Privacy policy

Account data. Name, email address, and authentication details when you sign up, processed by our authentication provider. Workspace settings such as your brand kit, guardrails, and return address.

CRM and audience data. When you connect Salesforce or HubSpot, or upload a CSV, we receive the records you choose to sync: company names, contact names, titles, business email addresses, postal addresses, and opportunity attributes. You control what is imported and can disconnect at any time.

Recipient data. To produce and deliver mail we process recipient names, companies, and postal addresses, along with delivery tracking events from our print and mail partners.

Billing data. Payments are processed by Stripe. We never store full card numbers.

Usage data. Log and audit records of actions taken in the product (who approved what, when), which are part of the product itself.

To operate the service: resolving and verifying postal addresses, generating and printing mail pieces, tracking delivery, measuring campaign outcomes against holdouts, and creating follow-up tasks. To personalize message drafts, relevant contact and account attributes may be processed by a large-language-model provider. To bill you, support you, and secure the service. We do not sell personal information, and we do not use your CRM data to train models or to benefit any other customer.

Only the service providers needed to run Sincerely, each bound to process data solely on our instructions:

• Print and mail fulfillment (e.g., Lob) — recipient name, company, and postal address, plus the mail piece content
• Authentication (Clerk) — account identity and sessions
• Payments (Stripe) — billing details
• Hosting and data storage (Vercel, Neon) — application data
• Email delivery (Resend) — operational notifications
• Background jobs (Inngest) and message drafting (LLM inference providers)

We may also disclose information when required by law or to protect the service and its users.

If you received mail sent through Sincerely, the sender chose and controls your information; we processed it to produce and deliver the piece. You can ask the sender to stop, or contact us directly. Suppression in our system is immediate and global: once a recipient is suppressed, no further pieces are produced for them, in any campaign.

We keep workspace data while your account is active. On request, we delete your workspace data, subject to records we must keep for legal, billing, or audit purposes. Disconnecting a CRM stops future syncs; already-imported records remain until you remove them or ask us to.

Data is encrypted in transit, access is scoped per workspace, and every state-changing action is written to an audit log. No system is perfectly secure; report concerns to the address below.

We use only the cookies needed to keep you signed in and secure. No third-party advertising cookies.

If this policy changes materially, we will update the effective date and notify workspace owners. Questions or requests: adam@trysincerely.com.

Terms of service