Do Not Sell or Share My Personal Information

Your California Privacy Rights

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information:

• Right to Know: You can request information about what personal data we collect, use, and disclose.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Opt-Out: You can opt-out of the sale or sharing of your personal information (though we do not engage in such practices).
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

What We Do With Your Information

We use your information to provide and improve our services, and to understand how people find and use our website and the dashboard. Once you sign in, your account details are attached to that analytics profile and to error reports. We share data with service providers who help us operate our platform:

• Stripe: Payment processing (billing information only)
• Twilio: SMS delivery (phone numbers and message content)
• Convex: Database hosting (account and campaign data)
• WorkOS: Authentication (login credentials)
• Vercel: Website hosting and file storage (guides, QR codes, logos)
• Resend: Email delivery (account emails, like team invitations)
• PostHog: Product analytics and attribution (which pages people visit and how they found us, using cookies)
• Sentry: Error monitoring (errors, and on some visits a screen replay with text and images masked)
• Cloudflare Turnstile: Bot protection on our forms
• Anthropic and OpenAI: AI processing (content you send through our AI features, which they do not train their models on under the API terms we use them on)

These service providers are contractually bound to use your data only to provide services to us and are prohibited from using it for their own purposes. Sharing data with a service provider this way is not a "sale" under CCPA, and we do not sell or share your personal information for cross-context behavioral advertising.

Additional State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy laws have similar rights. We honor these rights for all our users regardless of location.

How to Exercise Your Rights

To exercise any of your privacy rights, please contact us using one of the methods below. We will respond to your request within 45 days as required by law.

Verification Process

To protect your privacy, we will verify your identity before fulfilling any request. This may include confirming information you previously provided to us or, for deletion requests, additional verification steps.

Authorized Agents

You may designate an authorized agent to make requests on your behalf. The agent must provide proof of authorization, and we may still require you to verify your identity directly with us.