Privacy Policy

Who this covers

Cordial helps people see when their friends are free and make plans together. This policy covers this website, cordial.space, the waitlist, and the text messages we send.

The Cordial app is not publicly available yet. When it is, this policy will be updated to describe what the app collects before anyone can use it.

Our Terms of Service cover the rest of your use of Cordial, and the two are written to agree with each other.

If anything here is unclear, or you want your information removed, email hello@cordial.space.

What we collect

• Your email address, if you join the waitlist. That is the only thing this website asks you for.
• Your phone number, if you ask us to text you.
• Basic technical information that any website receives — your IP address, your browser type, and which pages you requested. We use it to keep the site working and to limit abuse of our forms.

We do not ask this website for your contacts, your calendar, or your location.

Text messages

If you opt in to text messages from Cordial:

• We text you about Cordial invitations and plans — someone inviting you to something, or a change to something you were already invited to. We do not send marketing or promotional texts.
• Message frequency varies. Message and data rates may apply.
• Reply STOP to any message to stop receiving them, or HELP for help.

We never share or sell your phone number or your SMS opt-in information.

Phone numbers and opt-in information collected for text messaging are not shared with, sold to, rented to, or otherwise disclosed to any third party for marketing purposes, and never to advertisers or data brokers. The only party that receives your number is our SMS delivery provider, Twilio, and only so that it can deliver the messages you asked for.

We store your number as a one-way cryptographic hash, so we can recognise it, alongside an encrypted copy so we can send to it. We also record when you agreed and the exact wording you agreed to, because proving consent means proving what you agreed to rather than only that you did.

If you opt out

If you reply STOP, we stop. So that this keeps being true, we add a one-way hash of your number to a permanent do-not-contact list. That hash cannot be turned back into your number and cannot be used to reach you — it exists only so every future message is checked against it and blocked.

This is the one record we do not delete on request, including if you later delete a Cordial account. Deleting it would make you contactable again, which is the opposite of what you asked for.

Who processes data for us

We use a small number of named providers, each for a single purpose. They act on our instructions and may not use your information for their own purposes.

• Twilio — sending text messages and verification codes
• Resend — sending email, including the waitlist confirmation
• Supabase — database hosting
• Fly.io — application hosting
• Vercel — website hosting
• Sentry — diagnosing errors and crashes

That list is complete. We do not disclose your information to anyone else, except where the law requires it of us.

What we never do

• We do not sell your personal information.
• We do not share your phone number or SMS opt-in information with third parties for marketing purposes.
• We do not use your information to build advertising profiles.

Your choices

• To stop texts, reply STOP to any message from us.
• To leave the waitlist, or to ask what we hold about you and have it corrected or deleted, email hello@cordial.space. The permanent do-not-contact hash described above is the single exception.

California privacy rights

Cordial operates from California. California law requires us to say how we respond to a browser’s Do Not Track signal: there is no agreed standard for what a site should do with one, so we do not treat it as a special instruction. It makes little practical difference here, because this site carries no advertising or analytics trackers, no third-party scripts watching what you do, and we do not follow you across other websites.

The only cookie this site may set remembers which language you prefer. We set none for advertising or analytics.

You can ask what personal information we hold about you, ask us to correct it, and ask us to delete it, by emailing hello@cordial.space. We will not treat you any differently for asking. Because we do not sell personal information there is no sale for you to opt out of, and the permanent do-not-contact hash described above remains the single thing we will not delete.

Keeping it safe

Phone numbers are encrypted where we store them and hashed where we only need to recognise them. Access to production data is limited to the people who operate the service.

No service can promise perfect security, and we would rather say that than imply otherwise.

Children

Cordial is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, email hello@cordial.space and we will remove it.

Changes to this policy

If we change this policy we will update the date at the top. If a change affects what you agreed to when you opted in to text messages, we will ask again rather than rely on the earlier agreement.

Contact

Email hello@cordial.space.