Privacy Policy

Last updated 23 June 2026

addmy.bio is privacy-first by design. Profiles default to private (noindex), analytics are cookieless, and we never sell your data. This page explains what we process and the rights you have over it.

Data we process

Account data: the email you sign up with and authentication metadata.

Profile content you create: name, title, links, and contact details you choose to publish.

Subscriber data: contacts who opt in to your card updates (double opt-in, with a logged consent record).

Where your data lives

Your data is stored in the European Union on Cloudflare infrastructure (D1 database in the EEUR region, R2 object storage). Data is encrypted in transit.

Sub-processors

We rely on a small set of vetted providers to run the service:

• Cloudflare, Inc. — Hosting, edge compute, D1/R2/KV storage (EU (D1 EEUR))
• Resend — Transactional email delivery (EU/US)
• TBD (payment provider) — Subscription billing + EU VAT (TBD)

Analytics

We measure aggregate profile views and downloads with Cloudflare Analytics Engine. Analytics are cookieless and store no IP address — they cannot identify an individual visitor.

Your rights (GDPR)

You can access and export your data as JSON + .vcf at any time (/api/gdpr/export).

You can erase your account (/api/gdpr/delete): a soft-delete followed by a 30-day purge of all personal data.

You can rectify your details directly in the dashboard.

Contact

Questions or a data request? Email privacy@addmy.bio.

This is a prototype draft pending legal review.