PRIVACY · 3 OCTOBER 2026

How SendVeil handles data

This notice explains our data practices and the controls available for GDPR / DSGVO requests.

SendVeil is operated by Michael König-Weichhardt. For privacy requests, contact privacy@sendveil.link.

What we process

We store a workspace member’s email address, role, session records, billing identifiers if a paid plan is used, transfer titles and filenames, brand settings, and the original files the sender chooses to upload. We also keep a small audit record of workspace actions. Recipient links do not require an account or a recipient email address.

Emailing a transfer is optional. When you use it, Cloudflare Email receives the recipient address and message for delivery. SendVeil does not save that address in workspace data.

Why we process it

Account and transfer data are needed to provide the service, enforce storage limits, deliver files, and respond to support requests. Security records help prevent misuse. Where applicable, the legal bases are performance of a contract and our legitimate interest in operating a secure service. The workspace owner controls the content uploaded for recipients and is responsible for any notices or legal basis needed for that content.

Where it goes

Original transfer files, workspace state and SendVeil's private admin mailbox are stored with Cloudflare (Workers, R2 and Durable Objects) configured with EU jurisdiction. Cloudflare also handles delivery, security and operational data such as IP addresses and request logs; this EU storage configuration does not mean every network log or Cloudflare metadata item stays in the EU. The providers that process personal data for SendVeil, and the safeguards for transfers outside the EU/EEA, are listed below.

Providers and transfer safeguards

• Cloudflare (Cloudflare, Inc., USA): hosting and delivery on Workers, R2 and Durable Objects with EU jurisdiction; Cloudflare Email Service for sign-in links, optional transfer emails and receiving messages to hello@sendveil.link and privacy@sendveil.link; Cloudflare Turnstile when a security check is needed. Safeguards: Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, and Cloudflare's data processing addendum includes Standard Contractual Clauses for transfers not covered by it.
• Stripe (Stripe Payments Europe, Limited, Ireland, and Stripe, Inc., USA): payment, billing, tax and invoicing when you buy a paid plan or add-on through Stripe Managed Payments. SendVeil stores Stripe customer and subscription identifiers, not card or bank data. Stripe processes payment data under its own privacy notice. Safeguards: Stripe, Inc. is certified under the EU-U.S. Data Privacy Framework, and Stripe's data processing agreement includes Standard Contractual Clauses.
• Google (Gmail; Google Ireland Limited and Google LLC, USA): a copy of each message sent to hello@sendveil.link or privacy@sendveil.link is forwarded to the operator's Gmail mailbox so that support and privacy requests can be answered. Safeguards: Google LLC is certified under the EU-U.S. Data Privacy Framework, and Google's terms include Standard Contractual Clauses.
• Mistral AI (Mistral AI SAS, France): only when the operator requests an AI reply draft in SendVeil's private admin mailbox, the sender's address, the subject and up to 12,000 characters of that incoming message are sent to Mistral's EU API. The operator reviews every draft before sending. Transfer files are never sent to Mistral.

No analytics or advertising service receives personal data from SendVeil. Providers may retain their own operational and legally required records under their policies.

How long it stays

Standard transfers expire after 7 to 365 days, depending on the plan and the period chosen. Infinity removes the fixed transfer expiry while its paid add-on is active. If Infinity ends, affected transfers expire after 30 days. Their files always count toward the workspace storage limit. A workspace without an active paid subscription is deleted after 180 days without account activity; a successful sign-in resets that period. An active paid subscription keeps its workspace. Account deletion removes workspace data and file objects. Audit records are deleted after 365 days or when the workspace is deleted, whichever comes first. Providers may retain their own operational and legally required records under their policies.

Cookies and security

SendVeil uses only functional cookies: sv_session and sv_csrf for sign-in (up to 30 days), sv_unlock for one hour after a password-protected transfer is unlocked, and sv_locale for the browser session after you choose a language. We do not use analytics or advertising trackers. To resume uploads, your browser stores the transfer link and file details locally after you start an upload; completed records are removed. You can clear unfinished records in your browser settings.

After you click Download, the essential sv_download cookie authorizes only that file on that host for up to six hours, or until the transfer expires. It is used for secure downloads and resumed requests, not tracking.

For large downloads, your browser may install a service worker after you click Download. It displays progress without storing the file. The registration may remain until you clear site data in your browser.

Conditional security checks

After repeated sign-in attempts, recipient-link access, password failures, anonymous file submissions or download requests, SendVeil may load Cloudflare Turnstile to prevent automated abuse. When loaded, Cloudflare receives technical signals such as your IP address, browser and connection information, and the security widget's origin. Ordinary views do not load the widget.

SendVeil verifies the result on its server. Its challenge tickets and one-use proofs expire within two minutes. Used proof records are deleted; expired unused records are cleared during later security checks. Cloudflare also processes technical signals to improve bot detection under its own privacy notice. Turnstile processing is not limited to SendVeil's EU file-storage configuration.

Cloudflare Turnstile Privacy Addendum

Your choices and rights

Workspace owners can export account metadata or delete their account in the workspace settings. You can ask us about access, correction, deletion, restriction, or portability at privacy@sendveil.link. You can also complain to your local data protection authority; in Austria this is the Datenschutzbehörde.

An email address is required to create an account, sign in, or accept a team invitation. Without it, we cannot provide those account features. Recipients can use a shared link without creating an account or giving us an email address. We do not use automated decision-making or profiling that produces legal or similarly significant effects. Where we rely on legitimate interests, you may object for reasons relating to your particular situation.