Sendum holds only what it needs to write and send your outreach, keeps your Gmail access locked down, and deletes everything when you ask.
What we hold
Six kinds of data, each there for a specific job. We never see or store your Gmail password.
| What | Why we need it |
|---|---|
| Your name, email and company, plus the business details you give us (what you sell, who you want to reach, your email signature and optional photo) | To write emails that sound like you |
| Your Gmail connection: a secure access key from Google, not your password | To send the emails you approve and spot replies |
| Your prospects: name, job title, company, work email, LinkedIn and similar public business details | To choose who to contact and personalise each email |
| The emails we draft and send, and the replies to them | To show you each conversation and suggest responses |
| Meetings booked from those replies | To show what your outreach produced |
| News from web pages you ask Sendum to watch | To flag moments worth reaching out about |
Your Gmail
Sendum only touches the conversations it starts. Google's permission screen describes the access in broad terms, so here is what actually happens:
- Sending: you review and approve the first email to each prospect before anything goes out. The follow-ups in that sequence then send on a schedule, and you can pause a campaign at any time.
- Test emails: once a week, Sendum sends one short test email from your account to two Sendum-owned inboxes, to check your emails land in the inbox rather than spam. It goes to nobody else.
- Reading: Sendum reads only replies to emails it sent for you. It does not scan, search or read the rest of your inbox.
- Your access key is encrypted before it is saved in our database.
- Switching it off: disconnect in Sendum's Settings, or remove Sendum at myaccount.google.com/connections. Sendum can no longer send or read from that moment.
While Sendum is new, Google shows a "Google hasn't verified this app" screen when you connect. Click Advanced, then Go to Sendum. We'll walk you through it on the setup call.
Where it's stored
Your data lives in one database, run by MongoDB Atlas in Ireland, inside the EU, and is encrypted at rest. Five other services handle parts of it to do their job:
| Service | What it does for Sendum | What it sees |
|---|---|---|
| MongoDB Atlas | Our database | Everything listed above |
| Railway | Runs the Sendum app | Data passing through while the app works, including short-lived technical logs |
| Your Gmail | The emails Sendum sends and their replies | |
| Anthropic (Claude) | Drafts emails and reads the tone of replies | Your business details, each prospect's name, role and company, text from their company website and relevant news articles, and reply text. Not used to train its models. Deleted within 30 days, except anything flagged for a safety review or that the law requires it to keep (Anthropic's policy) |
| Apollo | Business contact database | The names and companies we ask it to look up, to find and check work emails |
| Cloudinary | Hosts your signature photo | Your photo only |
Every connection between these services is encrypted. We don't sell your data or use it for advertising.
Who can see it
You and anyone you add to your account, plus Sendum's two-person team — our founder and our account lead — who can see your account, including your buyer list, to run and support it. Nobody else.
- You and any teammates you add to your Sendum account see everything in it.
- Sendum's founder and account lead can see your account, including your buyer list, to set it up, run it and support you.
- Sendum's founder can also access the database directly, and only does so to support you or fix a problem.
The accounts that run Sendum behind the scenes (our database, hosting and Google) all use two-step login.
Deleting your data
Email michael@sendum.io and we delete everything within 30 days, then confirm in writing. That covers your account, campaigns, prospects, drafts, replies and meetings, at the end of a pilot or at any time.
- Gmail: disconnect it yourself whenever you like (see above). It takes effect immediately.
- Emails already sent stay in your own Gmail Sent folder. They're yours; we don't touch them.
- Anthropic deletes what it processed within 30 days on its own, with the same exceptions as above.
- Database backups are kept for 8 days, then deleted.
Your rights and contact
Sendum is based in London. Under UK data-protection law, your prospect list is yours: Sendum handles it on your behalf and only to run your outreach.
You can ask to see, correct, export or delete your data at any time. Questions go to michael@sendum.io. If you're unhappy with how we handle it, you can complain to the Information Commissioner's Office. Our full privacy policy is at sendum.io/privacy.