Privacy Policy

Status: Draft 2026-09-16 for the placeholder site the API applications need. Draft, not yet lawyer-reviewed. Controller: Maven Advertising SRL, Iași, Romania. Updated 2026-09-25: what happens to access tokens when you disconnect a channel (§§ 6 and 8). Updated 2026-09-27: TikTok and Pinterest named among the networks (§§ 3 and 5). Updated 2026-10-12: how long database backups keep deleted data (§ 6). Updated 2026-10-13: an encrypted copy of the backups on our own equipment in Romania (§ 5). Updated 2026-10-31: the cookies the app sets (§ 3).

1. Who we are

SendMix is operated by Maven Advertising SRL ("we"). Contact: [email protected].

2. What SendMix does

SendMix lets a business connect social media accounts and pages it owns, write posts, schedule them, and have SendMix publish them at the scheduled time.

3. Data we process

• Account data: your email address, the workspaces you create, and sign-in tokens (stored hashed).
• Connected channels: the identifier and display name of each page or account you connect, and the access tokens the network issues, stored encrypted. We use them only to publish the posts you schedule, to read the choices a network needs before it accepts a post (such as your Pinterest boards, or the privacy options TikTok offers your account), and to read back the result of publishing.
• Content: the text and images of the posts you compose, until you delete them.
• Technical data: server logs without IP addresses or email addresses; where a request's origin must be recorded it is stored as a daily-keyed hash, never the raw address.
• Cookies: the app sets three cookies at most: one keeps you signed in, one protects your forms against cross-site requests, and, if you choose a theme, one remembers that choice. None is used for analytics or advertising.

4. Why and on what basis

To provide the service you signed up for (contract); to keep the service secure and to meet legal obligations (legal obligation, legitimate interest). We do not use your content or your audiences' data for advertising, profiling or training models.

5. Where data lives

On servers in the European Union (Hetzner, Germany), with an encrypted copy of the database backups on equipment we operate in Romania. Publishing a post sends its content to the network you chose (LinkedIn, X, Meta, TikTok, Pinterest); those companies are independent controllers of what happens on their platforms and, for the technical transfer, our sub-processors under standard contractual clauses. The list is published at sendmix.app/legal/subprocessors.

6. Retention

Account data for the life of the account and 30 days after deletion. Published posts and their results for as long as you keep them. Tokens for a channel are deleted the moment you disconnect it. When you disconnect the last channel that uses a network login, that login's tokens are deleted too, and we ask the network to revoke our access, unless the same login is still connected to a SendMix workspace, yours or another customer's. Backups of the database are encrypted and kept for 30 days, so anything deleted as this policy describes, tokens and platform data included, is gone from them within 30 days of its deletion. Account data, deleted 30 days after the account, is gone from them within a further 30 days.

7. Your rights

Access, rectification, erasure, restriction, portability and objection, by email to [email protected]. You can complain to the Romanian supervisory authority (ANSPDCP) or your local one.

8. Platform data

Where a network's terms require it: we use platform data only to provide the scheduling service to the account that connected it, we do not sell it, and we delete it when you disconnect the channel it came from (a network login that other channels still use is kept until the last of them is disconnected), or on request. To request deletion of data obtained from a connected platform, email [email protected] with the network and account name.

9. Changes

We will post changes here with the date. This draft: 2026-09-16.