1. Who we are
This Privacy Policy explains how Macpeniel Limited, company number 17327434, uses personal information in connection with BoriSend.
Macpeniel Limited is the controller of personal information covered by this policy unless we explain otherwise.
Macpeniel Limited
Company number 17327434
22 Polperro Way
Hucknall
England
United Kingdom
NG15 6JS
Email: borisend@macpeniel.com
2. Information we collect
We may collect the following information.
Account information
Your name, email address, encrypted account credentials, profile image, authentication provider and account preferences.
Content and contact information
Communication plans, messages, templates, schedules, recipient names, telephone numbers and other information you choose to enter.
Subscription and transaction information
Your plan, trial status, subscription status, Stripe customer and subscription identifiers, invoices, payment status, renewal dates, referral earnings and payout records.
Stripe processes full card details. BoriSend does not store full payment card numbers.
Referral information
Referral codes, attribution, referred account information, reward events, fraud flags, commission records and payout status.
Device and technical information
Device type, operating system, browser, app version, language, time zone, device token, permission status, IP address, error logs and security records.
Usage and support information
Pages and features used, message activity, settings, login events, subscription actions, notification activity, support messages, attachments and bug reports.
3. How we collect information
We collect information:
- •directly from you
- •from your use of BoriSend
- •when you provide account information during registration or account management
- •from Stripe when you subscribe or receive a payout
- •from devices, browsers and mobile operating systems
- •from a person who refers you, where applicable
If you provide another person's contact details, you are responsible for having a lawful reason to do so and for giving any required privacy information.
4. Why we use information
We use personal information to:
- •create and manage accounts
- •provide communication planning, scheduling and messaging features
- •generate or improve message suggestions
- •process subscriptions, invoices, referrals and payouts
- •send service notifications
- •provide support
- •maintain security and prevent fraud
- •measure and improve reliability and usability
- •comply with legal and regulatory duties
- •establish, exercise or defend legal claims
We do not sell personal information.
5. Our lawful bases
Depending on the activity, we rely on:
- •Contract, where processing is needed to provide BoriSend or manage a subscription
- •Legitimate interests, where we secure, improve and operate the Service, prevent fraud and support users, provided those interests do not override your rights
- •Legal obligation, where records must be kept or information must be disclosed by law
- •Consent, where the law requires consent, such as for certain notifications, optional analytics or marketing communications
You may withdraw consent at any time. This does not affect processing already carried out lawfully.
6. Message assistance and automated processing
BoriSend may process message content and instructions to prepare suggestions.
Suggestions are not automatically treated as correct. Users can review and edit them.
BoriSend does not make decisions that produce legal or similarly significant effects about users solely through automated processing.
Do not enter information into message assistance features that you do not have the right to use.
7. Payments and payouts
Stripe processes subscription payments and referral payouts.
We share information with Stripe where needed to create customers, subscriptions, checkout sessions, invoices, fraud checks and payouts.
Stripe may act as an independent controller or processor depending on the service.
We receive limited payment information such as status, amount, currency, invoice reference and Stripe identifiers.
We do not receive or store full card details.
8. Account registration
BoriSend currently uses email-and-password registration. Account information is provided directly by you when creating or managing your account.
9. Device permissions and notifications
BoriSend may request permission for notifications and, on Android, SMS functionality.
Permissions are requested through the device. You can change them in your device settings.
Device tokens may be stored to deliver notifications.
We deactivate tokens when a device is unregistered or an account is deleted.
BoriSend does not promise unattended SMS sending on iOS.
10. Cookies, storage and analytics
The website and web application may use cookies or similar local storage for:
- •login
- •security
- •preferences
- •essential operation
We may use limited analytics and diagnostic tools to understand performance and feature use.
Where consent is required, optional analytics will not be enabled until consent is given.
A separate cookie notice may be provided if non-essential cookies are introduced.
11. Who we share information with
We may share information with trusted providers that support:
- •hosting and database services
- •authentication
- •payments and payouts
- •message assistance
- •notifications
- •analytics, monitoring and error reporting
- •customer support
- •legal, accounting and professional advice
We may also disclose information:
- •where required by law
- •to protect rights and safety
- •in connection with a business reorganisation
- •to investigate fraud or misuse
Providers may only use information for authorised purposes and are expected to protect it appropriately.
12. International transfers
Some providers may process information outside the United Kingdom.
Where UK data protection law requires safeguards, we use an approved transfer mechanism, adequacy regulation, contractual protection or another lawful safeguard.
You may contact us for more information about relevant safeguards.
13. How long we keep information
We keep information only as long as needed for the purposes described in this policy.
Typical retention periods include:
- •account and service content while the account remains open
- •support records for up to 24 months after the matter is closed
- •security and technical logs for up to 12 months, unless required for an investigation
- •subscription, invoice, payout and tax records for up to 7 years where required for legal or accounting duties
- •referral and fraud records for as long as reasonably required to protect the programme and resolve disputes
When an account is deleted, messages, plans and other user content are deleted where appropriate.
Certain subscription, referral, fraud and audit records may be retained or anonymised.
We may keep information for longer where required by law, a dispute or an active investigation.
14. Security
We use measures designed to protect information, including:
- •encrypted connections
- •access controls
- •secure authentication
- •protected environment variables
- •logging and monitoring
- •software updates
No online service is completely secure.
You should use a strong password and protect your device.
Contact us promptly if you believe your account or information has been compromised.
15. Your rights
Under UK data protection law, you may have the right to:
- •receive information about how your data is used
- •access your personal information
- •correct inaccurate information
- •ask for deletion
- •restrict or object to processing
- •receive certain information in a portable format
- •withdraw consent
- •complain about how your information is handled
Some rights depend on the circumstances and may be limited by legal obligations or the rights of others.
Send requests to:
We may need to confirm your identity before completing a request.
You may also complain to the UK Information Commissioner's Office.
Information is available at:
16. Children
BoriSend is for users aged 13 and above.
We do not knowingly allow children under 13 to create accounts.
If we learn that an account has been created by a child under 13, we may close the account and delete the related information.
Users under 18 should involve a parent or guardian when purchasing a subscription or using BoriSend for business.
17. Marketing communications
We may send service messages needed to operate your account.
We will only send optional promotional emails where permitted by law.
You can unsubscribe using the link in the email or by contacting us.
You may still receive essential messages about:
- •security
- •billing
- •legal changes
- •account activity
18. Account deletion
You can request account deletion from within BoriSend.
We delete or anonymise information that is no longer required.
We may retain limited financial, fraud, referral and audit records for the periods described above.
Deleting your BoriSend account does not automatically delete information held independently by Stripe, an app store, or another service provider acting under its own legal obligations.
You may need to contact those providers separately.
19. Changes to this policy
We may update this Privacy Policy.
Where practical, we will give at least 14 days' notice of a significant change by email, a website notice, or both.
The current policy will always show its effective date.
20. Contact
Macpeniel Limited
Company number 17327434
22 Polperro Way
Hucknall
England
United Kingdom
NG15 6JS
Email: borisend@macpeniel.com
