Privacy Policy

We collect only what we need to run and improve the service:

• Account details: your name, email address, phone number, password (stored as a secure hash), company name and workspace settings.
• Business details for sender registration: when you ask us to register a sender ID or WhatsApp number, the documents required by networks and regulators, such as business registration and tax details.
• Workspace content: contact lists, subscriber details, templates, campaigns, media and message content that you create or upload.
• Delivery and usage data: message status (queued, sent, delivered, read, failed), API requests and logs, and how you use the console.
• Billing details: plan, wallet balance, top-ups, invoices and the mobile money or card reference returned by our payment partners. We do not store full card numbers or mobile money PINs.
• Device and technical data: IP address, browser type, device information and cookies needed to keep you signed in and the service secure.
• Communications: messages you send to our support team and your feedback.

• To provide the service: create your account, send your messages on the channels you choose and show you delivery reports.
• To register senders on your behalf with mobile networks, regulators and Meta when you ask us to.
• To bill you, process top-ups and issue tax invoices.
• To keep the service safe: detect spam, fraud and abuse, and protect the reputation of shared senders.
• To support you and tell you about important changes, such as security notices, low balance warnings and changes to these terms.
• To improve Sendly using aggregated usage information.
• To send product news, only where you have agreed. You can opt out at any time.

We rely on the legal grounds recognised by data protection law: performing our contract with you, your consent where it is required, our legitimate interests in running a secure and reliable service, and compliance with our legal obligations.

When you import contacts or send messages through Sendly, you decide who to contact and what to say. You are responsible for having a lawful basis to message your contacts, for honouring opt-outs, and for following the rules of each channel, including Meta’s WhatsApp policies and the rules of mobile networks and regulators.

We process your contacts’ data only to deliver your messages, provide reports and keep the service secure. We never sell it, and we never use it to message your contacts for our own purposes.

We do not sell personal information. We share it only with parties who help us run the service, and only as much as they need:

• Messaging partners that carry your messages: email delivery providers, Meta for WhatsApp, and mobile networks and SMS aggregators.
• Payment partners that process top-ups and subscriptions, such as mobile money aggregators and card processors.
• Cloud hosting, storage and monitoring providers that run our infrastructure.
• AI providers that power Lora, our writing assistant, when you choose to use it.
• Authorities, networks or regulators when the law requires it, or when needed to register a sender you requested.
• A buyer or successor if Elevana is involved in a merger or acquisition, under the same protections described here.

Some of our partners process data outside Tanzania. When this happens, we use partners with appropriate safeguards and share only what is needed to provide the service.

We keep account and workspace data for as long as your account is active. Message logs and delivery records are kept for as long as they are useful to you and to investigate problems. Billing records are kept for the period required by tax law.

When you close your workspace, we delete or anonymise your data within a reasonable period, except where we must keep it to meet legal obligations, resolve disputes or prevent abuse.

We use encryption in transit, hashed passwords, access controls, optional two-factor authentication and monitoring to protect your data. No system is perfectly secure, so we also ask you to keep your password and API keys safe and tell us straight away if you think your account has been compromised.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct information that is wrong or incomplete.
• Ask us to delete your information, subject to our legal obligations.
• Object to or restrict some processing, including direct marketing.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time, where we rely on consent.
• Complain to the data protection authority, the Personal Data Protection Commission in Tanzania.

To use any of these rights, email us. If you are one of our customers’ contacts, please contact that business first, as they control your data; we will help them respond.

We use essential cookies to keep you signed in and to protect the service. We may use a small number of analytics cookies to understand how the website is used. You can control cookies in your browser settings; blocking essential cookies may stop the console from working.

Sendly is a service for businesses and is not intended for children. We do not knowingly collect personal information from children.

We may update this policy as Sendly grows. When we make important changes, we will tell you by email or in the console before they take effect. The date at the top shows when it was last updated.

Questions or requests about privacy? Email support@elevana.co.tz and we will reply as soon as we can. Elevana Tanzania (Business Intervention), Tanzania.