Legal
Privacy Policy
Last updated: September 9, 2026
We will never share or sell your information, especially sensitive business information such as your sales and revenue numbers, list sizes, or marketing tactics. Your audit data stays confidential.
Who we are
This policy is issued by Ascenditt Digital Marketing ("we," "us," or "our"), which operates the Sendtonium Klaviyo Audit application at app.sendtonium.com. This policy explains how we collect, use, store, and share information when you use Sendtonium, including when you connect a Klaviyo account through OAuth.
Technical and organizational security controls are described in our Information Security Policy.
Information we collect
- Contact information you provide (such as name, email, phone, store URL, and industry) when requesting an audit or creating an account.
- Klaviyo account data accessed through read-only OAuth scopes, including account details, campaigns, flows, lists, segments, metrics, templates, tags, profiles, and subscriptions needed to run the audit.
- Audit results generated from your Klaviyo data, including scores, grades, evidence, and related report or deck content.
- Website capture data from your storefront URL when we analyze pop-up and on-site acquisition elements (screenshots and page HTML).
- Technical data such as IP address, browser type, and usage logs needed to operate and secure the service.
How we use information
- Run and deliver your Klaviyo marketing audit and related reports.
- Generate score summaries, sales materials, and follow-up recommendations.
- Communicate with you about your audit, booking, or support requests.
- Contact you by email and, if you provide a phone number, by text message (SMS) for sales and marketing-related messages about Sendtonium services, your audit results, and follow-up offers. Message and data rates may apply. You can opt out at any time.
- Improve our audit methodology, product experience, and security.
- Comply with legal obligations and enforce our terms.
Legal bases (GDPR Article 6(1))
If the EU or UK GDPR applies to our processing of your personal data, we rely on the following Article 6(1) legal bases. The specific basis depends on the purpose.
| Purpose | Article 6(1) basis |
|---|---|
| Create your account, run the audit, store the Klaviyo connection, and deliver scores, reports, and related service features | 6(1)(b) contract: processing is necessary to provide the service you requested |
| Send sales and marketing emails, and SMS to the phone number you provide | 6(1)(a) consent: you agree via the mandatory checkbox on the intake form (and you may withdraw consent) |
| Security, fraud prevention, debugging, product improvement, and internal operations that are not strictly required to fulfill a single audit | 6(1)(f) legitimate interests: operating a secure, reliable service, balanced against your rights |
| Keep records required by tax, accounting, or other law, and respond to lawful requests | 6(1)(c) legal obligation |
Where we rely on legitimate interests, you may object by contacting us. Where we rely on consent, you may withdraw it without affecting processing that already occurred.
Klaviyo OAuth and data access
When you connect Klaviyo, we request read-only OAuth permissions. We do not modify your Klaviyo account, send messages on your behalf, or write data back to Klaviyo through this integration. OAuth tokens are encrypted at rest and refreshed as needed to perform audits.
You can disconnect at any time from Integration settings. Disconnect calls Klaviyo's token revoke endpoint so the integration is removed on both sides. Stored audit records remain until you request deletion, as described below.
How we share information
We do not sell your personal information. We do not share sensitive business information, including sales or revenue figures, list sizes, campaign tactics, flow strategies, or other audit findings, with third parties for their marketing or commercial purposes.
We may share limited information only with:
- Service providers that help us host, secure, analyze, or deliver the product (for example cloud hosting, email delivery, and AI processing providers).
- Professional advisors where reasonably necessary for legal, accounting, or compliance purposes.
- Authorities when required by law or to protect rights, safety, and security.
How long we keep information
We keep the categories below until you ask us to delete them, unless a shorter or longer period is required for the reason stated.
| Category | Retention |
|---|---|
| Contact details, account records, Klaviyo connection tokens, audit results, reports, decks, and storefront captures | Until you request deletion. After a verified request we delete or irreversibly anonymize the records in our systems. |
| Security and application logs | At least 365 days, for security monitoring and incident investigation, then deleted or aggregated according to our hosting provider's log retention. |
| Information we must keep by law | Only as long as the legal, tax, accounting, or dispute-resolution requirement applies, then deleted. |
To request deletion, email hello@sendtonium.com. We may need to verify that the request comes from the account holder.
Security
We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit (HTTPS/TLS) and encryption for stored OAuth tokens. Details are in the Information Security Policy. No method of transmission or storage is completely secure.
Your choices
- Disconnect Klaviyo from Integration settings, which revokes OAuth tokens with Klaviyo.
- Request access, correction, or deletion of your personal information.
- Opt out of marketing emails by using the unsubscribe link or contacting us.
- Opt out of marketing text messages by replying STOP to any SMS we send or contacting us.
California privacy rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you additional rights regarding personal information we collect in connection with Sendtonium.
Categories collected. In the last 12 months we may have collected: identifiers (name, email, phone, account IDs); commercial and business information (store URL, industry, Klaviyo performance metrics, list-related metrics, and audit findings); internet or electronic activity (logs, device/browser data); and inferences drawn from that information for the audit score and recommendations.
Sources. Directly from you, from your Klaviyo account after you authorize OAuth, from your storefront URL, and from our service providers acting on our instructions.
Business purposes. Providing the audit and reports, customer communication (including marketing with your consent), security, debugging, and complying with law. We do not use or disclose sensitive personal information for purposes that require a right to limit under CPRA beyond providing the service.
We do not sell personal information and we do not "share" personal information for cross-context behavioral advertising as those terms are defined in the CCPA/CPRA. We do not sell or share the personal information of consumers under 16 years of age.
Your rights. Subject to exceptions in the law, you may request: (1) to know the categories and specific pieces of personal information we have collected, the sources, purposes, and categories of third parties; (2) deletion; (3) correction of inaccurate information; (4) to opt out of sale or sharing (we do not sell or share, but you may still send this request); and (5) non-discrimination for exercising these rights. You may use an authorized agent if they provide proof of authorization.
Submit requests by emailing hello@sendtonium.com with the subject line "California privacy request." We will verify the request (for example by matching the email to the account) and respond within the time required by law.
Contact us
Privacy questions, deletion requests, and California requests: hello@sendtonium.com. Company website: sendtonium.com.
Controller: Ascenditt Digital Marketing, operating Sendtonium.
Information security policy · Integration settings · Back to home