Privacy Policy

1. Who we are and what this policy covers

Avalon Mfg, Inc. operates SendITAR. This Privacy Policy describes personal information handled through the SendITAR website, accounts, encrypted file-transfer service, notifications, and support. It does not describe unrelated Avalon services or the separate practices of your organization, other users, or their email and device providers.

SendITAR is currently limited to authorized testing with non-controlled files. Do not upload ITAR-controlled technical data or CUI unless the applicable service and customer agreement expressly authorize that use.

2. Information you and other users provide

Account information includes your name, work email address, account identifiers, account status, terms acceptance, and authentication and recovery records. Our identity provider processes sign-in credentials and MFA enrollment. The application stores protected session records and hashed single-use recovery codes, rather than a recoverable copy of the recovery-code pack.

Transfer information includes sender and recipient email addresses, the sender's name, transfer and file identifiers, encrypted sizes, selected expiration, timestamps, access and delivery events, and related security records. A sender may provide your email address or information about you before you register.

Uploaded file contents and original filenames are encrypted by the provided client before upload. We store and deliver ciphertext and the encryption parameters needed by the client. The provided client does not send us the file-decryption passphrase. If you contact us, we also receive the information you choose to include in that communication.

3. Information processed automatically

The service and its infrastructure process network and request information, such as IP addresses, request times, account and transfer identifiers, operation results, and security events, to provide access, prevent abuse, and operate the service. Browser and device information may also be provided with normal web requests. We do not use this information to determine a user's citizenship or export eligibility.

We use necessary cookies and similar browser mechanisms for sign-in, session security, request verification, and account setup or recovery. Blocking these mechanisms may prevent the service from working. The current service does not use advertising cookies or cross-site advertising trackers.

4. How we use information

We use information to establish and secure accounts, authenticate users, enforce recipient permissions, store and deliver encrypted transfers, send requested notifications and verification codes, provide support and recovery, keep service and security records, investigate misuse, maintain reliability, and meet applicable legal and contractual obligations.

We use the sender name and account email address to identify the sender in recipient notifications. These names and addresses are visible to the service and to the recipient's email provider; they are not part of the encrypted file payload.

5. When information is shared

We share transfer information and encrypted files with the intended recipient as needed to deliver the transfer and enforce access. Senders and authorized users may see transfer activity available to their role. Service providers process information as needed to supply hosting, storage, identity, email delivery, security, and recovery infrastructure. The current deployment uses Amazon Web Services, including AWS GovCloud infrastructure and managed identity and email services.

When you subscribe, Stripe processes your payment details, billing address, tax information if applicable, invoices and subscription transactions. We send Stripe your account email and an opaque billing-account identifier, and store Stripe identifiers, subscription/payment status, paid-period dates and free-send history. We do not send Stripe files, filenames, recipient details, file passphrases. Stripe's payment service is separate from the GovCloud file-storage environment. Stripe handles payment information under its own Privacy Policy at https://stripe.com/privacy. The application does not store full card numbers or card security codes. Billing and free-send history may remain for accounting, fraud prevention, dispute handling and legal obligations after a subscription or account ends.

We may disclose information when required by applicable law or legal process, to respond to a security incident or unlawful activity, or to protect legal rights and the safety of users and the service. A corporate transaction may involve transfer to a successor subject to appropriate protections and any legally required notice. We do not sell personal information or share it for cross-context behavioral advertising.

6. Encryption and its limits

File contents and original filenames are encrypted on the sender's device and decrypted on the recipient's device using a separately shared passphrase. SendITAR cannot recover a lost file-decryption passphrase. Authorized service administration may involve access to ciphertext and service-visible metadata; encryption of the payload does not hide names supplied for email, recipient addresses, sizes, or transfer activity from the service.

Encryption does not prevent a recipient from keeping or sharing a downloaded copy and does not guarantee that a file is free from malware. No security measure eliminates every risk. The service's security features do not by themselves establish regulatory compliance or certification.

7. Retention and deletion

Uncollected files remain subject to the sender-selected expiration. Each file's first complete encrypted download starts a fixed five-minute server-deletion deadline. Repeated downloads do not extend it, and other files keep their own deadlines. Access can end earlier through expiration or revocation. Explicit preservation holds or storage outages may delay physical deletion without extending recipient access.

File-payload deletion is separate from retention of account information, sender names, transfer metadata, security and audit records, legal-preservation records, and database backups. Those records may remain after the file payload is deleted for account administration, security, dispute handling, recovery, and legal or contractual needs. The file-payload bucket is not included in the application's ordinary database backup plan; database backups may contain historical metadata and encrypted filename information.

Recipient email providers and downloaded devices keep their own copies under their own retention practices. Closing an account or revoking a link cannot erase those copies. We consider deletion requests subject to identity verification, applicable law, preservation obligations, security needs, and the rights of other people. The service does not promise automatic deletion of every related record at the file's five-minute deadline.

8. Hosting and service providers

The current application is hosted primarily in AWS GovCloud US West, with recovery infrastructure in AWS GovCloud US East. Notification emails travel to the recipient's email provider, and users download files to their own devices. Those recipients, providers, and devices can have separate locations, access controls, and privacy practices.

Hosting in GovCloud is not a representation that a transfer is export-authorized, that all recipients are eligible, or that the complete service or customer environment has an authorization or certification. Your organization remains responsible for determining whether a proposed transfer and service use are permitted.

9. Your choices and requests

You can edit your sender name, select supported transfer-expiration settings, revoke transfers you are authorized to control, and manage account recovery through the available account tools. Some information is necessary to provide the service, and withholding it may prevent account use or transfers.

Contact support@senditar.com to ask about access, correction, deletion, account closure, or other privacy rights available under applicable law. We may need to verify your identity and clarify the request. If your organization directs our handling of your information under a separate agreement, we may refer or coordinate the request with it. Do not send passwords, recovery codes, or controlled files as identity evidence.

We do not make every privacy right available in every jurisdiction by contract; we honor the rights and response requirements that apply to the request. Because the current service does not use cross-site advertising tracking, browser tracking signals do not change the core account and transfer functionality.

10. Children and policy changes

SendITAR is a business service intended for adults, not children. If you believe a child has supplied personal information through the service, contact us so we can investigate and take appropriate action.

We may update this policy as the service or applicable requirements change. We will post the effective date and provide additional notice or obtain consent where required by law.

11. Contact

For privacy questions or requests, contact Avalon Mfg, Inc. at support@senditar.com. Please identify the account or transfer relevant to your request without including confidential file contents or a file-decryption passphrase.