Privacy Policy

• Personal Data: Any information that relates to an identified or identifiable individual. • Data Fiduciary: The person or organization responsible for determining the purpose and means of processing personal data. • Data Processor: An entity that processes personal data on behalf of the Data Fiduciary under instructions or contractual arrangements.

We collect information you provide directly to us when you create an account or use our services. This includes: • Account information: Name, email address, company name. • Technical information: IP address, user agent, login history, API usage. • Service information: SMTP metadata, domain information. • Support information: Communications with our support team. • Billing information: Invoices, subscription records, transaction identifiers, and payment status. Payment card details are processed by the applicable payment processor and are not stored by TSP Scale.

We use the collected information strictly for specific purposes: • Email Address: Authentication and account notifications. • IP Address & User Agent: Security and fraud prevention. • SMTP Metadata: Delivering and troubleshooting email traffic. • Billing Information: Subscription management. • Company Name: Account identification and business features. • Domain Information: Domain verification and email authentication. • API Usage: Service operation, security monitoring, and abuse prevention. We do not sell your personal data.

When customers use TSP Scale to send emails, customers remain responsible for ensuring they have the necessary rights and permissions to send such communications, and that they comply with applicable laws. TSP Scale processes email content only as a service provider for transmission, delivery monitoring, security, and troubleshooting. Email bodies and attachments are retained only as necessary for these purposes, up to a maximum of 30 days.

We engage trusted third-party service providers where necessary to operate and secure our services. These may include cloud hosting providers, payment processors (when you purchase paid services), and other infrastructure providers that process personal data on our behalf. The identity of the payment processor used for your transaction will be disclosed during the payment process and, where appropriate, in this Privacy Policy. We operate our own email delivery infrastructure and do not use third-party email or SMS delivery providers for the core delivery of customer messages.

We use essential cookies and similar technologies to maintain user sessions, authenticate users, and protect the security of our services. Essential authentication cookies are required for account access and are not used for advertising purposes. Where optional cookies or tracking technologies are introduced, we will provide appropriate notice and choices.

We retain personal data strictly for specified periods: • Account Data: Until account deletion. • Email/Webhook Logs: 30 days. • Audit Logs: 1 year. • Billing Data: 7 years (as required by law). • Consent Logs: Retained for as long as reasonably necessary to demonstrate historical consent decisions and compliance obligations under the DPDP Act. When you delete your account, live data is immediately purged. Encrypted backups are retained according to infrastructure backup policies and automatically expire after the configured retention period.

We use administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. Access to personal data is limited to authorized personnel and systems that require such access. Where applicable, we use infrastructure located in India and take appropriate measures when processing data across jurisdictions.

Under the Digital Personal Data Protection Act, 2023, you have the right to access your data, request correction of inaccuracies, request erasure (deletion), withdraw optional consents, and nominate another individual in the event of death or incapacity. Users may request deletion of their account through the Privacy Dashboard. Users who cannot access their account may submit requests through our privacy contact email. Certain records may be retained where required for legal, security, or compliance purposes.

TSP Scale's data practices are designed to comply with applicable laws and are updated as requirements evolve. We may update this Privacy Policy from time to time. Material changes will be communicated through the website, your account dashboard, or via email where appropriate.