Data Processing Addendum

Last updated September 2026. senderframework.com.

Roles

You are the controller of the data described below. senderframework.com is the processor and acts only on your documented instructions, which for this service means: providing the monitoring you subscribed to.

Subject matter and duration

Processing continues for the term of your subscription plus the retention periods in the Privacy Policy.

Nature of the data

Email authentication metadata for domains you control: DNS record contents, sending IP addresses, message volumes and authentication outcomes. Account contact details for the people you authorize.

The service does not process the content of your mail traffic or any special category data. The one exception is a test message you choose to send us: we keep its headers, which can include sender and recipient addresses and a subject line, for 10 days, and discard its body once checked.

Sub-processors

StripePayment processing
PostmarkTransactional email delivery
Hosting providerInfrastructure
Backup storageEncrypted backups (encrypted before upload)

We will give thirty days' notice by email before adding a sub-processor, and you may terminate if you object.

Security measures

Breach notification

We will notify you without undue delay and within seventy-two hours of becoming aware of a personal data breach affecting your data, with what we know at the time and updates as we learn more.

Deletion and return

On termination you may ask for a copy of your data until it is deleted, 90 days after the account closes, on the schedule in the Privacy Policy, or sooner on request.

Audit

We will respond to reasonable written questions about our processing once per year.

International transfers

Data is stored in the United States. If you need a transfer agreement for personal data leaving the EU, UK or another region, write to us before you sign up.

Contact

support@senderframework.com