Sendcloud Platform Privacy Policy

This privacy policy ("Platform Privacy Policy") gives you an overview of the processing of your personal data in the context of the online services provided to you as Sendcloud's customer via the Sendcloud platform (the "Platform"). This Platform Privacy Policy also informs you about your rights under the EU Data Protection Regulation ("GDPR") and the means to control your personal data and protect your privacy. Personal data is defined as all information that makes it possible to identify you as a person.

Sendcloud B.V., having its registered address at Stadhuisplein 10, 5611 EM Eindhoven, the Netherlands (hereinafter "Sendcloud" or "we"), is the data controller for the processing of your personal data within the framework of the Platform except where this Platform Privacy Policy specifies that Sendcloud acts as a processor. If you have any questions regarding this Platform Privacy Policy, please reach out to us at privacy@sendcloud.com. If you use our optional MCP Connector (AI Assistant Integration) feature, click here to go directly to the section on how this feature affects your data.

Which personal data we process on our Platform, and from which sources they originate

When we make our Platform available to you, we process personal data from various sources. On the one hand, this is data that we automatically process for each Sendcloud customer when the Platform is accessed. However, this may also include data which you have voluntarily provided to us via the Platform when you use our services.

Data that we automatically collect when you visit the Platform:

As soon as you visit the Platform, you send technical information to our web servers, which we store in server log files. We collect the following access and web access data (which we call "Usage Data"):

We process the Usage Data to enable you to use Platform and to ensure the functionality of the Platform. In addition, we process Usage Data in order to analyze the performance of the Platform, to continuously improve the Platform and to correct errors or to personalize the content on the Platform for you. Moreover, we process the Usage Data to ensure IT security, the operation of our systems and to prevent or detect misuse, in particular, fraud. Our legal basis for this data processing activity is our legitimate interests, as per Art. 6.1.(f) GDPR.

Please note that we use cookies for the automatic processing of Usage Data. Cookies are small text files that you upload to your device when you visit our web pages and store the above information about you. You can find out more about the use of cookies on the Platform in our Platform Cookie Policy.

Data that you transmit to us yourself:

In addition to the data we receive automatically when you visit the Platform, we also process the following user data when you've provided to us upon creation of a Sendcloud account via the Platform (the "User Data"):

We process this User Data in order to create your Sendcloud account and allow you to access and use the Platform.

We process this User Data for the following period(s): as long as our contractual relationship with the User exists and after termination only to the extent and for as long as legally required.

The legal basis for this processing is the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract, as per Art. 6(1)(b) GDPR.

The purposes for which we process your data

We have already informed you above for which purposes we process your data in individual cases. In addition, we may process your data for other purposes. This includes, for example, passing on your personal data to third parties if we are legally obliged to do so, but also the assertion of legal claims on our part or the defence against legal disputes. The legal basis in these cases is either our legal obligations (Art. 6.1(c) GDPR) or our legitimate interests (Art. 6.1(f) GDPR).

To whom we forward your data

Your personal data will only be passed on to third parties if this is necessary for the provision of the Platform or the Sendcloud integration. The data recipients also include the third-party providers mentioned in our Platform Cookie Policy.

Data processing outside the EU/EEA

We do not transmit your personal data to any third parties located outside of the EU/EEA without implementing appropriate safeguards.

For some specific services, Sendcloud may use data processors or business partners located outside of the EU/EEA. Some of your personal data may therefore be transferred to them for the strict purposes of their services. In such cases and in accordance with the regulations in force, Sendcloud requires its data processors to provide the necessary safeguards to ensure regulated, secure transfers, mainly by requiring them to sign the European Commission's standard contractual clauses. Where required, an applicable Transfer Impact Assessment will be conducted to ensure the security of the data transferred. In all cases, we will ensure that an adequate level of data protection is guaranteed at all times.

Storage duration

We process and store your personal data to the extent necessary to fulfil our contractual or legal obligations. Therefore, we store the data as long as our contractual relationship with you exists and after termination only to the extent and as long as legally required. If data is no longer required to fulfil legal obligations (e.g. under tax or commercial law), it is deleted regularly unless further processing is necessary to preserve evidence or defend against legal claims against us. For the preservation of evidence necessary is e.g. your IP address and the exact time of the granting, if you have given us a consent.

Your legal rights under the GDPR

You can assert the following rights against us within the framework of the GDPR with regard to your personal data:

If you would like to exercise your rights as a data subject, you can reach out to us at privacy@sendcloud.com.

Amendments

This Platform Privacy Policy is effective as per 15th July 2026. Sendcloud reserves the right to modify or update this Platform Privacy Policy, either in part or entirely, for example, due to changes in the processing of any underlying data. Changes will be effective as soon as they are posted.

MCP Connector (AI Assistant Integration)

What this feature is

Sendcloud offers an optional connector, built on the open Model Context Protocol (MCP) standard, that allows you to link your Sendcloud account to a third-party AI assistant or tool of your choosing for example, Anthropic's Claude or OpenAI's ChatGPT, among other MCP-compatible tools (the "Connector"). Once connected, the AI assistant can retrieve shipment, order, and tracking information from your Sendcloud account, and - where the connected assistant is authorised to do so - make changes to that data in response to your questions. The Connector is disabled by default and is only activated if you choose to enable it.

Categories of personal data involved

When enabled, the Connector may return personal data relating to your shipments and orders (such as first name, last name, address, email address and any other personal data that may be required for shipping services), limited to what is already accessible via the Sendcloud API. No additional data, beyond what is available through the standard Sendcloud API, is made accessible through this Connector.

Purpose of processing

This data is processed solely to respond to queries you or your authorised users make to your connected AI assistant regarding your own shipments and orders.

Sendcloud's role

Where this data relates to your own end-customers, Sendcloud processes it as a processor, acting on your instructions, under the Data Processing Agreement already in place between you and Sendcloud. You remain the controller of your end-customers' personal data and are responsible for ensuring you have a lawful basis to enable this feature, and for informing your own end-customers where required under applicable law.

Categories of recipients

Data retrieved through this Connector is shared with the third-party AI assistant or tool you choose to connect. Sendcloud does not select this tool on your behalf. Once received by that AI provider, the data is handled under the terms of your own agreement with that provider - Sendcloud has no visibility into, or control over, how that provider subsequently retains, uses, or discloses the data.

Data retention

Sendcloud retains connection and request logs related to this Connector as per general Storage duration periods. Sendcloud does not retain the substantive content of AI assistant queries or responses beyond what is necessary to fulfil the request. Retention of data by the connected AI provider is governed by that provider's own policies, not by Sendcloud.

Your controls

You may connect or disconnect the Connector at any time via your Platform account settings. Disconnecting immediately stops any further data from being shared through the Connector.