Privacy policy

Last updated 10 August 2026

What we collect

• Account data — your email address, a hashed password, your organisation and group membership. Needed to give you an account at all.
• Device registrations — for each computer you enroll: the name you give it, a device identifier, its network address, operating system version, and basic health metrics (CPU, memory, disk) shown in your dashboard.
• Session records — who connected to which machine and when, kept as an activity log so an organisation can audit access to its computers.
• Server logs — ordinary technical logs including IP addresses, retained briefly for security and troubleshooting.

What we do not collect

We do not see or store the contents of a remote session. Screen images, keystrokes, clipboard contents and transferred files are encrypted end to end between the two machines and are never stored on our servers. When a direct connection isn't possible and traffic is relayed, the relay forwards encrypted packets it cannot read. We do not record sessions, and we do not sell data or use it for advertising.

Why we are allowed to process it

Account and device data is processed to perform our contract with you (Article 6(1)(b) GDPR). Security logging and fraud prevention rest on our legitimate interest in keeping the service safe (Article 6(1)(f)). Where we ask for consent, you can withdraw it at any time.

How long we keep it

Account and device records are kept for as long as your account exists, and deleted when you close it. Session activity logs are kept for up to 12 months. Technical server logs are kept for up to 30 days.

Who else is involved

Our infrastructure runs on DigitalOcean (servers, Amsterdam region) and software releases are distributed via GitHub. These providers process data on our behalf as processors; we do not share your data with anyone else, except where the law requires it. Data is stored in the European Union.

Your rights

Under the GDPR you may request access to your data, correction, erasure, restriction of processing, portability, and you may object to processing. Write to kontakt@senditnow.online and we will respond within one month. If you believe we have handled your data improperly you may lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

Cookies

We set one cookie: a session cookie that keeps you signed in. It is HttpOnly and same-origin, and it is required for the site to function. We use no advertising or analytics cookies.

Changes

If we change this policy we will update the date above and, for significant changes, tell account holders by email.