Privacy Policy

1. Information We Collect

For Recipients (Topic Owners)

• Account information (email, display name) when you sign up
• Topics you create and their settings
• Notification preferences

For Senders (Anonymous Users)

• Message content (stored for delivery)
• Optional: Reply email address (only if sender opts in)
• A one-way hash of your IP address and device details, kept for abuse prevention only (30 days)

2. How We Protect Sender Anonymity

Feedback can be submitted without login. No sender name, email, or account is collected by default. Messages are stored without any sender identity fields.

Optional Reply Opt-in

If a sender chooses to receive a reply, they may optionally provide an email address. This contact information is:

• Stored in our database (not separately encrypted by us)
• Never shown to the recipient
• Not shown in our admin tools

Only automated systems use this information, to deliver reply notifications.

3. Employee Access

Our administrative tools do not display sender contact information. Staff with direct database access could read a reply email address, so access to the database is limited to the people who run the Service.

4. Data Minimization

IP addresses, device fingerprints, and identifying metadata are not retained beyond what is required for basic abuse prevention. Logs are intentionally designed to exclude sender-identifying information.

5. How We Use Information

• Deliver messages to intended recipients
• Moderate content to prevent abuse
• Prevent spam and rate limit abuse
• Improve the Service

6. Data Retention and Deletion

How long we keep each kind of data:

• Account, topics, and the feedback sent to them: until you or the sender delete them.
• Hashed IP, device details and link-visit details: cleared after 30 days.
• Text of messages our filter blocked: deleted after 30 days.
• Rate-limit counters: 7 days. Delivery logs: 90 days. Security audit log (hashed ids, no message text): 12 months.
• Private-link tokens: 30 days after they expire.

If you have an account

Go to Settings, then Account, then Delete Account. This deletes your account, handles, topics, the feedback sent to them, your block list, and push messages sent to your email. Two things are kept with your account removed from them: messages you sent to other people (they belong to the person who received them) and abuse reports you filed. Security log entries hold only hashed ids and are kept for the period above. Payment records, if you paid, are kept as long as tax and dispute rules require, and are not used for anything else.

If you sent feedback without an account

We do not store who sent a message, so we cannot find a message that was sent without a reply email. To remove one, ask the person who received it to delete it. If you gave a reply email, use Delete the messages I sent: we email you a link and, when you confirm, delete every message sent with that address.

Copies we cannot delete at once

• Backups at our database host keep deleted data until they roll off.
• Our email provider keeps a delivery log of mail we sent, including the address.
• Message providers (such as Twilio or Telegram), if you use those channels, keep their own delivery logs.

7. Third-Party Services

We use the following third-party services:

• Email delivery (Resend)
• Payment processing (our payment providers) - for paid plans only
• Hosting and database (Supabase)
• Product analytics and error alerts (PostHog). We send only a short list of events with no content: for example "a message failed to send" with a reason code, or "checkout started" with the plan name. We never send message text, sender or recipient identity, email addresses, link tokens or your IP address or location, and we do not use autocapture or session replay. Events are kept for 90 days.

8. Your Rights

You have the right to:

• Access your account data
• Delete your account and associated data
• Opt out of non-essential communications

9. Contact

For privacy concerns, please contact us through the Service.