Sendlore / Security & privacy
Your saved research is private by default. Here’s what that means.
Sendlore is built around a personal library—not a public feed. We explain which safeguards exist in the code, when your content may be processed by third parties, what sharing exposes, and how to stay in control of your data.
Last reviewed October 7, 2026 · Based on the application source code; not an independent security certification.
01 / Account access
A personal library with account-based boundaries.
Saving a URL, note, image, or document does not publish it to other users. Access to your library is designed around signing in and keeping records associated with their owner.
Personal library routes require a sign-in session. Protected server functions check authentication before accessing saved information.
Account-associated records use user identifiers and database row-level security rules to restrict ordinary access to the right owner.
Supported uploaded media uses owner-scoped storage paths. Where appropriate, the app issues temporary signed access links rather than exposing a permanent public file URL.
Authorized backend systems and service providers may need access to selected content to provide processing, support, or other legitimate functions.
02 / What happens to a save
Keeping a source is different from processing it.
Your saved material may pass through several steps. These steps depend on the source, settings, available processing, and whether you choose to share it.
You capture it
Sendlore receives the link, note, file, selected text, or import you submit, along with the context you choose to include.
It may be processed
Web extraction, OCR, transcripts, summaries and other enrichment may involve external providers. Some sources stay partial or metadata-only.
You retrieve it
Search uses captured details and indexed evidence. Ask can send relevant retrieved context to an AI provider to generate a source-linked response.
You decide to share
Only if you enable a public note link does that note become accessible without signing in. Your full library is not made public by default.
A source URL may remain useful when full processing is unavailable; Sendlore does not promise a permanent, exact copy of every website, video, or social post.
03 / Safeguards
Practical protection, without inflated claims.
The current application code contains access-control and defensive measures. These are implementation details, not a claim of a completed external security certification or a guarantee of zero risk.
Protected routes and server actions validate account access before handling private operations.
Database policies restrict standard authenticated queries to account-owned records where those policies apply.
App-issued connection tokens are stored as hashes on the server, can be revoked, and include capture-scoped keys for the browser extension.
Server-side source fetching includes checks to reject certain unsafe destinations and limit responses.
Data is served over HTTPS; logging helpers are designed to redact secret values and sensitive payload fields.
Source inspection does not prove every migration is applied in the live database, every vendor is configured identically, or that a third-party penetration test has been completed.
04 / Deliberate sharing
A share link makes that note public to anyone who has the link.
What sharing does
When you enable sharing for one note, Sendlore creates a public URL. Its page can present the note’s title, source, summary, takeaways, author or caption, and related displayed fields. Recipients do not need a Sendlore account to view it.
Public note pages may also be accessible to crawlers. Avoid sharing confidential text or material you lack permission to redistribute.
How to turn it off
Open the saved item and disable its share link. This revokes access through the prior live Sendlore URL. It cannot erase screenshots, downloads, previews, browser caches, or copies already retained elsewhere.
05 / Browser capture
Your extension only reads page text when you choose to save.
The current Chrome extension supports saving the current page, a link, or highlighted text. It uses an account connection key; it is not intended to collect every tab or record continuous browsing history.
“Include the page’s text when I save” is enabled by default unless turned off in extension Options. On an explicit current-page save it may send visible text along with the link. Consider switching this off when saving sensitive pages.
Saving a different right-clicked link does not automatically transmit the body text of the page you are viewing.
Extension connection keys are capture-scoped in the current flow. Replacing or revoking a key in Sendlore disables use of that key across connected browsers; deleting a key locally affects that browser.
06 / AI and providers
Private does not mean “never processed outside Sendlore.”
Sendlore uses infrastructure and, where required by a feature, external AI and content-processing services. Relevant source text, media, prompts, or retrieved note context may be transmitted to those services to complete the task. This is different from deliberately sharing your library publicly.
Our model-training position
Nero Niche does not use private saved content to train its own AI models or intentionally submit that content for model-training purposes. That is not a guarantee that no third-party system will process information in order to provide the product.
Product analytics are separate
The current app has a limited PostHog event configuration that disables automatic pageview capture, autocapture, session recording, and surveys, with a filter intended to exclude note text and other sensitive data. The marketing website also uses WordPress and may run its own website technologies.
Sendlore should not be described as end-to-end encrypted, zero-knowledge, completely inaccessible to service providers, independently certified, or immune to breaches. We also do not guarantee complete extraction of restricted sources or indefinite retention of deleted web content.
07 / Your data controls
Access, sharing, export, and deletion should be usable controls.
The current app includes direct actions for managing your information. The linked guides explain the steps; the Privacy Policy covers legal rights and retention exceptions.
Edit or remove a save
Change your note, tags, or folders. Archive preserves it; Trash removes it from active use and may still allow restoration.
Manage shared links
Turn on sharing for a specific note only when appropriate, and revoke access to its public link afterward.
Export your notes
Settings can produce JSON and Markdown exports of saved note records. The current export is limited to 5,000 saves per request and may not include uploaded binary files.
Revoke keys or close your account
Settings provides connection-key management and a confirmed Delete account action. The deletion flow attempts to cancel active subscriptions before removing account records; backups and legal records may have separate retention.
08 / Common questions
Clear answers to the questions that matter.
Can other Sendlore users see my saved library?
Your library is designed to be private to your account under authenticated, owner-scoped access. A public link you create for one note is a deliberate exception. This does not exclude authorized infrastructure or provider processing.
Is my library end-to-end encrypted?
No. Sendlore does not currently make an end-to-end encryption or zero-knowledge claim. Such a model would prevent certain server-side processing workflows unless designed explicitly around that restriction.
Does Sendlore sell my saved content or use it for advertising?
Our published Privacy Policy says we do not sell private saved libraries or use their content to build targeted-advertising profiles. Product analytics and operational processing still occur as described in that policy.
Does Sendlore read every webpage I visit?
No. The extension is designed around an explicit save action. However, page-text capture is on by default for the current page you choose to save unless you turn that setting off in Options.
Can I delete a public share link after sending it?
Yes. Revoking the link stops the original Sendlore public URL from resolving. It does not retrieve copies that others may already have downloaded, photographed, or cached.
What happens to my information if I delete my account?
The current account-deletion operation is designed to remove the authentication account and related data while canceling live paid subscriptions first. Some records, backups, payment history, logs, or third-party copies may be retained temporarily or as required by law. See the Privacy Policy for the complete qualifications.