Legal Compliance
How TurboSender aligns with global and Indian regulations including GDPR, DPDPA, IT Act, and CAN-SPAM.
Effective: March 1, 2026 · v1.0 · ViViD App Studio
1. India — IT Act 2000 & IT Rules 2011
TurboSender operates in compliance with the Information Technology Act, 2000 and the IT (Reasonable Security Practices) Rules, 2011. Our privacy-first architecture ensures no sensitive personal data is collected or processed on our servers.
2. India — Digital Personal Data Protection Act (DPDPA) 2023
We support compliance with India's DPDPA by:
- Not collecting personal data from users on our servers
- Providing transparency about local data storage in this legal suite
- Providing clear mechanisms to delete all locally stored data
- Maintaining a comprehensive data retention policy
3. EU — General Data Protection Regulation (GDPR)
EU users of TurboSender have the following rights under GDPR:
- Right to Access: We hold no personal data about you on our servers
- Right to Erasure: Locally stored data can be deleted via Settings → Reset
- Right to Portability: Your local data is accessible through Chrome's extension storage
- Data Minimization: We collect no personal data — minimal by design
4. USA — CAN-SPAM Act
Users sending commercial messages to US-based recipients are responsible for CAN-SPAM compliance, including:
- Not using deceptive subject lines or false header information
- Including a valid physical address in commercial messages
- Honoring opt-out requests within 10 business days
- Clearly identifying messages as advertisements where applicable
5. Anti-Spam Compliance
TurboSender's Acceptable Use Policy strictly prohibits use for spam. We implement technical controls (rate limiting, delay enforcement) to discourage spam behaviour, and we terminate access for users who violate anti-spam provisions.
6. Reporting Non-Compliance
Report abuse or misuse of TurboSender to: compliance@turbosender.in. Please include the account/number involved, nature of abuse, and any supporting evidence.