Terms of Service

1. Your agreement with Avalon

These Terms of Service govern SendITAR, operated by Avalon Mfg, Inc. (Avalon, we, us, or our). By accepting these terms when prompted, you agree to them. If you use SendITAR for an organization, you represent that you have authority to act for that organization. You must be at least 18 years old and authorized to use the service. If you do not agree, do not create or use a SendITAR account.

A separate written customer agreement may add service, security, confidentiality, support, or payment obligations. If it expressly conflicts with these terms, that agreement controls for the covered services. Our Privacy Policy at /privacy explains how we handle personal information.

2. Current service availability

SendITAR is currently available for authorized testing with non-controlled files only. Do not upload ITAR-controlled technical data, CUI, classified information, or other information prohibited by the service notice. Controlled-data use requires our express authorization for the applicable service and customer agreement after the necessary security and assurance work is completed.

Descriptions of ITAR, CUI, CMMC, or NIST SP 800-171 use cases describe the service's intended purpose and supporting features. They are not a certification, export authorization, government endorsement, or determination that your organization satisfies its contractual or regulatory obligations.

3. Accounts and account security

Provide accurate account information and a sender name recipients will recognize. Use an individual email account that you control. Do not share accounts or use distribution lists or shared mailboxes as individual accounts. Protect your sign-in credentials, authenticator, recovery codes, and devices. Save recovery codes before sending; receive-only users are encouraged to save them. Follow the required MFA and account-setup steps, and promptly report suspected unauthorized access through the contact below.

Account recovery can revoke sessions and require new authentication. Starting over with a replacement account does not restore the previous account's transfer access, organization roles, or ownership. Recovery cannot restore a lost file-decryption passphrase.

4. Authorized sharing and acceptable use

Use SendITAR only for information you have the right to share and only with recipients authorized to receive it. The sender must verify recipient eligibility, export authorization, need to know and dissemination restrictions before sending. You remain responsible for applicable export controls, contract restrictions, markings, endpoint security, and your organization's policies. An email address, US network location, or successful sign-in does not establish citizenship or export authorization.

Recipients must use authorized devices and storage, comply with the sender's restrictions, and protect downloaded copies. Do not use the service for unlawful content, unauthorized disclosure, impersonation, phishing, malware distribution, harassment, or infringement. Do not bypass access controls, obtain another person's account or keys, interfere with the service, or conduct security testing without our written permission.

5. File encryption and passphrases

The provided client encrypts file contents and filenames on the sender's device before upload and decrypts them on the recipient's device. SendITAR generates a six-word passphrase on your device. Share the passphrase by phone or your organization's approved encrypted messenger — never by email, text message or in the link.

SendITAR does not receive the file-decryption passphrase through the provided file-transfer client and cannot recover it. Encryption does not establish that a file is safe to open. The service does not inspect or guarantee the safety of file contents. Keep your own source copies and appropriate endpoint protection. No service can guarantee that every security threat will be prevented.

6. Notifications and service-visible information

You authorize us to send the intended recipient a transfer notification identifying your sender name and account email address, The email contains a pickup link, not the encrypted file as an attachment. Email delivery may be delayed, filtered, duplicated, or rejected by the receiving provider; submitting a notification does not guarantee inbox delivery or pickup.

Sender names, account and recipient email addresses, encrypted sizes, transfer activity, and other service metadata remain visible to the service.

7. Your content and our limited permission

You retain your rights in the content you submit. You grant Avalon a limited permission to host, store, transmit, copy, and process encrypted files and service information as needed to operate, secure, support, and deliver the service, follow your authorized instructions, and meet legal obligations. This permission does not give us ownership of your files or permission to use them in advertising.

You are responsible for having the permissions and notices needed to supply other people's information, including recipient email addresses. We may restrict access to or remove content when reasonably necessary to address unlawful use, security threats, legal requirements, or violations of these terms.

8. Expiration, revocation, and deletion

Uncollected files are subject to the sender-selected expiration. Each file is scheduled for server deletion five minutes after its first complete download; repeat downloads do not extend this deadline, and another file in the transfer keeps its own deadline. Partial downloads and merely opening a link do not start the pickup timer. Earlier expiration or revocation can end access sooner.

Explicit preservation holds or storage outages may delay physical deletion without extending recipient access. Security records, account and transfer metadata, notification messages, and database backups have separate retention. The five-minute file rule does not promise erasure of every related record or of copies outside the service.

Keep source copies because purged files cannot be recovered. Revocation cannot erase copies already downloaded, and someone who already has encrypted bytes and the file passphrase may still decrypt those copies after service access ends. SendITAR is not a long-term archive or a substitute for your required recordkeeping.

9. Availability, changes, and fees

We may maintain, improve, limit, suspend, or discontinue service features. We may suspend an account or transfer when reasonably necessary to protect the service, comply with law, address misuse, or enforce an applicable agreement. Where practical and lawful, we will provide notice and an opportunity to address the issue. A separate written agreement controls any specific service levels or support commitments.

One free send permits one transfer containing one file, up to the stated transfer-size limit, per verified account email. The allowance is used when the encrypted transfer becomes ready for pickup; a failed, canceled or expired upload that never becomes ready does not use it. A successful send still counts if it is later deleted or never collected. Existing successful sends and account replacement do not reset the allowance. Receiving files does not require a paid subscription.

After the free send, the standard sender subscription is US $84 per year, equivalent to $7 per month billed annually, plus applicable tax disclosed at checkout. There is no monthly billing option. A subscription begins only after you explicitly choose it and complete Stripe checkout. Accepting these terms or using the free send alone does not authorize any charge. While subscriptions are not open, the test deployment may allow additional non-controlled sends without payment.

A paid subscription automatically renews annually until canceled. You authorize the annual subscription charges and applicable disclosed taxes when subscribing. You can cancel future renewals through Billing and the Stripe customer portal; paid sending access continues until the paid period ends. Cancellation does not automatically prorate or refund an annual payment, except where required by law or otherwise agreed by Avalon. Contact support@senditar.com about billing errors or refund requests. We will disclose changes to renewal pricing before they take effect and provide an opportunity to cancel.

Failed, incomplete, overdue or expired payment can prevent new sends until resolved. Existing recipient pickup, transfer deletion/revocation and account recovery are not conditioned on an active subscription. Transfer limits, expiration and deletion rules still apply to paid accounts. Stripe processes checkout, invoices and subscription payments under its applicable privacy and service terms; SendITAR does not receive full payment-card details. A separate signed customer agreement controls any conflicting commercial terms.

10. Service ownership

Avalon and its licensors retain rights in the SendITAR software, brand, design, and service materials. Subject to these terms, you may use the service for its intended purpose. No ownership rights in the service are transferred to you. Copyright 2026 Avalon Mfg, Inc. All rights reserved.

11. Warranties and responsibility

Except for commitments in a signed customer agreement and rights that cannot legally be excluded, the service is provided as available without warranties of uninterrupted operation, fitness for a particular purpose, or guaranteed prevention of loss or unauthorized access. We do not warrant that using SendITAR alone will satisfy CMMC, NIST SP 800-171, ITAR, or any other requirement.

Nothing in these terms excuses either party from obligations imposed by applicable law or from security, confidentiality, incident-response, or other duties expressly accepted in a signed agreement.

12. Limits of liability

To the extent permitted by applicable law and except as otherwise agreed in writing, neither party is liable to the other for indirect, special, incidental, or consequential losses arising from use of the service. Avalon's total liability for claims arising from the service is limited to the greater of US $100 or the amounts you paid Avalon for SendITAR during the 12 months before the event giving rise to the claim.

These limits do not apply to fraud, willful misconduct, or liability that applicable law does not allow to be excluded or limited. A signed customer agreement may establish different liability terms.

13. Ending use, changes, and disputes

You may stop using the service and contact us about closing your account. Ending use does not erase records subject to the retention, preservation, or legal requirements described above. Clauses concerning ownership, retention, confidentiality obligations, liability, and accrued rights continue where their purpose requires it.

We will identify material changes with an updated effective date and, where appropriate, require renewed acceptance before further file exchange. A signed customer agreement may specify governing law and venue. Otherwise, applicable law and courts with proper jurisdiction apply. These terms do not impose mandatory arbitration or waive rights that cannot lawfully be waived. If a provision is unenforceable, the remaining provisions continue to the extent permitted by law.

14. Contact

For service support, legal notices, account concerns, or questions about these terms, contact Avalon Mfg, Inc. at support@senditar.com. Do not send a file passphrase, recovery code, or controlled file in a support request.