Privacy Policy

Last updated: February 2026

At Transmit, we believe privacy is a fundamental right. This policy explains what data we collect, how we use it, and your rights regarding your personal information.

Data Collection

We collect information necessary to provide and improve our services:

Account Information

  • -Name, email address, and company name
  • -Billing information (processed securely by Stripe)
  • -Authentication credentials (managed by WorkOS)

Usage Data

  • -API call logs and request metadata
  • -Email and SMS delivery statistics
  • -Dashboard usage and feature interactions

Message Data

  • -Email content and attachments (retained for 30 days)
  • -SMS message content (retained for 30 days)
  • -Recipient email addresses and phone numbers

Purpose Limitation

What We DO

  • Deliver your emails and SMS messages
  • Provide delivery analytics and reporting
  • Improve service reliability and performance
  • Prevent abuse and maintain security
  • Comply with legal obligations

What We DON'T Do

  • Sell your data to third parties
  • Use your content for advertising
  • Train AI models on your message content
  • Share data beyond what's necessary for service
  • Read your messages except for support requests

Your Rights

You have the following rights regarding your personal data. These rights apply regardless of your location, though some may be specifically guaranteed by GDPR, CCPA, or other regulations.

Right to Access

Request a copy of all personal data we hold about you.

Right to Correction

Request correction of inaccurate or incomplete data.

Right to Deletion

Request deletion of your personal data ("right to be forgotten").

Right to Portability

Receive your data in a machine-readable format.

Right to Object

Object to processing of your data for certain purposes.

Right to Restriction

Request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at support@transmit.dev. We will respond to your request within 30 days.

Cookie Policy

We use cookies to provide and improve our services. Here's what we use:

Essential Cookies

Required

Authentication, security, and core functionality. Cannot be disabled.

Functional Cookies

Optional

Remember preferences like dark mode and dashboard layout.

Analytics Cookies

Optional

Help us understand how you use Transmit so we can improve the product.

Note: We do NOT use advertising or tracking cookies. Your data is never sold to advertisers.

Third-Party Sharing

We share data with the following service providers, all of whom are bound by Data Processing Agreements (DPAs):

AWS

Email delivery via SES

Oracle Cloud

Database hosting

Google Cloud

Infrastructure services

OVH

European infrastructure

Telnyx

SMS delivery

Stripe

Payment processing

WorkOS

Authentication

Convex

Backend infrastructure

Retention Periods

Email & SMS Content

Message bodies and attachments

30 days

Metadata & Logs

Delivery status, timestamps, analytics

365 days

Account Data

After account deletion

+30 days

Payment Records

For tax and legal compliance

7 years

International Transfers

Transmit is headquartered in the United States. Your data may be processed in the US and other countries where our service providers operate.

EU Standard Contractual Clauses (SCCs) with all processors
Data Processing Agreements with all third-party providers
European data residency options available for Enterprise plans

Children's Privacy

Transmit is not intended for users under 16 years of age. We do not knowingly collect personal information from children.

If you believe we have inadvertently collected information from a child under 16, please contact us immediately at support@transmit.dev, and we will delete the information promptly.

We comply with the Children's Online Privacy Protection Act (COPPA) and similar regulations worldwide.

AI/ML Data Usage

We do NOT train AI on your content

Your email and SMS content is never used to train machine learning models. Your messages remain private.

How we use analytics data

We use aggregated, anonymized data to improve our services:

  • -Delivery optimization and spam detection
  • -Fraud prevention and abuse detection
  • -Infrastructure performance monitoring

You may opt out of analytics processing by contacting support@transmit.dev.

Automated Decision-Making

We use automated systems for the following purposes:

Spam Detection

Automated scanning to prevent spam and protect recipient inboxes.

Fraud Prevention

Detecting and preventing fraudulent account activity.

Rate Limiting

Automatic throttling to protect infrastructure and prevent abuse.

Bounce Processing

Automatic handling of bounced messages and suppression lists.

You have the right to request human review of any automated decision that significantly affects you. Contact support@transmit.dev.

Biometric Data

We do NOT collect biometric data.

Transmit does not collect, store, or process any biometric information including fingerprints, facial recognition data, voiceprints, or other biological identifiers.

Contact Information

For privacy-related inquiries, data requests, or questions about this policy:

Privacy & Security Inquiries

support@transmit.dev

We aim to respond to all privacy inquiries within 30 days. For urgent security matters, please include "URGENT" in your subject line.

Policy Updates

We may update this Privacy Policy from time to time. When we make material changes:

We will notify you at least 30 days before the changes take effect
Notification will be sent via email to your account address
A summary of changes will be posted on this page
You may close your account if you disagree with changes

The "Last updated" date at the top of this page indicates when this policy was last revised.

Questions about privacy?

We're happy to answer any questions about how we handle your data.