Privacy Notice
Version 2026-10-22.6 · Last updated 22 October 2026
This notice is given under section 5 of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025. It explains what personal data we, The Send Labs, a unit of Homeasy Automation Private Limited ("The Send Labs", "we", "us"), collect through thesendlabs.com, why, and how you can exercise your rights. You may ask for this notice in English or in any language listed in the Eighth Schedule to the Constitution of India by writing to [email protected].
1. Who we are
Data Fiduciary: The Send Labs, a unit of Homeasy Automation Private Limited, CIN U74909BR2025PTC073219, B-Hub, 5th Floor, Mauryalok Complex, Patna 800001, Bihar, India.
Grievance Officer: Vishwjeet N, Senior Manager, [email protected]. See our Grievance Redressal Policy.
The Send Labs is an email deliverability service: it warms up email mailboxes, measures where emails land, tests inbox placement, checks domain settings and sends alerts.
2. Personal data we process, and why
| Personal data | Purpose | Basis under the DPDP Act |
|---|---|---|
| Account: name, email address, company name, password (stored only as a one-way hash) | Create and run your account, sign you in, contact you about the service | Your consent (s. 6) given at sign-up |
| Consent record: when you consented and to which version of this notice | Show that consent was given | Compliance with the DPDP Act (s. 6(10)) |
| Mailboxes you connect: email address, sender name, mail server settings, app password or Microsoft sign-in tokens (stored encrypted) | Send warmup emails from your mailbox and find warmup and test emails in it | Your consent |
| Warmup records: for each warmup email, sender, receiver, Message-ID, times, and whether it landed in the inbox or spam | Run warmup, compute your Reputation Score, show charts | Your consent |
| Spam test emails: the copy of the email you send to our seed inboxes, including its headers | Build the spam test report | Your consent |
| Emails you write in the app: drafts, signatures, warmup emails you write, and, for emails you send, each recipient's address and name, the time and the result; your unsubscribe list | Let you write, test and send emails, and stop emails to people who unsubscribed | Your consent; for your recipients' data, we act as your Data Processor (DPA) |
| Domains: domain names, and the public DNS and blocklist results about them | Domain Health checks and alerts | Your consent |
| Alert channels: email addresses, Slack and webhook URLs you add | Send you alerts | Your consent |
| Access requests: name, email address, company and the note you write when you ask to join the private beta | Reply to you and invite you | Voluntarily provided for that purpose (s. 7(a)) |
| Contact form: name, email address, and the phone number, company and message you choose to write | Reply to your message | Voluntarily provided for that purpose (s. 7(a)) |
| Free tools: the email address you give for a free spam test | Limit free tests to a few per day | Voluntarily provided for that purpose (s. 7(a)) |
| Billing (only once paid plans start): name, address, GSTIN, invoices. Card and UPI details are handled by Razorpay, never by us | Bill you and issue GST invoices | Your consent, and compliance with tax law (s. 7(b)/(d)) |
| Technical data: IP address, browser, device, and security logs | Keep the service secure, prevent abuse, investigate incidents | Your consent, and reasonable security safeguards required by s. 8(5) |
| Website analytics (only if you accept analytics cookies): pages visited on our public website, approximate location, device and browser, through Google Analytics 4 | Understand how visitors use our website and improve it | Your consent, given in the cookie banner and withdrawable at any time |
We only read what we need. The Send Labs looks in connected mailboxes only for its own warmup emails (by their Message-ID) and spam test emails (by the test code). It does not read, keep or analyse your other emails.
Other people's data. Emails in your mailboxes, or in the email you test, may contain personal data of other people. For that data you are the Data Fiduciary and The Send Labs processes it on your behalf as your Data Processor, under our Data Processing Agreement.
We do not sell personal data, use it for advertising, or make decisions about you by automated processing that have legal effects.
3. Mailboxes in the warmup network
When you turn on warmup, your mailbox exchanges short business conversations with other mailboxes in The Send Labs network, including other customers' mailboxes. Most are written by us; warmup emails you write yourself go only to our own seed mailboxes. Those emails contain your mailbox's email address and sender name, and are filed away automatically in a "The Send Labs" folder. Turning warmup off, or disconnecting the mailbox, stops this.
4. Who we share it with
We share personal data only with these Data Processors, under contracts that bind them to protect it (the current list is always at Sub-processors):
| Processor | What for | Where |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, database, backups; Amazon SES for our own emails | Mumbai, India |
| Google, Microsoft and other mailbox providers | Operating the mailboxes you connect, at your instruction | As set by the provider |
| Razorpay (once paid plans start) | Taking payments | India |
| Google LLC (Google Analytics), only if you accept analytics cookies | Measuring visits to our public website | United States and other countries |
We may also disclose personal data when the law requires it, for example to comply with a lawful order. We may transfer personal data outside India only as permitted under section 16 of the DPDP Act.
5. How long we keep it
| Data | Kept for |
|---|---|
| Spam test email content and headers | 7 days, then erased |
| Email given for a free spam test | 30 days, then erased |
| Private beta access requests | Until answered, then six months; unused invitations 90 days after they expire |
| Contact form messages | Until answered, then one year |
| Warmup and placement records | While your account is open |
| Records of emails you send from the app (recipient, time, result) | 90 days, then erased |
| Your unsubscribe list | While your workspace exists |
| Security and access logs | Up to one year, for security and abuse investigation |
| Account and everything else | Until you delete your account; then erased at once, and from backups within 30 days |
| Tax invoices | Eight years, as GST law requires, even after the account is deleted |
We also erase personal data once its purpose is served or you withdraw consent, unless the law requires us to keep it (s. 8(7)).
6. Your rights
| Right | How |
|---|---|
| Access (s. 11): a summary of your personal data and how it is processed, and who we shared it with | Account → Download my data, or write to us |
| Correction, completion and updating (s. 12) | Account → Profile, or write to us |
| Erasure (s. 12) | Account → Delete account, or write to us |
| Withdraw consent (s. 6(4)) as easily as you gave it | Disconnect a mailbox, turn warmup off, or delete your account. Withdrawal does not affect processing done before it; it means we can no longer provide the parts of the service that need the data |
| Grievance redressal (s. 13) | Write to the Grievance Officer at [email protected] |
| Nominate another person to exercise your rights if you die or become unable to (s. 14) | Write to us with the nominee's name and contact details |
We answer requests within 30 days. If you are not satisfied with how we handled your grievance, you may complain to the Data Protection Board of India (s. 13(3)).
You also have duties under section 15 of the DPDP Act, such as not impersonating another person, not suppressing material information, and not filing false or frivolous complaints.
You may use a Consent Manager registered with the Data Protection Board to give, manage or withdraw consent.
7. Children
The Send Labs is a business service for people aged 18 or older. We do not knowingly process personal data of children (s. 9). If you believe a child has created an account, write to [email protected] and we will delete it.
8. Security
We protect personal data with reasonable security safeguards (s. 8(5)): passwords are hashed; mailbox passwords and tokens are encrypted; connections use TLS; each customer's data is kept apart from every other customer's; access is limited to staff who need it; we keep security logs and backups.
9. Personal data breaches
If a personal data breach happens, we will inform the Data Protection Board of India and each affected person as the DPDP Act and Rules require (s. 8(6)), describing what happened, its likely consequences, what we are doing about it, and what you can do to protect yourself.
10. Cookies
We use the cookies needed to keep you signed in and to protect forms and, only if you accept, Google Analytics cookies on our public website. You can change your choice at any time with "Cookie settings" at the bottom of our public pages. See our Cookie Notice.
11. Changes to this notice
We will publish changes here. If a change affects how we use your personal data, we will tell you by email and, where needed, ask for your consent again.
12. Contact
The Send Labs, a unit of Homeasy Automation Private Limited, B-Hub, 5th Floor, Mauryalok Complex, Patna 800001, Bihar, India · [email protected] · Grievance Officer: [email protected]