Cookie Policy

1. What Are Cookies?

Cookies are small text files stored in your browser or device when you visit a website. They allow the site to remember your actions and preferences over a period of time, so you don't have to re-enter them when you return or navigate between pages.

Similar technologies — such as web beacons, pixels, local storage, and session storage — work in analogous ways. This policy covers all such technologies collectively referred to as "cookies."

Cookies served by the entity operating the domain you visit (in this case, Sendbound on sendbound.com) are called first-party cookies. Cookies served by other companies whose code appears on our site (such as analytics or advertising providers) are third-party cookies.

2. Why We Use Cookies

We use cookies to:

• Keep you logged in securely and remember your session state
• Remember your preferences, settings, and choices across visits
• Understand how visitors navigate our website so we can improve it
• Measure the effectiveness of marketing campaigns and content
• Detect and prevent fraud, abuse, and security threats
• Personalise your experience with relevant content and features
• Provide embedded third-party functionality (e.g., support chat, video)

We do not use cookies to build profiles for advertising purposes, and we do not sell cookie-based data to third parties.

3. Types of Cookies

Strictly Necessary Cookies

These cookies are essential for the website and platform to function. They enable core features like authentication, security, session management, and load balancing. You cannot opt out of these cookies while using our Services — they are required for the site to work.

Functional / Preference Cookies

These remember your choices and preferences to provide a more personalised experience. Examples include your preferred language, dashboard layout, and notification settings. Without these cookies, some features may not work correctly.

Analytics Cookies

These help us understand how visitors interact with our website — which pages are most visited, where users drop off, and how features are used. This data helps us improve the product. Analytics cookies require your consent where applicable law mandates it.

Marketing / Targeting Cookies

These track your activity across websites to deliver relevant advertising and measure the effectiveness of campaigns. We only deploy marketing cookies with your explicit consent. Declining these cookies will not affect your ability to use Sendbound.

4. Cookies We Set

The following first-party cookies are set by Sendbound:

• sb_session — Strictly necessary. Maintains your authenticated session. Expires on browser close (session cookie).
• sb_csrf — Strictly necessary. CSRF protection token for form submissions. Expires on browser close.
• sb_prefs — Functional. Stores your dashboard preferences (theme, layout, notification settings). Expires in 1 year.
• sb_anon_id — Analytics. Anonymous visitor ID for product analytics (PostHog). Expires in 1 year. Requires consent in EEA/UK.
• sb_ref — Marketing. Records the referral source of your first visit for attribution. Expires in 30 days. Requires consent.
• sb_ab — Functional. Records which variant of A/B tested features you are assigned to ensure consistency. Expires in 30 days.

5. Third-Party Cookies

The following third-party services may set cookies when you use our website:

• PostHog (analytics) — Tracks page views, feature usage, and session recordings. Privacy policy: posthog.com/privacy. Opt out: posthog.com/privacy
• Intercom (support chat) — Sets cookies to identify returning users in the support widget. Privacy policy: intercom.com/legal/privacy. Loaded only when you open the chat.
• Stripe (payments) — Sets fraud-prevention cookies during checkout flows. Privacy policy: stripe.com/privacy.
• Google Analytics (analytics, optional) — Aggregated traffic analytics. Requires consent where applicable. Can be declined in our cookie banner.
• LinkedIn Insight Tag (marketing, optional) — Conversion tracking for LinkedIn ads. Requires consent. Loaded only if you accept marketing cookies.

We are not responsible for third-party cookie practices. Please review their privacy policies for full details.

6. Consent and the Cookie Banner

When you first visit sendbound.com from the EEA, UK, Switzerland, or another jurisdiction requiring cookie consent, you will see a cookie consent banner. You may:

• Accept all — Enable strictly necessary, functional, analytics, and marketing cookies
• Reject non-essential — Only strictly necessary cookies will be set
• Manage preferences — Enable or disable each category individually

Your choices are stored in a consent cookie (sb_consent) for 12 months. You can change your preferences at any time by clicking "Cookie settings" in the website footer.

Visitors from jurisdictions without mandatory consent requirements (e.g., the United States outside of California) may still decline non-essential cookies using the controls described in Section 7.

7. Managing and Controlling Cookies

7.1 Cookie Banner

Click "Cookie settings" in the footer of any page on sendbound.com to review or change your consent choices at any time.

7.2 Browser Settings

Most browsers allow you to control cookies through settings. You can typically:

• Block all cookies (note: this will break many site functions including login)
• Block third-party cookies only
• Delete cookies already stored on your device
• Set your browser to alert you when a cookie is placed

Browser-specific instructions: Chrome · Firefox · Safari · Edge

7.3 Opt-Out Tools

You can opt out of interest-based advertising from participating companies through:

• NAI Opt-Out Tool — Network Advertising Initiative
• DAA Opt-Out Tool — Digital Advertising Alliance
• Your Online Choices — European Interactive Digital Advertising Alliance

7.4 Mobile Devices

On mobile, you can reset your advertising identifier or opt out of personalised advertising through your device's privacy settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Privacy → Ads).

8. Do Not Track

Our website does not currently respond to browser "Do Not Track" (DNT) signals, as there is no industry-standard interpretation of what sites should do when they receive these signals.

We do honour the Global Privacy Control (GPC) signal as a valid opt-out of sale and sharing of personal data under the CCPA. If your browser sends a GPC signal, we will treat it as a request to opt out of non-essential tracking.

9. Cookie Retention Periods

Cookies we set have the following maximum retention periods:

• Session cookies — Deleted when you close your browser
• Functional preference cookies — Up to 12 months
• Analytics cookies — Up to 12 months (PostHog); up to 13 months (Google Analytics)
• Marketing/attribution cookies — Up to 90 days
• Consent record cookie — 12 months, then you will be asked again

You can delete cookies at any time via your browser settings. Deleting cookies does not affect Sendbound's server-side logs, which are retained as described in our Privacy Policy.

10. Changes to This Policy

We may update this Cookie Policy to reflect changes in the cookies we use or for other operational, legal, or regulatory reasons. We will notify you of material changes by updating the "Last updated" date above and, for significant changes, by placing a notice on our website or emailing registered account holders.

We encourage you to review this policy periodically. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.

11. Contact

If you have questions about our use of cookies or wish to exercise your rights:

• Email: privacy@sendbound.com
• Cookie settings: Click "Cookie settings" in the footer of any page
• Mail: Sendbound, Inc., Attn: Privacy Team, 123 Market Street, San Francisco, CA 94105