Privacy Policy
Last updated: April 14, 2026
1. Introduction
Addrex ("we", "us", "our") operates the address validation API and related services. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.
2. Information We Collect
Account Information
When you create an account, we collect your email address, name, company name (optional), and payment information. This information is used to manage your account and process billing.
Your Address Data
When you submit addresses for validation via the API, we process the address data to return results. For real-time API calls, address data is processed in memory and is not retained beyond the request lifecycle.
USPS reference data used by Addrex is subject to USPS licensing terms and may not be extracted, downloaded, or used to compile mailing lists.
Data Retention and Deletion
- Demo uploads (anonymous) are processed in memory, results remain available for 24 hours, and are then permanently deleted. No backups are retained.
- Account uploads are retained in your account history until you delete them. After deletion, data is removed from production systems within 48 hours. Encrypted backups may retain fragments for up to 30 days before automatic purge.
- Upon request to [email protected], your account and all associated data will be permanently deleted within 14 business days.
- Demo uploads are temporary and are never sold, shared, repurposed, or used for marketing. They exist solely to demonstrate the service.
Batch Files
When you upload files for batch processing, we store the files temporarily to process them. Default retention is 7 days to allow re-downloads. You can configure shorter retention or request immediate deletion after processing.
Usage Data
We collect usage metrics such as request counts, response times, and error rates. This data is aggregated and does not include the content of your address queries.
3. How We Use Your Information
- To provide and maintain the Service
- To process payments and manage subscriptions
- To monitor usage and enforce rate limits
- To improve service quality and reliability
- To communicate with you about your account and service updates
- To comply with legal obligations
4. Data Retention
| Data Type | Retention |
|---|---|
| Real-time API requests | Not retained (processed in memory) |
| Batch files | 7 days default (configurable) |
| Account information | Duration of account + 30 days |
| Usage metrics | 90 days (aggregated) |
| Payment data | As required by financial regulations |
5. Data Sharing
We do not sell your personal data or address data. We may share data with:
- Payment processors (to handle billing)
- Infrastructure providers (to host the Service)
- Law enforcement (when required by law)
All third-party providers are bound by data processing agreements.
6. Security
We implement the following security measures:
- TLS 1.2+ encryption for all data in transit
- Encryption at rest for stored data
- Secure, revocable API key authentication
- Redacted logging (PII excluded by default)
- Regular security audits and monitoring
For more details, see our Security page.
7. Service Providers
We use a limited number of trusted service providers to operate Addrex:
- Stripe: payment processing (PCI-DSS certified)
- Supabase: authentication and session management
- Vercel: frontend hosting and CDN
- Cloudflare: DNS, DDoS protection, TLS termination
These providers process only the minimum data necessary for their function. None have access to your uploaded address data.
8. Data Location
All address data is processed on dedicated servers located in the United States. We do not transfer your address data outside of the US.
9. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Export your data in a portable format
- Opt out of non-essential communications
To exercise these rights, contact us at our contact page or email [email protected].
10. Cookies
We use essential cookies for authentication and session management. We do not use third-party tracking cookies. Analytics data is collected server-side without cookies.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or through the Service. Continued use after changes constitutes acceptance.
12. Contact
Questions about this policy? Contact us at our contact page or email [email protected].