Privacy

Sendproject runs Mosaipy, a website builder for small businesses. We are the data controller for everything described here.

Sendproject · VAT IT03001050305 33100 Udine, Italy

Write to info@mosaipy.com about anything on this page. A person reads that address.

We took it from your business website, where it is published so that people can contact you. Nobody sold it to us and we did not guess it.

We wrote to introduce Mosaipy to a business that might want a website. Under the GDPR that is direct marketing carried out on the basis of our legitimate interest (Article 6(1)(f)); we weighed it against your interests, and this is what came out of it: we write to the address a business publishes for being contacted, once, about something related to what that business does, and we stop the moment you say so.

We keep: the address, the business name, the website it came from, the date we found it, and the date we wrote. If you do not reply we delete all of it after 12 months. If you ask us to stop we keep only the address, forever, because it is the only way to make sure nobody writes to you again by mistake.

Every email we send has an unsubscribe link. One click, no form, no account, no reason asked, and it works for as long as the link exists. Replying to the email works too.

We act on it immediately, which is well inside the ten working days the law gives us. Objecting to direct marketing is an absolute right: there is nothing for us to weigh up, so we do not.

To build and publish a site we keep your email address, what you typed into the builder, and the site itself. The email address is what lets you come back to your work from another device: without it the site would be reachable only from the browser that made it.

We use it to send you the sign-in link, the confirmation of your address and the notices about your own sites. We do not sell it and we do not pass it to anyone for their own marketing.

Published sites are public, which is the point of publishing them. What you write into a site is visible to anyone who opens it.

For each published site we count how many times its pages were opened, which day, which site sent the person over (the name of it — "google.com" — never the full address), and whether the screen was a phone or a computer. No cookies, no IP addresses, no identifiers: we cannot tell one visitor from another and we do not try, so these counts cannot be turned back into people, not even by us.

When somebody fills in a form on a published site, what they wrote — their name, how to reach them, their message — is stored on our server and shown to the owner of that site in their account area. We do not email it onward, we do not read it, and we do not use it for anything else. The owner decides what to do with it and can delete any of it at any time; we keep the five hundred most recent requests per site. For this data the site owner is the controller and we are their processor.

Mail leaves through our mailbox provider. The site runs on a server we rent in Germany. When a site is built with the help of a language model, what you typed is sent to that provider to write the copy. Each of them processes the data on our instructions and for nothing else.

You can ask us for a copy of what we hold about you, have it corrected, have it deleted, or object to what we are doing with it. Write to info@mosaipy.com. We answer within a month.

If you think we have got it wrong you can complain to a supervisory authority — in Italy, the Garante per la protezione dei dati personali.