Privacy Policy

SendRoom is operated by Send Room Inc, a Kumu Agency Business. If you have questions about this policy or your data, contact us at james@Kumuagency.com.

We collect only the information needed to provide the SendRoom data room service:

• Account information: email address, password hash, and any profile or company branding you add to your room
• Room and document data: files you upload, room settings, share links, and access controls you configure
• Viewer information: name, email address, and activity log (view timestamp, dwell time, and page-level engagement) for every visitor who accesses your room
• Communication data: invitations and messages sent through the platform, including delivery status logs
• Usage data: site visits and interactions collected through Google Analytics to help us improve the product

We use your data to operate, secure, and improve SendRoom:

• Authenticate users and enforce access controls
• Host, display, and deliver documents you choose to share
• Log viewer activity for analytics, watermarking, and security
• Send email invitations, notifications, and account messages
• Maintain platform security and prevent abuse
• Analyze product usage through aggregated analytics

We do not sell personal data. We do not use your uploaded documents for advertising or model training.

For users in regions that require a legal basis for processing, we rely on the following grounds:

• Performance of a contract: providing your account, rooms, and share links
• Legitimate interests: platform security, fraud prevention, product analytics, and marketing communications
• Consent: where required, for cookies and analytics tracking
• Legal obligation: retaining records required by law

We share data only with the service providers that help us run SendRoom. These subprocessors process data on our behalf and are contractually bound to protect it:

• Lovable Cloud: cloud database, file storage, and authentication infrastructure
• Lovable Emails: branded email delivery for invitations, notifications, and account messages
• Stripe: payment processing for subscriptions and billing
• Google Analytics: aggregated website usage and product analytics

We may also disclose data if required by law, to enforce our agreements, or to protect the rights and safety of SendRoom, our users, or others.

SendRoom uses cookies and similar technologies to keep you signed in, remember your preferences, and understand how the product is used. Google Analytics sets cookies on our marketing site and app to collect aggregated, non-identifying usage information. You can manage cookie preferences through your browser settings.

We keep your data for as long as your account is active or as needed to provide the service. When you delete your SendRoom account, we remove your personal data and uploaded documents. We may retain limited records longer where required for legal, tax, or security purposes.

SendRoom is built with access control and visibility at its core. All traffic and files are sent over TLS, documents are stored in private cloud storage and served through signed, time-limited URLs, and row-level security policies ensure users only see the rooms and documents they are allowed to access. The underlying platform maintains SOC 2 Type II and ISO 27001:2022 certifications; the SendRoom application itself has not been independently certified.

Depending on your location, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Object to or restrict certain processing
• Export your data where applicable

To exercise these rights, email us at james@Kumuagency.com. We will respond within a reasonable timeframe and may need to verify your identity before processing your request.

SendRoom is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy as the product evolves. We will post the new version on this page with an updated effective date. Continued use of SendRoom after changes means you accept the revised policy.

Questions about this Privacy Policy or your data? Email james@Kumuagency.com.