This Privacy Policy explains how FluentCart Inc. ("Company," "we," "us," or "our") collects, uses, stores, and discloses personal information in connection with the toSend website, APIs, applications, and related services (collectively, the "Service"). It also describes the rights you have over that information and how to exercise them.
By using the Service, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Service.
FluentCart Inc. is the controller of personal data processed about you in connection with your toSend account. Our registered address is 131 Continental Dr, Suite 305, Newark, Delaware 19713, USA. You can reach our privacy team at support@tosend.com.
We use a small number of first-party cookies for authentication and to remember your session. We do not use third-party advertising or tracking cookies. The dashboard uses localStorage for non-sensitive preferences such as UI state.
Where GDPR or UK GDPR applies, we rely on the following legal bases:
When you use toSend to send emails, you submit recipient addresses and message content to us. With respect to that data, you are the controller and toSend acts as a processor on your behalf, governed by our Data Processing Agreement, which is binding when you accept the Terms of Service. You are responsible for obtaining any necessary consents, providing privacy notices to your recipients, and complying with applicable anti-spam and data-protection laws (including CAN-SPAM, GDPR, PECR, and others).
We use a small set of vetted subprocessors to operate the Service:
Customer support and our own outbound account emails (onboarding, notifications) are handled on self-hosted tools and through toSend itself — no third-party processes those communications on our behalf.
Each subprocessor is bound by confidentiality and data-protection obligations and processes data only on our documented instructions. See our Subprocessors page for purpose, location, and DPA links for each, and for our notice policy when the list changes.
The Service is operated primarily from the United States. If you access the Service from outside the US, your personal data may be transferred to and stored in the US. Where required, such transfers are made under appropriate safeguards (including the EU Standard Contractual Clauses).
We apply industry-standard measures to protect personal data, including encryption in transit (TLS) and at rest, role-based access controls, audit logging, and routine security reviews. No system is perfectly secure, and we cannot guarantee absolute security.
Depending on where you live, you may have the right to:
To exercise any of these rights, email support@tosend.com. We respond within 30 days. You also have the right to lodge a complaint with a supervisory authority in your jurisdiction.
The Service is not directed to children under 18, and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided us personal data, please contact us and we will delete it.
We may update this Privacy Policy from time to time. Material changes will be announced by email and/or an in-product notice. The "Effective Date" at the top of this page reflects the most recent revision.