Privacy Policy
Effective October 28, 2026
This policy explains what Speak To Send, run by Responsiv Marketing Agency, doing business as Speak To Send ("we"), collects, why, who we share it with, and the choices you have. For your contacts' data, we act on your behalf: you decide who is emailed and what is sent.
What we collect
| What | Examples | Why |
|---|---|---|
| Account details | Name, email, password (stored only as a one-way hash), invite code used | To run your account and sign you in |
| GoHighLevel connection | Access tokens for your sub-account, its ID and name | To read and send on your behalf. Tokens are encrypted and never shown in the browser or written to logs |
| GoHighLevel data read for you | Contacts' names, email addresses, tags and Do Not Disturb status; conversations and messages; past email campaigns | To work out who gets each email, leave out unsubscribed people, draft replies and learn your voice. Contact lists are worked out when you send and not kept by us |
| Your writing | Sample emails, your voice profile, what you say or type, drafts and AI suggestions | To write emails that sound like you |
| Voice recordings | Audio from the mic button, up to 3 minutes | Turned into text, then not kept by us |
| Sending settings | From name and address, reply-to, test address, brand color, text style | To send emails the way you set them up |
| Sending history | Subject, tags, number of recipients, status, times | To show your history and scheduled emails |
| Billing | Plan, renewal date, Stripe customer ID, credits | To charge for and run your plan. Card details go straight to Stripe; we never see or store them |
| Usage and cost logs | Which AI feature was used, when, and its cost | To count credits, cap costs and keep the Service working |
| Technical data | Sign-in cookie, basic server logs (pages requested, errors) | To keep you signed in and fix problems. We don't use advertising or tracking cookies |
How we use it
Only to provide the Service to you: writing and sending your emails, billing, support, security, and fixing problems. We don't sell your data or your contacts' data, don't use it for advertising, and don't email your contacts for our own purposes.
Legal bases (EU and UK). Where GDPR or UK GDPR applies, we use your account and billing data to perform our contract with you; your writing, settings and usage data to provide and secure the Service (contract and our legitimate interests); and billing records to meet legal obligations. For your contacts' data, you are the controller and we are your processor: we act only on your instructions, under our Data Processing Agreement, which applies automatically to customers in the EU or UK.
Who we share it with
We share data only with the service providers that run the Service, and only what each needs:
| Provider | What they receive | Why |
|---|---|---|
| GoHighLevel | The emails, replies and schedules you send | Your emails are sent through your own GoHighLevel account |
| Anthropic (Claude) | Your voice profile, sample emails, what you ask for, and the conversation you're replying to | AI writing. Under its commercial terms, it doesn't train its models on this data |
| OpenAI | Your voice recordings, and brand names from your samples to spell them right | Turning speech into text. Under its API terms, it doesn't train on this data |
| Stripe | Your name, email, plan and payments | Billing. Stripe handles card details directly |
| Railway | Everything we store (as our hosting and database provider) | Running the app |
We may also disclose data if the law requires it, or to protect the Service and its users from fraud or abuse.
How we protect it
Connections are encrypted (HTTPS). GoHighLevel access tokens are encrypted at rest, kept on our servers only, and never written to logs. Passwords are stored as one-way hashes. Each account can only see its own data. The encryption key is kept separately from the database.
If something goes wrong. If we learn of a security breach that affects your data, we'll tell you without undue delay, and within any time the law requires (for example 72 hours where GDPR applies), with what happened, what data was affected, and what we're doing about it. Because you control your contacts' data, we'll give you what you need to notify them or the authorities where required.
Changes to our providers. If we add or replace a service provider that receives your data, we'll update the list above and tell you by email at least 14 days before, so you can object or close your account.
How long we keep it
- While your account is open, we keep what you've saved (voice profile, drafts, settings, sending history).
- Disconnecting GoHighLevel deletes the stored access tokens straight away.
- When you close your account, we delete your account data within 30 days, except billing records we must keep by law (usually 7 years).
- Voice recordings and the contact lists worked out for a send aren't stored by us.
Your rights
You can see and change most of your data in the app, and ask us to send you a copy of it or to delete it, by emailing support@speaktosend.app. Depending on where you live (for example under GDPR or the California Consumer Privacy Act), you may have further rights, and we'll honour them as the law requires. If one of your contacts asks us about their data, we'll pass the request to you, since you control it.
California residents. In the last 12 months we collected the categories of data listed under "What we collect" (identifiers, commercial information, internet activity, audio, and professional information), for the purposes above. We do not sell or share personal information for cross-context behavioural advertising, and we don't use sensitive personal information to infer characteristics. You have the right to know, correct and delete your data, and not to be treated differently for using these rights. We'll confirm your identity by email before acting on a request.
Where the data is processed
In the United States. If you use the Service from outside the US, your data is transferred to and processed in the US.
Children
The Service is for businesses and isn't meant for anyone under 18.
Changes to this policy
We'll tell you by email or in the app before material changes take effect.
Contact
Responsiv Marketing Agency, doing business as Speak To Send, 712 West Ave, Ocean City, NJ 08226. Email: support@speaktosend.app.
Terms of Service · Privacy Policy · Data Processing Agreement