Privacy

The site you visited was created and is controlled by a Sentway customer, not by Sentway. They decide what information to ask you for and what to do with it. In data protection terms they are the controller and Sentway is the processor. Every gate screen names the customer receiving your details. If you want your data corrected or deleted, you can contact them directly, or contact us and we will act on their instructions or pass your request to them.

If the page is behind a gate, we collect the information the gate asks for. That is usually an email address, and may include other fields the site owner has configured, such as your name, company, or role. If the gate uses a password, we do not store the password you type.

If the site owner has turned on email verification, we send a sign-in link to the address you enter, and we temporarily store that address, the details you submitted with it, your IP address, and a one-time link token so we can confirm you control the address. These records are deleted within twenty-four hours of the link expiring, and immediately on request.

While you use a hosted page we record activity such as pages viewed, how far you scrolled, time spent on a page, links and buttons you clicked, forms you submitted, and progress through any checklist or plan on the page. We identify your browser with an identifier stored on your device so that returning to the page recognises you. We do not track you across other websites and we place no advertising or analytics scripts from third parties on hosted pages.

Once you enter, the sender can see when you visit, what you click, what you fill in, and any documents you upload. This information is stored by Sentway and shared with the sender. It is not shown publicly.

We handle it to deliver the page you asked for, to control who can see it, to record what you submit so the site owner receives it, and to keep the service secure and free from abuse. The lawful basis is the site owner's legitimate interest in operating their site and communicating with people who choose to engage with it, and our legitimate interest in running a secure service.

Activity records are kept for twenty-four months by default, and the site owner may choose a shorter period. Form submissions are kept until the site owner deletes them or closes their account. Sign-in link records are deleted within twenty-four hours of expiry. Access granted by a gate lasts thirty days before you are asked again.

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. You can also object to how it is being used. Deletion removes your activity records, submissions, and identifiers for that site. Contact privacy@sentway.app or the site owner named on the gate. We will verify the request comes from you before acting, usually by confirming control of the email address involved. If you are not satisfied with how we handle a request, you can complain to the Information Commissioner's Office at ico.org.uk.

Your email address and password, which is stored in a hashed form we cannot reverse. Any account or business name you enter. The sites, pages, and files you create. Records of your use of the product, including sign-ins, publishing activity, and actions taken through connected tools. If you subscribe to a paid plan, our payment provider handles your card details and we never see or store them.

To provide the service you have signed up for, which is our contractual basis. To keep the service secure and prevent abuse, which is our legitimate interest. To meet legal obligations such as keeping financial records.

When you use Sentway to collect information from visitors, you are the controller of that information and we are your processor. You are responsible for having a lawful reason to collect it, for telling visitors what you will do with it, and for responding to their requests. You must not use Sentway to impersonate another organisation, to collect passwords or payment details, or to collect information from children. We enforce some of these limits automatically and will suspend accounts that breach them.

For as long as your account is open. If you close your account we delete your sites, pages, and the visitor data they hold. We keep records we are legally required to keep, such as billing records, for as long as the law requires.

You can access, correct, export, or delete your data, and object to or restrict how we use it. Contact privacy@sentway.app. You can complain to the Information Commissioner's Office at ico.org.uk.

We use a small number of providers to run the service. Our database and file storage are hosted by Supabase in the United Kingdom or European Union. Our application is hosted by Vercel. Email is sent by Resend. Payments, when we take them, are handled by Stripe. Error monitoring and product analytics providers receive technical information about how the application itself is used, never the contents of hosted pages or visitor submissions. Each of these providers acts under contract and may only use the data to provide their service to us.

We do not sell personal data. We do not share it for advertising. We will disclose data if we are legally required to, or where it is necessary to investigate abuse or protect someone's safety.

Our database is located in the United Kingdom or European Union. Some providers listed above operate internationally, and where data is transferred outside the UK or EU it is protected by approved safeguards such as standard contractual clauses.

Access to hosted content is checked on every request and content is never sent to a browser before that check passes. Passwords and sign-in tokens are stored hashed, never in readable form. Access to production data is limited and logged. No system is perfectly secure, but we design so that a failure limits rather than compounds the damage.

Sentway is not intended for children. We do not knowingly collect data from anyone under sixteen. If you believe a child's data has been collected through a Sentway-hosted page, contact us and we will remove it.

We will update this page when the service changes. The date at the top shows when it was last updated. If a change materially affects how we handle your data, we will tell account holders directly.