Privacy Policy

1. Introduction

2. Information We Collect

2.1 Account Information

When you create an account, we collect information provided through our authentication partner, Clerk, including:

• Name and email address
• Profile photo (if provided)
• Authentication identifiers
• Social sign-in information (if you use Google, Apple, or other OAuth providers)

2.2 Contact Data You Provide

The primary function of Addressable is to store and organize your contacts. You may provide:

• Names and nicknames
• Email addresses and phone numbers
• Physical addresses (street, city, state, ZIP code)
• Notes, tags, and custom labels
• Any other information you choose to add to contact records

You can add contacts one at a time or import a file. If you import a spreadsheet or CSV, the file you upload is stored in our object storage in addition to the contact records created from it. If you use address autocomplete, the address text you type is sent to Google's Places API to return suggestions. Section 4.1 lists the providers involved in both.

2.3 Usage and Analytics Data

We automatically collect certain information when you use our services:

• Device information (browser type, operating system, device type)
• IP address and approximate location
• Pages viewed and features used
• Session recordings and interaction data (via FullStory) on our public marketing homepage only, to improve that page. Session replay does not run on signed-in pages or on invitation forms, so it never records your address book or the information a contact enters for you.
• Error reports and performance data (via Sentry)

2.4 Payment Information

If you subscribe to a paid plan, payment processing is handled by our partner, Polar. We receive:

• Subscription status and plan tier
• Billing cycle dates
• Transaction history

We do not directly store your credit card numbers or bank account details. This information is securely processed and stored by Polar in accordance with their privacy practices.

3. How We Use Your Information

We use the information we collect to:

• Provide our services: Store, organize, and display your contacts; enable sharing and export features.
• Process transactions: Manage subscriptions, process payments, and handle billing inquiries.
• Improve our platform: Analyze usage patterns, identify bugs, and develop new features.
• Communicate with you: Send service announcements, security alerts, billing notices, and respond to support requests.
• Ensure security: Detect and prevent fraud, abuse, and unauthorized access.
• Comply with legal obligations: Respond to legal requests and enforce our terms.

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We use trusted third-party services to operate Addressable:

• Clerk – Authentication and user management. Receives your name, email address, and sign-in identifiers.
• Supabase – Database hosting and backend infrastructure. Stores your account record and every contact in your address book.
• Hetzner – Application hosting and infrastructure. Runs the servers that process your requests.
• Cloudflare R2 – Object storage for contact imports. When you import a file, the file itself is uploaded to R2, so R2 receives every contact record it contains.
• TrueNCOA – USPS National Change of Address lookups. Receives the first name, last name, and postal address of the contacts whose addresses are checked, and returns any forwarding address on file with the USPS.
• Resend – Delivery of invitation and friend-request emails. Receives the recipient's email address, your name, the invitation link, and any personal message you add.
• Google Maps Platform – Address autocomplete. When you or someone filling in an invitation form types an address, that text is sent to the Google Places API to return suggestions.
• Upstash – Rate limiting and caching. Receives account identifiers and IP addresses, and briefly caches address autocomplete lookups and account profile data.
• Polar – Payment processing and subscription management. Receives your billing details and subscription status.
• Sentry – Error tracking and application monitoring. Receives diagnostic data about errors, which may include your account identifier.
• FullStory – Session replay on our public marketing homepage only; it does not run on signed-in pages or invitation forms, so it never records your address book.

Each of these providers processes data only to perform the function described above, and is not permitted to use it for its own purposes. We will update this list before adding a new provider that processes personal information.

4.2 Where Contact Data Leaves Our Systems

Most of your contacts are people who never signed up for Addressable, so we want to be specific about the two features that send their information to a third party:

• Address verification: Names and postal addresses are sent to TrueNCOA, which checks them against the USPS National Change of Address database to detect moves.
• Invitations: When you invite a contact or a friend, that person's email address is sent to Resend so the message can be delivered.

If you are the subject of a contact record stored in Addressable — for example, you filled in an invitation but never created an account — and want it corrected or removed, email [email protected].

4.3 With Your Consent

When you use features like contact sharing, the recipient will receive the contact information you choose to share. You control what information is shared.

4.4 Legal Requirements

We may disclose your information if required to do so by law, or in response to valid requests by public authorities (e.g., a court or government agency).

4.5 Business Transfers

If Addressable is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences
• Understand how you use our services
• Improve performance and functionality

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our services.

6. Data Retention

We retain your information as follows:

• Active accounts: We retain your data while your account is active and as needed to provide you with our services.
• Account deletion: When you delete your account, your account record and every contact in your address book are removed immediately, and your sign-in record is deleted from Clerk. Contact information you shared into other users' address books through invitations is redacted at the same time: your name, email, phone, address, and birthdate are erased from their copies. This cannot be undone.
• Erasure on request: If your information was shared into Addressable and you never had an account, you can still have it erased — email [email protected] and we will redact your personal information from every address book it appears in.
• Imported files: Files you upload through the import feature are retained in object storage and are not removed automatically when you delete your account. To have them deleted, email [email protected].
• Backup retention: Encrypted backups may be retained for up to 90 days for disaster recovery purposes.
• Legal and compliance: Certain records (such as payment history) may be retained for up to 7 years to comply with tax and financial regulations.

7. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (HTTPS/TLS) for all data transmission
• Encryption at rest for stored data
• Access controls and authentication requirements
• Regular security monitoring and auditing
• Secure, SOC 2 compliant infrastructure providers

While we strive to protect your information, no method of transmission or storage is 100% secure. Please use strong passwords and keep your login credentials confidential.

8. Your Rights and Choices

You have the following rights regarding your information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Update or correct inaccurate information through your account settings or by contacting us.
• Deletion: Request deletion of your account and associated data.
• Export: Download your contact data through the export features in the app.
• Communication preferences: Opt out of non-essential emails using the unsubscribe link in our communications.

To exercise these rights, please contact us at [email protected].

9. International Data Transfers

10. Children's Privacy

Addressable is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will take steps to delete such information.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: Request information about the categories and specific pieces of personal information we have collected.
• Right to delete: Request deletion of your personal information, subject to certain exceptions.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to opt-out of sale: We do not sell your personal information.

To submit a request, please email [email protected] with the subject line "California Privacy Request."

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page with an updated "Last updated" date
• Sending you an email notification for significant changes
• Displaying an in-app notification

Your continued use of Addressable after any changes indicates your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: