Do Not Sell or Share My Personal Information

Last updated: June 23, 2026

This page describes the rights of California residents and other US-state residents under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), and similar laws in Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, and other states. Read our full Privacy Policy for complete details of our data practices.

We do not sell your personal information

RecallStream has not sold personal information and does not intend to do so. We also do not "share" personal information for cross-context behavioural advertising — meaning we do not disclose your personal data to third parties so they can serve you targeted ads based on your activity across other websites or services.

We have never offered an opt-out mechanism for data sale because we have never engaged in data sale or sharing for advertising purposes. We publish this page so that California and other US residents have a clear, affirmative statement of our practices, as required by the CCPA/CPRA and similar state laws.

Although we do not sell or share personal data for advertising, we do disclose personal information to the following categories of recipients in order to operate the Service:

Cloud and infrastructure providers (Hetzner) — to host the Service and store data securely.
CDN and network security providers (Cloudflare) — to deliver the Service reliably and protect against DDoS attacks.
Transactional email provider (Resend) — to send the account, verification, and recall-alert emails you request.
Merchant of record (Paddle) — Paddle is the seller of record for subscriptions and receives the billing data necessary to complete your transaction, invoicing, and tax.
Analytics (Plausible, cookieless) — privacy-friendly aggregate analytics with no cookies, no cross-site tracking, and never used for advertising profiling.

RecallStream does not publish content on your behalf to any social media platform. Unlike social media management tools, we do not have any relationship with third-party social platforms and do not disclose your data to them. All data disclosures are to service providers who process data exclusively on our behalf, under contract, and solely to help us operate RecallStream — except Paddle, our merchant of record, which acts as an independent business for payment processing.

If you are a California resident, you have the following rights under CCPA/CPRA:

Right	What it means
Right to know	Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, our purposes, and categories of third parties we share it with.
Right to access	Receive a copy of the specific personal information we hold about you.
Right to delete	Request deletion of your personal information, subject to certain legal exceptions (such as retaining billing records for statutory periods).
Right to correct	Request correction of inaccurate personal information we hold about you.
Right to limit use of sensitive PI	Limit our use of sensitive personal information to purposes permitted under CPRA. We do not use sensitive personal information beyond those permitted purposes.
Right to opt out of sale/sharing	We do not sell or share personal information for advertising. If you submit a request, we will confirm our non-sale status in writing.
Right to non-discrimination	We will not discriminate against you for exercising any of these rights — we will not deny service, charge different prices, or provide a different quality of service.

Under CPRA, "sensitive personal information" includes data such as social security numbers, account login credentials combined with passwords, precise geolocation, racial or ethnic origin, health information, and similar categories. RecallStream collects a limited set of data: email address, hashed password, billing name, and usage metadata. We do not collect health information, precise geolocation, government ID numbers, or other sensitive categories beyond account credentials. Account credentials are used exclusively to authenticate you to the Service and are not used for any other purpose beyond those permitted under CPRA Section 1798.121.

You can exercise your CCPA/CPRA rights in the following ways:

In-app: go to Settings → Privacy → Manage my data to access, export, or delete your account data.
Email: send a request to privacy@recallstream.com with the subject line "California Privacy Rights Request". Please state the right you wish to exercise and include enough information to allow us to verify your identity.
Authorised agents: you may designate an authorised agent to submit a request on your behalf. The agent must provide written proof of authorisation.

We will respond to verified requests within 45 calendar days. If we need additional time (up to 90 days in total), we will notify you and explain why. Verification typically requires you to confirm your email address from within your account.

No cost to you: Exercising your CCPA/CPRA rights is always free. We will not charge you for submitting up to two requests in any 12-month period.