Privacy
Updated 26 October 2026. Sendtide is operated by Samet Ateşen, trading as Atesen Software, Sakarya, Türkiye. Contact support@atesensoftware.com for access, correction or deletion requests.
What we use
We read your Xero account identity, organisation information, sales invoice identifiers, contact names and email addresses, status, dates, totals, currency and sent flags to load, check, approve and send invoices you select. Contacts are read in batches if email is missing from invoice payloads. OAuth asks for offline_access, openid, profile, email, accounting.invoices, accounting.settings.read and accounting.contacts.read. We do not request payments permission.
Storage and deletion
OAuth tokens and invoice snapshots, plans, recipients and Xero error text are encrypted with AES-GCM. Session snapshots and unused checks expire after 24 hours; Refresh invalidates the snapshot. Finished job details and CSV data expire after 30 days. Identifier-only job rows, audit records and email reservations expire after 365 days. Billing events are retained for 400 days; purchase deduplication records remain. Unresolved free reservations remain as an aggregate allowance deduction after row cleanup.
Disconnect revokes active job ownership, deletes local tokens, snapshots and encrypted plans, and attempts Xero connection revocation. The last disconnect removes local user identity. Free usage and billing records remain to prevent allowance resets and duplicate purchases. Users with no organisation are removed after 30 days. Sign out ends the session and clears its snapshots.
Providers
Cloudflare hosts the Worker and D1 data. Xero supplies invoice data and sends invoice emails. Paddle is merchant of record and handles card details; we store payment identifiers and entitlement periods, not card data. Optional Resend sends one purchase thank-you message; the address is read from Paddle for that send and is not stored by Sendtide. These providers may process data internationally under their own terms.
Cookies and attribution
cl_session lasts 14 days; cl_oauth lasts 10 minutes. cl_src records referrer host, landing path and UTM values for 30 days; Do Not Track or Global Privacy Control disables this attribution. No advertising or analytics scripts, third-party cookies, sale of data or AI/ML training on Xero data.
Only connect data you are authorised to manage. Avoid sending invoice details, customer email addresses or tokens to support.


