SendByAninchi

Service and contact

SendByAninchi is a newsletter and campaign service operated under the Aninchi brand. For privacy questions or requests, contact hola@aninchi.com. For a subscriber record managed by a customer workspace, you may also contact that business directly.

Personal data handled

We process account and workspace information, subscriber email addresses and optional profile fields, attributes and preferences, consent records, campaign content and events, unsubscribe status, bounce and complaint events, and security and operational audit records.

Purpose

Data is used to manage newsletter audiences, send campaigns, keep suppression lists, measure delivery and engagement, and honor unsubscribe or data-rights requests.

Optional Google sign-in

Google sign-in is optional. You can continue using a password or a magic link. When you connect Google from Your profile, we request only OpenID Connect identity and email access (openid and email). Google provides a stable account identifier, your email address and its verification status. We use these to verify that the Google email matches your existing SendBy account, link that account and authenticate future sign-ins. We do not automatically create or merge accounts by email.

We store the Google account identifier linked to your SendBy user, the link creation time and your account email-verification status. We do not request access to Gmail, contacts, calendars or Drive. Google authorization codes and ID tokens are processed transiently to complete sign-in; our authentication service does not persist them or Google access or refresh tokens.

Google sign-in data is not sold, used for advertising, or used to grant marketing consent. It is used only for account linking, authentication and related account security. Google processes authentication requests under its own privacy policy.

Processors and integrations

We use Amazon Web Services SES for email delivery and delivery feedback, Hetzner-hosted application and PostgreSQL infrastructure, and Stripe for workspaces using Stripe subscription billing. These providers process the data needed for their respective services. Google receives authentication requests when you choose Google sign-in. Google account identifiers are not added to newsletter recipient data or sent to email recipients.

Rights and retention

You can disconnect Google from Your profile using Disconnect Google and sign out all sessions. This removes the active Google account link and revokes your SendBy sessions; it does not delete your SendBy account or unsubscribe you from a customer newsletter. You can also remove the app connection in your Google Account. To request access, correction, export, deletion, or to raise an objection, contact hola@aninchi.com. We verify requests before disclosing or changing personal data.

The Google account link is retained until you disconnect it or your account is deleted. The encrypted Google sign-in flow cookie lasts at most ten minutes. Hashed anti-replay and rate-limit attempt records expire after ten minutes; expired records are deleted when another Google sign-in attempt starts. These records do not contain raw Google tokens.

Other account, consent and operational records are retained as needed to provide the service, honor withdrawals, prevent abuse and meet applicable recordkeeping obligations. An unsubscribe or suppression record may be retained to prevent unwanted future email. Deletion requests are reviewed for those obligations and any retained backup copies; removing an active account link does not immediately remove historical backup copies.