GDPR

Last updated: 2 September 2026

The roles

For your account data, DroidSender is the controller. For your contacts' data (the lists you upload and the messages you send), you are the controller and DroidSender acts as processor under Article 28 of the GDPR: we process that data only on your instructions.

Our obligations as processor

• Process the data only to carry out the sends you order.
• Confidentiality for everyone who can access the data.
• Appropriate technical and organisational measures: encryption in transit and at rest, least-privilege access, activity logs.
• Assistance when a data subject exercises rights with you, and deletion of the data at the end of the service.
• Notification without undue delay in case of a data breach.

Your obligations

The lawful basis for sending is yours: make sure you have consent (or another valid basis) from the contacts you message, and honour opt-out requests. DroidSender gives you the tools; the lawfulness of each campaign is your responsibility.

Sub-processors

We use hosting and payment providers established in the European Union or with adequate transfer safeguards. The current list is available on request by email.

Contact

To exercise rights or request a data processing agreement (DPA): hello@droidsender.com.