This Privacy Policy explains what data the SendCommander app for Windows handles. The short version: your contacts, your messages, your attachments and your sending history live only on your own PC and are never uploaded. Messages are sent through your own WhatsApp account, not through our servers. The only things that ever reach a server of Bosau Digital LLC ("we", "us") are license checks, the account actions you use on the Account page, a daily usage ping and short WhatsApp layout reports, both of which you can switch off, and the reports, support messages or feedback notes you choose to send. The app shows no advertising and builds no profile of you. This policy covers the app; for the pythonandvba.com website itself, please see the website Privacy Policy.

1. Who We Are

SendCommander is made by Bosau Digital LLC, the company behind pythonandvba.com. For any privacy-related question, contact contact@pythonandvba.com.

2. Data That Stays on Your PC

Everything SendCommander works with is stored locally on your computer, in the folder SendCommander inside your Windows user folder:

• Your contacts, their phone numbers, lists and any details you add
• Your messages, message templates, drafts and the files you attach
• Your sending history and any notes you attach to it
• Local pacing counts and unfinished campaign recovery data, including the message, recipient details and attachment paths
• Your block list (numbers that must never receive a message), including people the app blocked because they replied STOP
• Replies people send to your messages: who replied, when, to which campaign, and the text of text replies (the text is cleared after 90 days); you can switch reply collection off in Settings
• Whether and when each message you sent was delivered and read
• Contacts, group members and labels you import from WhatsApp
• The results of number checks (whether a number has a WhatsApp account, and when it was checked), and numbers the app blocked because they are not on WhatsApp
• Your settings, including your license key, saved test number and remembered confirmation preferences
• A local error log and automatic local backup copies of the database
• Your WhatsApp Web login session, kept by the embedded browser so you do not have to scan the QR code on every start

None of this is uploaded, synced or sent to us. The people you message never interact with our servers in any way. Backup files you export from the Settings page are ordinary files on your PC, stored wherever you choose to save them (they include your data and your license key, so treat them like the original).

Uninstalling keeps your data. Removing the app from Windows leaves the SendCommander folder in place, so reinstalling later brings everything back. To erase all data, use Delete local app data on the app's Settings page, or simply delete that folder.

3. How Your Messages Are Sent

SendCommander hosts WhatsApp Web in an embedded browser window and operates it on your behalf, using your own WhatsApp account (you link it once by scanning the WhatsApp Web QR code with your phone). Your messages and attachments travel from your PC through WhatsApp exactly as if you had typed them into WhatsApp Web yourself; they never pass through our servers. WhatsApp is a product of Meta Platforms with its own privacy policy and terms of service, which apply to everything you send with it. SendCommander is an independent product and is not affiliated with, endorsed by or sponsored by WhatsApp or Meta.

To confirm that a message went out, show whether it was delivered and read, collect replies to your messages and import contacts, groups or labels when you ask for it, SendCommander reads this information from WhatsApp Web inside the embedded window, on your PC. For this it bundles the open-source WA-JS library (by the WPPConnect project); its own analytics and link-preview servers are switched off, so it contacts no servers other than WhatsApp's own. When you check numbers before sending, WhatsApp is asked whether each number has an account, just as when you start a new chat in WhatsApp Web. What the app reads this way is stored only in the local data described above.

4. Data That Leaves Your PC

License checks

When you enter your license key, and periodically while you use the app (before real messages are sent), SendCommander verifies the key against our license server at api.pythonandvba.com. This sends your license key, the name of your PC (to enforce the per-device limit of your license) and the app version. It never includes contacts, phone numbers or message text.

Like any web server, our license server also receives your IP address with each check. It appears, with the approximate country derived from it, in our server logs, which are deleted after 14 days (90 days for warnings and errors). The device names (your computer names) registered to your license are kept with your license record (when each was first seen and last used) for as long as the license exists. If a check fails, we keep the license key, IP address, approximate country, device name and app version for up to 90 days to detect misuse of keys.

Account actions you trigger

When you open the app's Account page with an active license, the app loads your plan automatically: your license key is used to look up your subscription with our billing provider (Pabbly), and the result is shown to you. The same happens when you click Refresh or Load my plan, and when you cancel your subscription there. Stop using the license on this computer sends your license key and the name of your PC to our license server to free that computer's slot. Manage your computers and Invoices & payment details open our account portal in your browser; the link carries your license key so the portal knows which license you mean, and the website Privacy Policy applies there. The app has no other account requests.

Daily usage ping

Once per day, the app tells our server "one install was active today". This ping carries a random install id generated on your PC (not derived from your name, hardware or Windows account), the app version, whether the app came from the Microsoft Store or the direct download, whether the install runs the free or the Pro plan, your license key when you have entered one, a yes/no flag saying whether the last send ran into the kind of technical failure that usually means WhatsApp changed its website (so we can fix the app before the first support email), and two totals for the life of the install: how many messages it has sent and how many campaigns it has run. Each total is a single number. The ping never includes contacts, phone numbers, message text, file contents, or anything those numbers could be traced back to. It exists so we know how many installs are active and whether the app's features are actually used. Like every request, the ping arrives with your IP address, which appears in our server logs as described under License checks; the ping record itself keeps only the approximate country derived from it, not the IP address.

You can switch this off. Untick Share anonymous usage statistics under Settings > Advanced, and the ping is not sent at all; nothing about the install reaches us from then on. Without a license key there is nothing in the ping that points at you. With one, the ping is linked to your license when it arrives, so it is not anonymous; our server keeps only whether the install is licensed, never the key itself.

WhatsApp layout reports

WhatsApp changes its website from time to time, and a button the app needs can move. When the app cannot find one of WhatsApp's own buttons or fields, finds it only in a new place, or its built-in backup way of sending (the WA-JS library) fails to start or has to step in, it sends our server a short report so we can fix the app quickly. This also happens when you run the WhatsApp check yourself, and during a quiet check the app runs once a day while it is idle. A report carries the random install id also used by the daily usage ping, the app version, the WhatsApp Web version, which part of WhatsApp's page was affected (for example "attach button"), whether it was missing or found in a new place, the technical locator that worked, a short technical note, and a cleaned outline of the page's structure: element types and technical ids, the labels of WhatsApp's own buttons and fields (with digits masked and names cut off), its icon names, and how many chat rows and message bubbles are on screen. Reports never contain message text, chat or contact names, phone numbers, your license key or anything else about you or the people you message. The same problem is reported at most once per app session (once from a send and once from a check), with no more than 20 reports per session.

These reports use the same switch as the daily ping: untick Share anonymous usage statistics under Settings > Advanced and none are sent. Like every request, a report arrives with your IP address, which appears in our server logs as described under License checks; the stored report itself keeps no IP address and is deleted after 30 days. When several installs report the same problem, we receive an alert by email and WhatsApp with the counts, versions, suggested locators and one sample page outline, never an install id. To stop floods, it limits how often one connection can send them, using a one-way digest of the IP address rather than the address itself.

Reports and support messages you send

The support form on the Account page, and the one-click WhatsApp check report on the WhatsApp page, send a message only when you press the button. They include what you typed (topic, name, email address, message), plus technical facts that help resolve the issue: app version, Windows version, the name of your PC, your license key and license status, whether the install runs the free or the Pro plan and came from the Microsoft Store or the direct download, the state of the WhatsApp Web connection and its automation checks, the number of contacts in the app, your default country/region setting, your sending settings (test mode, batch sending and batch size), a tally of how your last ten sends ended (for example how many succeeded or failed), and a short excerpt of the local error log. That excerpt is automatically redacted before sending: phone numbers and message content are stripped out. These reports never contain your contacts, phone numbers or message text.

Feedback notes you send

After a successful send, the app may show a small "Enjoying SendCommander?" card. Choosing Send feedback there opens a short form, and nothing is transmitted until you press Send. A note carries what you typed, the email address you optionally enter (leave it empty and the note is anonymous), the app version, your license key when one is stored, whether the install runs the free or the Pro plan, whether the app came from the Microsoft Store or the direct download, and the Windows version. Deliberately absent: the name of your PC, the state of your WhatsApp connection and the technical snapshot a support message carries — a feedback note is not a support case. Our delivery log keeps one line per note (when it arrived and a short preview), so feedback cannot get lost. Rating the app from that same card opens the Microsoft Store's own rating window, which is Microsoft's service, not ours (see Microsoft Store and Direct Download).

How we handle what you send

When you send a support message, report or feedback note, we check that the email address you entered can receive mail with Reoon (an email verification service) and deliver the message to us by email via Postmark. For a support message, Postmark also sends you a confirmation, and we create a task in our task list (Todoist) so it gets answered. If your email address is already in our self-hosted customer database (FluentCRM), a support message or feedback note tags it as "contacted support". To answer faster, we look up your license and purchase records with us. Like every request, these messages arrive with your IP address, which appears in our server logs as described under License checks. We keep messages, reports and notes as support history for up to 24 months after your last contact, then delete them; ask us to delete them sooner.

Configuration the app fetches (nothing about you is sent)

The app regularly downloads small configuration files from our servers with plain requests that carry no personal data: the automation instructions that keep sending working when WhatsApp changes its website, the public changelog shown in the "What's new" window, and a version feed that only supplies the occasional announcement banner. Update checks go through the Microsoft Store itself; our feed does not install or check for updates. These are ordinary downloads, like a browser fetching a page; they do not transmit your data beyond the IP address every web request carries.

Nothing else

The app builds no analytics profile, shows no advertising and does no automatic crash or error reporting apart from the WhatsApp layout reports described above. The error log stays on your PC unless you send a report yourself. Apart from the cases above, SendCommander makes no requests to our servers.

5. Microsoft Store and Direct Download

When installed from the Microsoft Store, installation and updates are handled by Microsoft, which may process install and usage statistics under its own privacy statement; we only see the aggregated numbers Microsoft shows to app publishers, never anything about you personally. SendCommander is now distributed through the Microsoft Store. Older installs that came from the direct-download installer on our GitHub releases page (an earlier channel that ended with version 1.2.0) were served by GitHub (Microsoft) under the GitHub privacy statement.

6. Purchases

Licenses are purchased on pythonandvba.com, not inside the app. Payment and billing information is processed by Pabbly Subscription Billing, Stripe and/or PayPal; we receive your email address and the product purchased in order to deliver your license key. We do not store your payment card details. Please see the Pabbly, Stripe and PayPal privacy policies for details.

7. Legal Basis for Processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we process the data described above under these legal bases:

• Contract performance: validating your license and delivering the product you bought
• Legitimate interests: enforcing the per-device license limit, detecting misuse of license keys, keeping short-lived server logs to prevent abuse and diagnose faults, counting active installs and overall usage through the switchable daily ping, noticing WhatsApp website changes early through the switchable layout reports, and answering the reports and support messages you send
• Legal obligation: keeping transaction records where the law requires it

8. Data Sharing

We do not sell personal data. Purchase data is shared with the payment processors named above, and license records are stored by our hosting providers on our behalf. Alerts about WhatsApp layout reports reach us through the same email delivery provider. Support messages, reports and feedback notes are shared only with the service providers that help us deliver and answer them (Reoon, Postmark, Todoist; see How we handle what you send). Nobody else receives your data, and your contacts and messages cannot be shared with anyone because they never reach us in the first place.

Bosau Digital LLC is based in the United States, so the data described in this policy is processed in the United States and/or in the countries where our service providers operate. Where personal data of EEA or UK residents is transferred internationally, we and our service providers rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.

9. Data Retention

• License and activation records: kept for as long as your license is active and as required by law; this includes the device names registered to your license
• Server logs: deleted after 14 days (90 days for warnings and errors)
• Failed license checks: deleted after 90 days
• WhatsApp layout reports: deleted after 30 days; stored without your IP address
• Usage pings: kept as daily records keyed by the random install id, with the approximate country; the license key itself is not stored with them, only whether the install was licensed
• Reports, support messages and feedback notes: kept as support history for up to 24 months after your last contact, then deleted (one summary line per note stays in our delivery log)
• Everything on your PC: under your control; the only thing the app removes on its own is the text of replies older than 90 days. Otherwise it never deletes your data without you asking, and Delete local app data removes all of it

10. Your Rights

If you are in the EEA or the UK, you have the right to access, correct, delete, restrict or receive a copy of the personal data we hold about you (which is limited to license, purchase and support records, plus the usage pings and layout reports kept under a random install id), and to object to processing based on legitimate interests. Contact contact@pythonandvba.com and you will receive a response within 30 days. These requests are honoured for customers everywhere, not only where the law requires it.

You also have the right to lodge a complaint with your local data protection supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk); in the EEA you can find your national authority through the European Data Protection Board (edpb.europa.eu). We would welcome the chance to resolve your concern first, so please consider contacting us before you do.

11. Data Security

All communication between the app and our servers uses encrypted connections. On your PC, your data is protected by your Windows user account like your other documents; the app stores it outside any cloud-synced folder on purpose.

12. Children's Privacy

SendCommander is a business tool and is not directed at children under 16. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest change. Material changes will be visible here before they take effect.

14. Contact

Related documents: Terms & Conditions · Privacy Policy · Refund Policy · EULA