PRIVACY · 25 SEPTEMBER 2026

How SendVeil handles data

This notice explains our data practices and the controls available for GDPR / DSGVO requests.

SendVeil is operated by Michael König-Weichhardt. For privacy requests, contact privacy@sendveil.link.

What we process

We store a workspace member’s email address, role, session records, billing identifiers if a paid plan is used, transfer titles and filenames, brand settings, and the original files the sender chooses to upload. We also keep a small audit record of workspace actions. Recipient links do not require an account or a recipient email address.

Emailing a transfer is optional. When you use it, Cloudflare Email receives the recipient address and message for delivery. SendVeil does not save that address in workspace data.

Why we process it

Account and transfer data are needed to provide the service, enforce storage limits, deliver files, and respond to support requests. Security records help prevent misuse. Where applicable, the legal bases are performance of a contract and our legitimate interest in operating a secure service. The workspace owner controls the content uploaded for recipients and is responsible for any notices or legal basis needed for that content.

Where it goes

Original transfer files and workspace state use Cloudflare storage and Durable Objects configured with EU jurisdiction. Cloudflare also handles delivery, security, and operational data; this EU storage configuration does not mean every network log or Cloudflare metadata item stays in the EU. Magic-link emails are sent through Cloudflare Email Service. Messages to hello@sendveil.link and privacy@sendveil.link are stored in SendVeil's private admin mailbox on Cloudflare EU-jurisdiction R2 and Durable Objects, and a copy is forwarded to the operator's Google mailbox. When the operator requests an AI reply draft, Mistral's EU API receives the sender, subject, and message text; a person reviews the draft before sending. When paid checkout becomes available, Stripe will handle payment and billing data.

How long it stays

Standard transfers expire after 7 to 365 days, depending on the plan and the period chosen. Infinity removes the fixed transfer expiry while its paid add-on is active. If Infinity ends, affected transfers expire after 30 days. Their files always count toward the workspace storage limit. A free or otherwise unpaid workspace is deleted after 180 days without account activity; a successful sign-in resets that period. An active paid subscription keeps its workspace. Account deletion removes workspace data and file objects. Audit records are deleted after 365 days or when the workspace is deleted, whichever comes first. Providers may retain their own operational and legally required records under their policies.

Cookies and security

SendVeil uses only functional cookies: sv_session and sv_csrf for sign-in (up to 30 days), sv_unlock for one hour after a password-protected transfer is unlocked, and sv_locale for the browser session after you choose a language. We do not use analytics or advertising trackers. To resume uploads, your browser stores the transfer link and file details locally after you start an upload; completed records are removed. You can clear unfinished records in your browser settings.

For large downloads, your browser may install a service worker after you click Download. It displays progress without storing the file. The registration may remain until you clear site data in your browser.

Your choices and rights

Workspace owners can export account metadata or delete their account in the workspace settings. You can ask us about access, correction, deletion, restriction, or portability at privacy@sendveil.link. You can also complain to your local data protection authority; in Austria this is the Datenschutzbehörde.

An email address is required to create an account, sign in, or accept a team invitation. Without it, we cannot provide those account features. Recipients can use a shared link without creating an account or giving us an email address. We do not use automated decision-making or profiling that produces legal or similarly significant effects. Where we rely on legitimate interests, you may object for reasons relating to your particular situation.