Legal
Terms of Service
Terms and conditions applicable to the use of the Toggles services and applications.
Last Updated: February 5, 2026
These Terms of Service ("Terms") govern access to and use of the Toggles services, applications, and websites (collectively, the "Services") provided by Lettau Ventures LLC, doing business as Toggles ("Toggles," "we," "us," or "our").
By accessing or using the Services, you ("Customer," "you") agree to be bound by these Terms. If you do not agree, you may not use the Services.
If you are using the Services on behalf of an organization, you represent and warrant that you have authority to bind that organization to these Terms.
1. Use of the Services
1.1 Eligibility
You must be at least 18 years of age or the age of majority in your jurisdiction to use the Services.
You may use the Services only in accordance with these Terms and all applicable laws. Paid use of the Services requires timely payment of applicable fees.
The Services integrate with and require Microsoft Outlook and Microsoft 365, which are governed by Microsoft's separate terms and policies. Your use of Microsoft services is subject to Microsoft's terms, and Toggles is not responsible for Microsoft's services or policies.
You are responsible for all use of the Services under your account.
1.2 Account Security
Each user must have a unique login. Sharing account credentials is prohibited. You are responsible for maintaining the confidentiality and security of all account credentials and for all activities that occur under your account.
1.3 User Responsibility for Email Content
The Services assist with email composition but do not send emails automatically. Users must review all email content, recipients, attachments, and settings before clicking "Send" in Microsoft Outlook. Customer is solely responsible for all emails sent using the Services, including accuracy of content, appropriateness of recipients, and compliance with applicable laws. Toggles is not liable for errors in emails that users send after reviewing and approving the content.
2. Acceptable Use
You agree not to use the Services:
In violation of applicable laws or regulations
To engage in phishing, fraud, deception, or unlawful solicitation
To infringe intellectual property or privacy rights
To transmit malware or attempt unauthorized access
You are responsible for ensuring that your use of the Services complies with all applicable data protection and privacy laws.
Toggles may suspend or terminate access to the Services if we reasonably believe you are using the Services in violation of these Terms or applicable law.
3. Customer Data and Data Protection
3.1 Customer Data
"Customer Data" means data, content, and information submitted to or processed through the Services by or on behalf of Customer.
Customer retains all rights, title, and interest in Customer Data.
3.2 Data Processing Roles
For purposes of applicable data protection laws, Customer is the data controller and Toggles is a data processor. Toggles processes Customer Data solely to provide the Services and in accordance with Customer's instructions, these Terms, the Privacy Policy, and the Data Processing Addendum (Exhibit A).
3.3 Customer Responsibilities
Customer represents and warrants that it has all rights, permissions, and lawful bases required to process Customer Data and to instruct Toggles to process such data on Customer's behalf.
Customer is responsible for the content of Customer Data and for determining whether Customer Data includes personal data or sensitive information.
3.4 Toggles' Use of Data
Toggles may access, use, and process Customer Data solely as necessary to:
Provide and support the Services
Maintain security and prevent abuse
Comply with legal obligations
Toggles will not sell Customer Data or use it for purposes unrelated to providing the Services.
3.5 Confidentiality
Each party ("Disclosing Party") may provide the other ("Receiving Party") with non-public business, technical, or commercial information that is marked or reasonably understood to be confidential ("Confidential Information"). The Receiving Party will (a) use Confidential Information only to perform under these Terms, (b) not disclose it to any third party except to its personnel and contractors who have a need to know and are bound by confidentiality obligations, and (c) protect it using at least reasonable care. Confidential Information does not include information that (i) is or becomes public through no fault of the Receiving Party, (ii) was lawfully known by the Receiving Party without restriction before receipt, (iii) is independently developed without use of the Confidential Information, or (iv) is lawfully received from a third party without breach of obligation. These obligations survive termination for three (3) years, and for trade secrets, for as long as protected by law.
4. Security
Toggles maintains administrative, technical, and organizational safeguards designed to protect Customer Data against unauthorized access, loss, misuse, or alteration, including encryption in transit, encryption at rest via secure infrastructure, access controls, authentication requirements, and security monitoring.
4.1 Security Incidents
Toggles will notify Customer without undue delay, and in any event within seventy-two (72) hours where required by applicable law, after becoming aware of a confirmed unauthorized access to Customer Data and will reasonably cooperate with Customer in investigating and remediating such incident.
4.2 Service Availability
Toggles uses commercially reasonable efforts to make the Services available 24/7, excluding scheduled maintenance. Toggles does not guarantee uninterrupted access and is not liable for downtime caused by third-party services (including Microsoft Outlook), internet disruptions, or events beyond Toggles' reasonable control.
5. Fees and Payment
Paid plans are billed in advance on a recurring basis unless otherwise stated.
All fees are exclusive of taxes, which Customer is responsible for paying as required by law.
Trial Subscriptions. Trial subscriptions require a valid payment method to be provided. If no payment method is provided before the trial period expires, the subscription will be paused and access to paid features will be suspended. To resume access, Customer must provide a valid payment method.
Failure to pay applicable fees may result in suspension or termination of access to the Services.
No Refunds. All payments are final and non-refundable. Toggles does not provide refunds or credits for partial months of service, upgrades, downgrades, or unused periods. If you cancel your subscription, you will continue to have access to paid features until the end of your current billing period.
6. Term and Termination
These Terms remain in effect until terminated.
Customer may terminate by canceling its subscription or discontinuing use of the Services.
Toggles may suspend or terminate access to the Services for material breach of these Terms.
6.1 Effect of Termination
Upon termination, Customer's right to use the Services ceases immediately.
6.2 Data Retention and Deletion
Upon termination, Customer may export Customer Data for thirty (30) days following termination. After thirty (30) days, Toggles will delete all Customer Data from production systems, except as required by law or for legitimate business purposes (e.g., backups retained per Toggles' standard backup retention policy, billing records). Deletion from backups will occur in accordance with Toggles' standard backup retention cycles.
7. Intellectual Property
Toggles retains all rights, title, and interest in the Services, including all related intellectual property.
Customer is granted a limited, non-exclusive, non-transferable right to use the Services during the term.
Any feedback, suggestions, or feature requests provided by Customer may be used by Toggles without obligation or compensation.
8. Warranties and Disclaimers
Each party represents that it has authority to enter into these Terms.
The Services are provided "as is." Toggles disclaims all implied warranties, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement, to the maximum extent permitted by law.
Toggles does not warrant that the Services will be uninterrupted, error-free, or meet Customer's specific requirements.
9. Indemnification
9.1 Customer Indemnification
Customer agrees to defend, indemnify, and hold harmless Toggles from claims arising out of:
Customer Data
Customer's use of the Services
Customer's violation of applicable laws or these Terms
9.2 Toggles Indemnification
Toggles agrees to defend, indemnify, and hold harmless Customer from third-party claims that the Services infringe a valid patent, copyright, or trademark, provided that Customer:
Promptly notifies Toggles of the claim
Grants Toggles sole control of the defense and settlement
Reasonably cooperates with Toggles in the defense
Toggles' obligations under this section do not apply to claims arising from Customer Data, modifications to the Services not made by Toggles, or use of the Services in violation of these Terms.
10. Limitation of Liability
10.1 Liability Cap
To the maximum extent permitted by law, Toggles' total liability for any claims arising out of or related to the Services shall not exceed the amounts paid by Customer to Toggles in the twelve (12) months preceding the claim.
10.2 Excluded Damages
In no event shall Toggles be liable for indirect, incidental, special, consequential, or punitive damages, including lost profits, lost data, or business interruption, even if Toggles has been advised of the possibility of such damages.
10.3 Exceptions
The limitations in this Section 10 do not apply to: (a) either party's indemnification obligations under Section 9, (b) breaches of confidentiality obligations, (c) gross negligence or willful misconduct by Toggles, or (d) violations of applicable law.
10.4 Limitations Not Applicable to Damages Caused by Third Parties
Toggles is not liable for damages caused by: (a) Customer's misuse of the Services, (b) the content or accuracy of Customer Data, (c) third-party services including Microsoft Outlook or Microsoft 365, (d) Customer's failure to review email content before sending, or (e) events beyond Toggles' reasonable control.
11. Privacy Policy
Customer's use of the Services is subject to Toggles' Privacy Policy, which is incorporated by reference.
12. Governing Law and Dispute Resolution
These Terms are governed by the laws of the State of Wisconsin, United States of America, excluding conflict-of-law principles.
Any dispute arising out of or related to these Terms or the Services shall be resolved by binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules, except that either party may seek injunctive or equitable relief in a court of competent jurisdiction to protect its intellectual property rights or confidential information.
Arbitration shall take place in Wisconsin. Each party shall bear its own costs and attorneys' fees, and the parties shall share equally the fees of the arbitrator.
Notice Address. All legal notices under these Terms shall be sent to: Lettau Ventures LLC, W212N6133 Legacy Trail, Menomonee Falls, WI 53051, or via email to support@gettoggles.com.
13. General
13.1 Entire Agreement
These Terms, including the Data Processing Addendum (Exhibit A) and Privacy Policy, constitute the entire agreement between the parties regarding the Services and supersede all prior agreements and understandings.
13.2 Severability
If any provision of these Terms is found unenforceable, the remaining provisions remain in full force and effect.
13.3 Modification of Terms
Toggles may update these Terms from time to time. Toggles will provide notice of material changes by email or through the Services at least thirty (30) days before the changes take effect. Continued use of the Services after the effective date constitutes acceptance of the updated Terms. If Customer does not agree to the updated Terms, Customer may terminate the Services in accordance with Section 6.
13.4 Assignment
Customer may not assign these Terms without Toggles' prior written consent. Toggles may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of its assets.
13.5 Waiver
No waiver of any provision of these Terms shall be deemed a further or continuing waiver of such provision or any other provision.
EXHIBIT A: DATA PROCESSING ADDENDUM
This Data Processing Addendum ("DPA") forms part of the Terms of Service between Toggles and Customer and applies when Toggles processes personal data on behalf of Customer.
1. Definitions
"Personal Data" means any information relating to an identified or identifiable natural person that is processed by Toggles on behalf of Customer in connection with the Services.
"Data Protection Laws" means all applicable laws and regulations relating to privacy and data protection, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other similar laws.
"Subprocessor" means any third party engaged by Toggles to process Personal Data on behalf of Customer.
2. Scope and Roles
2.1 Scope of Processing
Toggles processes Personal Data solely to provide the Services as described in the Terms of Service and in accordance with Customer's documented instructions.
The subject matter, duration, nature, and purpose of processing, and the types of Personal Data and categories of data subjects are described in Appendix 1 to this DPA.
2.2 Data Controller and Data Processor
Customer is the data controller (or equivalent under applicable Data Protection Laws) and determines the purposes and means of processing Personal Data.
Toggles is a data processor (or service provider under applicable Data Protection Laws) and processes Personal Data only on behalf of and in accordance with Customer's instructions. Toggles will not retain, use, or disclose Personal Data for any purpose other than providing the Services, except as permitted by applicable law.
3. Customer Instructions and Compliance
3.1 Processing Instructions
Toggles will process Personal Data only in accordance with Customer's documented instructions, which include:
Providing the Services as described in the Terms of Service
Complying with Customer's configurations and settings within the Services
Complying with other reasonable instructions provided by Customer that are consistent with the Terms of Service
3.2 Compliance with Data Protection Laws
Customer represents and warrants that:
Customer has a lawful basis for processing Personal Data and instructing Toggles to process Personal Data on Customer's behalf
Customer's instructions to Toggles comply with applicable Data Protection Laws
Customer has provided all required notices and obtained all required consents for the processing of Personal Data
3.3 Unlawful Instructions
If Toggles believes that an instruction from Customer violates applicable Data Protection Laws, Toggles will promptly inform Customer and may suspend processing until the instruction is confirmed or modified.
4. Toggles' Obligations
4.1 Confidentiality
Toggles will ensure that all personnel authorized to process Personal Data are subject to obligations of confidentiality.
4.2 Security Measures
Toggles implements and maintains appropriate technical and organizational measures to protect Personal Data against unauthorized or unlawful processing, accidental loss, destruction, damage, alteration, or disclosure, as described in Section 5 below.
4.3 Assistance with Data Subject Requests
Toggles will, to the extent legally permitted and reasonably possible, assist Customer in responding to requests from data subjects exercising their rights under Data Protection Laws (e.g., access, correction, deletion, portability).
If Toggles receives a data subject request directly, Toggles will promptly redirect the request to Customer.
4.4 Assistance with Compliance
Toggles will, to the extent reasonably possible, assist Customer in meeting Customer's obligations under Data Protection Laws, including obligations related to security, breach notification, and data protection impact assessments.
4.5 Deletion or Return of Personal Data
Upon termination of the Services, Toggles will delete or return all Personal Data in accordance with Section 6.2 of the Terms of Service, except where retention is required by law.
4.6 Audit and Documentation Rights
Toggles will make available to Customer information reasonably necessary to demonstrate compliance with this DPA, including security documentation, policies, and procedures upon reasonable request.
If Customer reasonably believes that such documentation is insufficient to demonstrate compliance, Customer may submit specific written questions regarding Toggles' compliance, which Toggles will answer in writing within thirty (30) days.
Customer may not conduct on-site audits of Toggles' facilities or systems. If Customer has regulatory obligations requiring third-party verification of Toggles' security practices, the parties will discuss mutually acceptable alternatives, which may include questionnaires, certifications, or attestations.
5. Security Measures
Toggles implements the following technical and organizational measures to protect Personal Data:
5.1 Encryption
Data in transit: Industry-standard encryption using TLS
Data at rest: Encrypted storage via secure infrastructure provided by Supabase and Microsoft Azure
5.2 Access Controls
Role-based access controls limit access to Personal Data to authorized personnel only
Multi-factor authentication required for Toggles administrative access
Access to Personal Data is logged and monitored
5.3 Infrastructure Security
Services hosted on secure, third-party cloud infrastructure (Supabase, Microsoft Azure) with industry-standard physical and network security
Regular security updates and patches applied to systems and software
Regular automated backups of data
5.4 Vendor Management
Third-party Subprocessors are evaluated for appropriate security practices before engagement
List of Subprocessors is maintained and available to Customer upon request
5.5 Incident Response
Security incident monitoring and response procedures are in place
Breach notification provided to Customer without undue delay as described in Section 6
5.6 Limitations
Toggles does not currently maintain third-party security certifications such as SOC 2 or ISO 27001. The security measures described in this Section 5 are appropriate and reasonable for the nature, scope, and scale of the Services and the Personal Data processed.
6. Security Incidents
6.1 Notification
Toggles will notify Customer without undue delay, and in any event within seventy-two (72) hours where required by applicable law, after becoming aware of a confirmed security incident involving unauthorized access to, disclosure of, or loss of Personal Data ("Security Incident").
6.2 Incident Information
Notification will include, to the extent known at the time:
A description of the nature of the Security Incident
The categories and approximate number of data subjects and Personal Data records affected
The likely consequences of the Security Incident
Measures taken or proposed to address the Security Incident and mitigate its effects
6.3 Cooperation
Toggles will reasonably cooperate with Customer in investigating and remediating the Security Incident, including providing information reasonably necessary for Customer to meet its own breach notification obligations under Data Protection Laws.
7. Subprocessors
7.1 Authorization
Customer authorizes Toggles to engage Subprocessors to process Personal Data on Customer's behalf, subject to the terms of this DPA.
7.2 Current Subprocessors
Toggles currently engages the following Subprocessors:
Supabase, Inc. (authentication, database services)
Microsoft Corporation (Microsoft 365, Outlook integration, Azure cloud services)
A current list of Subprocessors is available upon request.
7.3 New Subprocessors
Toggles will provide Customer with notice of any new Subprocessor at least thirty (30) days before engaging the new Subprocessor. Customer may object to the engagement of a new Subprocessor on reasonable data protection grounds by notifying Toggles in writing within thirty (30) days of notice. If the parties cannot resolve the objection, Customer may terminate the affected Services without penalty.
7.4 Subprocessor Obligations
Toggles will ensure that any Subprocessor is bound by written agreements imposing data protection obligations substantially similar to those in this DPA.
Toggles remains liable to Customer for the performance of Subprocessors under this DPA.
8. International Data Transfers
8.1 Data Storage Locations
Personal Data is primarily stored in data centers located in the United States.
8.2 Transfer Mechanisms
If Toggles processes Personal Data originating from the European Economic Area (EEA), United Kingdom, or Switzerland, Toggles will ensure that appropriate safeguards are in place for such transfers as required by applicable Data Protection Laws, including:
Standard Contractual Clauses approved by the European Commission, or
Other lawful transfer mechanisms recognized under Data Protection Laws
Customer may request a copy of applicable transfer mechanisms by contacting Toggles.
9. General DPA Terms
9.1 Conflict
In the event of any conflict between this DPA and the Terms of Service, this DPA prevails with respect to the processing of Personal Data.
9.2 Liability
Each party's liability under this DPA is subject to the limitations and exclusions set forth in Section 10 of the Terms of Service.
9.3 Duration
This DPA remains in effect for as long as Toggles processes Personal Data on behalf of Customer.
APPENDIX 1 TO DPA: DETAILS OF PROCESSING
Subject Matter of Processing
Provision of email productivity and workflow automation services through the Toggles for Outlook add-in.
Duration of Processing
For the duration of the Services, as set forth in the Terms of Service.
Nature and Purpose of Processing
Toggles processes Personal Data to enable Customer to:
Create, store, and apply email templates and workflows
Insert variable content into emails
Attach files to emails
Pre-fill email recipients, subjects, and content
Schedule or delay email sending
Customer emails are sent via Microsoft 365/Outlook. Toggles does not independently send emails. Customer Data stored by Toggles primarily consists of workflows, templates, configuration, and usage metadata, and may include content Customer chooses to store in templates or workflows.
Types of Personal Data
Personal Data processed may include:
Email addresses
Names
Job titles
Contact information
Email content created or processed through the Services
File attachments included in email workflows
User account information (usernames, authentication credentials)
Usage data and logs
The specific types of Personal Data depend on Customer's use of the Services and the content of Customer Data.
Categories of Data Subjects
Data subjects may include:
Customer's employees, contractors, and authorized users of the Services
Customer's clients, customers, and other third parties with whom Customer communicates using the Services