Privacy Policy

From buyers (the person placing the order):

• Your first name
• Your email address
• Payment information (processed and stored securely by Stripe; we never see or store your full card details)
• Your responses to our intake form, which may include personal stories, memories, and observations about another person

About recipients (the person receiving the messages):

• Their first name
• Their phone number
• Personal information shared by the buyer about them, including memories, qualities, habits, and anything else the buyer chose to provide

Recipients do not interact with our website and do not provide information directly to us. The information we hold about recipients is provided by the buyer.

Automatically collected:

• Basic usage data (pages visited, browser type, device type)
• IP address
• Cookies for site functionality and analytics

We use the information we collect to:

• Generate personalized messages for your order
• Deliver messages to the recipient via SMS or WhatsApp through Telnyx
• Process payment through Stripe
• Send you order confirmation and campaign update emails
• Respond to support requests
• Detect and prevent abuse of the service
• Improve the product over time

We do not sell your data. We do not use your data for advertising targeting. We do not share your data with third parties except as described in Section 4.

We share data only with the services necessary to operate From Someone:

• Stripe: payment processing. Stripe's privacy policy applies to payment data.
• Telnyx: SMS and WhatsApp delivery. Recipient phone numbers and message content are transmitted to Telnyx to deliver messages.
• Airtable: order and message storage. Your order data and generated messages are stored in Airtable.
• Anthropic (Claude API): message generation. The information you provide in the intake form is sent to Anthropic's API to generate personalized messages. Anthropic's privacy policy applies to this data.
• Resend: transactional email delivery. Your email address is used to send order confirmations and notifications.

We do not share your data with advertisers, data brokers, or any other third parties.

Recipients are third parties who did not sign up for our service and did not provide their information directly to us. We take this seriously.

Recipient phone numbers and personal information shared by buyers are used solely to deliver the campaign the buyer purchased. We do not use recipient data for any other purpose. We do not contact recipients for marketing purposes. Recipient data is deleted when the campaign ends or when requested.

Any recipient who wishes to have their information removed from our systems may contact us at someone@fromsomeone.co or abuse@fromsomeone.co and we will delete their data promptly.

• Active orders: retained for the duration of the campaign plus 30 days
• Completed orders: retained for 90 days after the campaign ends, then deleted
• Abandoned orders (no payment within 48 hours): deleted automatically
• Block list entries (numbers that texted STOP or REPORT): retained permanently to prevent future contact
• Buyer email addresses: retained for as long as your account is active or as needed to respond to support requests

You may request deletion of your data at any time by contacting someone@fromsomeone.co.

Depending on where you are located, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict how we process your information
• Receive a copy of your information in a portable format

To exercise any of these rights, contact us at someone@fromsomeone.co. We will respond within 30 days.

From Someone is operated in the United States. If you are accessing the service from outside the United States, please be aware that your information may be transferred to and processed in the United States.

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR). We are not currently operating at a scale that triggers full GDPR compliance obligations, but we are committed to handling your data responsibly. If you have questions about your rights under GDPR, contact us at someone@fromsomeone.co.

We use cookies to keep the site functioning and to understand how it is being used. We do not use cookies for advertising targeting.

You can disable cookies in your browser settings, though some site functionality may be affected.

We take reasonable measures to protect your data from unauthorized access, including encrypted transmission (HTTPS), access controls on our data storage, and use of reputable third-party services with strong security practices.

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, contact us immediately at someone@fromsomeone.co.

For privacy questions or data requests: someone@fromsomeone.co
For abuse reports: abuse@fromsomeone.co