Privacy Policy

1. Information We Collect

We collect information necessary to provide and improve the Platform, including:

• User-submitted information: Information you voluntarily provide, such as account registration details, contact information, addresses submitted for verification or management, payment information (processed via our payment processor), communications, and reviews or feedback submitted through the Platform.
• Automatically collected information: Technical data such as IP address, browser type, device information, pages visited, referring URLs, and timestamps, primarily for security, performance, and limited operational analytics.
• Payment information: When you make a purchase, payment details are collected and processed by our payment processor. We do not store full payment card numbers on our systems.
• Address verification data: Addresses you submit may be transmitted to our address verification provider solely to obtain USPS-verified address results.

We do not knowingly collect sensitive personal information beyond what is required for the services requested.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Platform and its features, including address verification and management.
• Process transactions and send related communications.
• Deliver transactional and service-related emails.
• Display real-time visitor activity indicators and social proof notifications on the website.
• Ensure security, prevent fraud, and comply with legal obligations.
• Respond to your inquiries and provide customer support.
• Enforce our terms and policies.

We do not use your information for advertising networks, data brokerage, or unrelated commercial purposes.

3. Our Commitment Regarding User-Submitted Information

We do not share, lease, sell, transfer, or copy any user-submitted information on our Platform for commercial, marketing, or third-party benefit.

This commitment means:

• We do not sell, rent, lease, trade, or otherwise monetize user-submitted information.
• We do not transfer or disclose user-submitted information to third parties for their independent marketing, advertising, or commercial purposes.
• We do not copy or replicate user-submitted information for distribution outside the limited operational needs of the Platform.
• Any processing by infrastructure or service providers occurs solely on our behalf, under contractual restrictions that prohibit them from using the information for their own purposes, and only to the extent necessary to deliver the specific function (e.g., hosting, payment processing, address verification, or email delivery).

We may disclose information only in the following limited circumstances: (a) with your explicit consent; (b) to comply with applicable law, regulation, legal process, or governmental request; (c) to protect the rights, property, or safety of Mass Address, our users, or the public; or (d) in connection with a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

4. Service Providers and Infrastructure

To operate the Platform, we engage the following providers who process information solely as necessary for their designated functions and under appropriate safeguards:

• Cloudflare — Domain hosting, DNS, content delivery, and security services.
• Supabase — Backend infrastructure and database services.
• Vercel — Application hosting and infrastructure.
• Smarty — Address verification only. Smarty receives submitted addresses solely to return a list of USPS-verified addresses and related metadata; it is not used for any other purpose.
• GitHub — Storage of our code repository. User-submitted information is not stored in or processed through the code repository.
• Postman — Delivery of emails related to Mass Address services (transactional and service communications).
• Stripe — Payment processing. Stripe handles payment card data in accordance with its own privacy policy and PCI standards.
• Evidence.io — Display of real-time visitor counts and related social-proof notifications on the website. This involves limited, primarily aggregated or non-identifying visitor activity data for operational display purposes.

These providers are contractually restricted from using user-submitted information for their own independent purposes. We do not permit them to share, sell, or otherwise exploit such information.

5. Cookies, Analytics, and Tracking Technologies

We use limited cookies and similar technologies necessary for Platform functionality, security, and performance. Evidence.io may use scripts to display real-time visitor indicators. You may control cookies through your browser settings. We do not use third-party advertising cookies or cross-site tracking for commercial profiling.

6. User Reviews

Reviews submitted by users through the Platform become a permanent part of the Platform’s records upon submission. Once a review has been submitted, a user cannot delete it. Reviews may be moderated for compliance with our terms of service (e.g., removal of illegal, abusive, or off-topic content at our discretion), but the original submission remains on record and cannot be withdrawn or deleted by the submitting user. By submitting a review, you acknowledge and agree to this permanent retention.

7. Data Security

We implement reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. These include the security features of our infrastructure providers (encryption in transit where supported, access controls, and monitoring). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain user-submitted information for as long as necessary to provide the services, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Reviews are retained indefinitely as described above. We may retain certain information in anonymized or aggregated form for operational analytics.

9. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access or request information about the data we hold.
• The right to correct inaccurate information.
• The right to request deletion of certain information (subject to legal exceptions and the permanent nature of submitted reviews).
• The right to opt out of the sale of personal information (we do not sell personal information).
• The right not to be discriminated against for exercising privacy rights.

To exercise rights, please contact us using the information below. We will respond in accordance with applicable law. California residents may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

10. Children’s Privacy

The Platform is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware of such collection, we will take steps to delete the information.

11. International Data Transfers

Our infrastructure providers may process data in the United States or other jurisdictions. By using the Platform, you consent to the transfer and processing of your information in these locations, which may have different data protection laws than your country of residence.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this page will reflect the most recent revision. Continued use of the Platform after changes constitutes acceptance of the updated policy. Material changes will be communicated where required by law.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact:

Mass Address ATTN: Chief Privacy Officer operations@massaddress.com Website: massaddress.com