fingerprints are not sent with probe events. Do not select files containing passwords, tokens, message bodies, recipient lists, or data you are not authorized to process.
Minimal probe events
On the first tracked page load or local probe action, this browser creates a random identifier and stores it locally for up to 60 days. It is not derived from device fingerprinting and is not used for advertising or profiling.
The service may receive that identifier, a fixed diagnostic or probe event type, the page route, event and schema identifiers, a coarse first-touch channel group, and a coarse country group derived by Cloudflare. Diagnostic events distinguish a page view, analyzer opening, sample completion, real-file selection, second-tenant completion, and plan export; they do not include file or tenant values. Controlled errors use a fixed code; free-form error text is not collected. Cloudflare also processes ordinary request information, such as IP address and headers, to deliver and protect the service.
Cloudflare performance monitoring
Separately, Cloudflare Web Analytics uses a real user monitoring (RUM) beacon on this website to measure loading speed and page performance. It sends performance measurements, the visited page URL, the referring page URL and a generated page-load identifier to Cloudflare. The beacon does not use cookies or browser storage. Cloudflare states that the RUM service receives IP addresses when handling requests, discards them at its nearest data center and does not store them in its core databases or logs. This performance monitoring is separate from the probe events described above and is not session recording.
Purposes, sharing, and retention
We use probe information only to operate and secure the probe, prevent duplicate counting, diagnose fixed error categories, and decide whether the product reaches its intended MSP audience. Cloudflare provides hosting, edge delivery, and event storage. We do not sell personal information or share it for cross-context behavioral advertising.
The browser identifier expires after no more than 60 days unless you clear site data sooner. Raw probe event rows are deleted after 90 days. Aggregate counts that no longer contain the identifier may be kept for up to 13 months. Cloudflare may process service data in multiple locations; SenderOwner does not promise US-only data residency.
Email communication
If you email us, Purelymail processes your email address, message, attachments, and delivery metadata so we can receive and reply to it. Earlier correspondence may remain in our previous Google Gmail mailbox under the retention period below. We use support correspondence only to respond, secure the service, and keep required records; not for marketing.
We normally retain support correspondence for up to 12 months after the issue is closed, unless a longer period is needed for security or legal reasons.
Workspace sign-in and necessary cookies
When you request workspace access, we process your email address and send a one-time link through Purelymail. Purelymail processes the recipient, link and delivery information to send the email. The link expires after 10 minutes and must be confirmed in the browser that requested it. We store a hash, not the usable token, in our database.
The workspace uses a browser-binding cookie for up to 10 minutes and a sign-in session cookie for up to 8 hours. They are Secure, HttpOnly cookies used for authentication, not advertising. Signing out revokes the current session. Workspace records and email addresses are not deliberately saved in browser local storage.
Private workspace records
If you choose to save a workspace import, your browser sends only the source labels, counts, status and reporting-window fields shown in the confirmation preview. The original CSV file is not uploaded. Unlike the free analyzer, these selected values are stored on our server after confirmation.
We also store organization and tenant labels, membership roles and invitations, action owners, route decisions, notes, checklists, due dates, evidence references, template structures, version history, usage counts and the user ID and server time associated with changes. We do not fetch evidence links or store evidence attachments. Do not enter message bodies, recipient lists, credentials, access tokens or sensitive information that is unnecessary for the task.
Cloudflare Workers and D1 process these records to provide the service. Authorized organization members can access their organization's records; administrators manage membership and deletion. Templates should contain generic instructions, not another customer's data. We do not send workspace content to AI models.
Workspace retention and deletion
While a paid plan is active, historical snapshots and superseded action versions are retained for up to 12 months on Starter or 24 months on MSP. The latest action state and active templates remain available while the workspace remains entitled to access; a history limit does not silently delete the current action.
Trial access starts with the first successful import, lasts up to 30 days, must begin within 15 days of organization creation, and never extends beyond 45 days after creation. Trial write access is followed by 7 days of read-only access. Business records become eligible for scheduled deletion 30 days after trial write access ends. After paid write access ends, there is a 30-day read-only export window, followed by scheduled business-data deletion. Renewed valid entitlement prevents that scheduled deletion.
An administrator can delete a tenant and its active-database snapshots and action records. Closing an account revokes sessions and removes its email and memberships; shared organization records and internal author references may remain for the other members. Pending billing and last-administrator responsibilities must be resolved first. Limited billing and security records are retained separately for required recordkeeping, disputes and fraud prevention. Provider backups may retain deleted records for their recovery window; deletion from the active database is not a promise of immediate removal from every backup.
Subscription information
When enabled, checkout and payment processing are provided by Creem. We send the signed-in payer's email, selected plan, and internal user, organization and checkout identifiers. We keep the resulting subscription and customer identifiers, plan, status, billing-period dates and payment-event processing records to provide the correct access. Card details are entered on Creem's hosted checkout, not a SenderOwner card form. Creem processes payment and billing information under its Privacy Notice.
Processing locations and rights
The operator is based in China. Cloudflare and our email and payment providers may process information in other countries. We do not promise US-only residency. For workspace records, you can export action plans and version history as CSV or JSON and download individual snapshots. Contact privacy@senderowner.work for other access, correction, deletion or processing questions. We may need to verify your authority, especially for records belonging to a shared customer organization.
Your choices
You can avoid further event collection by leaving the site, and you can remove the local identifier by clearing site data for senderowner.work. Depending on applicable law, you may request access, correction, deletion, or information about processing. Because the identifier is anonymous, we may be unable to connect a stored event to you without information from your browser.
Children and changes
The probe is for business users age 18 or older and is not directed to children. Material changes to this notice will be dated on this page.
Contact
Privacy requests: privacy@senderowner.work. Security reports: security@senderowner.work. Operator location: Shanghai, China.