Coast Up Privacy Policy

Coast Up is a moving-related digital discovery service designed to help people identify organizations that may be connected to a previous address so they can review and update those organizations directly. Coast Up does not forward physical mail and does not submit address changes to third-party organizations on your behalf.

A. Account and authentication information

• Coast Up login email
• authentication / session information
• account identifiers

B. Move information

• previous address
• previous unit, if applicable
• new address
• new unit, if applicable
• moving date
• the address-validation result you chose

C. Mailbox connection information

• selected email provider
• connected mailbox email address
• server-side connection / grant identifier
• connection status
• connection and disconnection timestamps

Coast Up does not store your normal Gmail or Microsoft password. iCloud authentication uses an Apple app-specific password through the email-connectivity provider; Coast Up does not intentionally store that password in its application database.

D. Scan information

• scan status and number
• scan timestamps
• public sender / organization domains
• aggregate matching counts

E. Results

• organization name
• category
• priority
• official website
• completion status

F. Payment information

• Stripe checkout / session identifiers
• payment identifiers
• amount
• currency
• payment status
• relevant transaction timestamps

Coast Up does not receive or store your complete payment-card number.

G. Public provider-interest information

If you request support for an additional email provider from the public website, Coast Up stores the provider you selected and a cryptographic hash derived from a random first-party browser token so the same browser does not repeatedly submit the same request.

H. Partner Referral Program information

If you join the Coast Up Partner Referral Program, Coast Up may store your business or contact name, email address, business type, referral code, Partner Terms acceptance version and timestamp, aggregate referral activity, partner orders, client-credit records, and introductory reward records.

I. Technical and security information

Our hosting, security and infrastructure providers may automatically process ordinary technical information associated with web requests, such as IP address, browser/device information, timestamps and request logs, as necessary to operate, secure and troubleshoot the service. Coast Up does not use connected-mailbox data for targeted advertising.

Information may come:

• directly from you
• from the email provider and Nylas after you authorize a mailbox
• from Stripe regarding payment status
• from Google Address Validation
• from service operation and security systems
• from public web sources used to verify organization identities and official websites

When you start a scan, you instruct Coast Up and its email-connectivity provider to search the email account(s) you selected for indications related to your previous address. Depending on the email provider, the provider’s search system may inspect message text to locate matching messages.

Coast Up is designed to request only the minimum returned message fields necessary for discovery, such as a temporary message identifier, sender information and date.

Temporary message identifiers are used only for processing such as deduplication. Coast Up reduces sender addresses to organization domains and does not intentionally retain the sender’s mailbox local-part as part of the results system.

Coast Up does not intentionally request or retain complete email bodies, snippets, subjects, recipients, attachments, raw MIME content or attachment contents as part of its current scan architecture.

Attachments are not processed in the current version.

Google API Services Limited Use disclosure

Coast Up’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Gmail data is used only to provide the discovery feature you requested. Coast Up does not use Gmail data for advertising, does not sell it, does not transfer it except as necessary to provide the service, to comply with applicable law, or as part of a merger or acquisition, and does not allow humans to read it except with your explicit consent, for security purposes, to comply with applicable law, or where the data is aggregated and anonymized. Coast Up does not use Gmail data to train generalized artificial-intelligence or machine-learning models.

Mailbox access is purpose-limited. After a successful scan, Coast Up requests deletion/revocation of the corresponding Nylas mailbox grant. If revocation cannot immediately be confirmed, Coast Up does not intentionally represent the mailbox as disconnected until the provider confirms removal.

If you connect a mailbox but do not complete a scan, Coast Up is designed to automatically revoke stale mailbox access after approximately 24 hours. You may also disconnect a mailbox manually. Technical failures may delay revocation; Coast Up does not represent a mailbox as disconnected until revocation is confirmed.

Historical records showing which mailbox was scanned may remain after access has been revoked. A historical connection record is not active mailbox access.

Your 60-day results period does not mean your mailbox remains connected for 60 days.

Coast Up may send the address you ask it to validate to Google Address Validation for validation and standardization. The address is sent for that purpose only. Coast Up stores the final address you approve rather than Google’s complete raw validation response.

If you tell Coast Up where you are moving, Coast Up may look up general moving-related state and local requirements for that state or locality from official government sources.

Coast Up may provide the destination city and state to its service providers when necessary to locate and verify official government move requirements. A customer’s street address, mailbox content, scan results, and email address are not needed for this lookup.

Coast Up does not send your name, street address, email address, mailbox content or scan results to any government website, and results of these lookups are cached as general jurisdiction-level information rather than as information about you.

Coast Up uses OpenAI to assist with classification of public organization domains and organization-level information.

The resolver is designed to send organization-level information such as a public sender domain and proposed organization name.

It is not designed to send your previous address, new address, Coast Up login email, connected mailbox email address, email body or attachment to the AI organization resolver.

Public web-search tools may be used to verify an organization’s identity and official website using public organization information.

• authenticate and secure accounts
• provide Coast Up
• validate addresses
• create and maintain a move
• connect selected email accounts
• perform scans requested by customers
• classify and organize findings
• verify official organization websites
• maintain completion status
• administer the two-scan and 60-day access limits
• process and reconcile payments
• detect misuse, fraud and security incidents
• troubleshoot and support customers
• comply with legal obligations
• establish, exercise or defend legal claims when reasonably necessary

Coast Up uses providers acting in various technical roles, including:

• Stripe — payments
• Supabase — authentication, database and backend
• Nylas — email connectivity
• Google — Gmail authorization and Address Validation where applicable
• Microsoft — Microsoft / Outlook authorization
• Apple / iCloud — underlying iCloud Mail service
• OpenAI — public organization-domain classification / resolution
• Resend — transactional email delivery
• Lovable and applicable hosting infrastructure — website/application operation

We disclose information to service providers only as reasonably necessary for the functions they perform for Coast Up, subject to their applicable agreements and privacy practices.

• authentication / session technology used to keep you signed in
• essential application and security technology, including short-lived signed cookies used to protect email-connection and scan flows
• a cu_provider_interest random first-party token used only to prevent duplicate provider requests
• third-party cookies that may be used when you leave Coast Up for Stripe checkout or email-provider authorization
• referral cookies set only when you arrive through a partner referral link: cu_vid (a random anonymous visitor identifier), cu_ref (the partner’s referral code) and cu_ref_by (the partner’s business name, used only to show you who recommended Coast Up)

Partner referral tracking

When you arrive through a partner referral link, Coast Up records the referral code, a random anonymous visitor identifier and timestamps, for a limited attribution window of 30 days. Coast Up does not record your IP address, user agent or any browser fingerprint for referral purposes, and does not use third-party advertising or analytics trackers.

If you later purchase, Coast Up records that one purchase was attributed to that referral code. Partners see only aggregate counts — unique clicks, number of purchases and a conversion rate. A partner never receives your identity, email address, addresses, mailbox content or results, including when a partner paid for your Coast Up. A partner may receive one complimentary Coast Up client credit after three different customers purchase through their link; your price is the same either way.

Coast Up does not currently use connected-mailbox information for behavioral advertising.

Coast Up is designed around data minimization: use the provider’s search capabilities where practical, request limited returned fields, avoid attachment processing, store organization-level findings rather than complete email messages, and revoke live mailbox access after a completed scan.

Results are available to the customer for 60 days after results first become available.

Results-access expiration and legal/technical data retention are not necessarily the same event.

Coast Up retains personal information only for as long as reasonably necessary for the purposes described in this Policy, including service delivery, security, fraud prevention, dispute handling, accounting, legal obligations and system integrity.

Payment and transaction records may be retained longer where reasonably necessary for accounting, tax, fraud, dispute or legal purposes.

Public organization information stored in Coast Up’s reusable Company Registry is organization-level information and may be retained separately from customer-specific move records.

Coast Up does not sell connected-mailbox contents or customer addresses to advertisers.

Coast Up does not use connected-mailbox contents for targeted advertising.

If Coast Up’s practices materially change, this Policy will be updated and additional choices or notices will be provided when required by applicable law.

Coast Up uses reasonable administrative, technical and organizational safeguards designed to protect information, including restricted server-side access to sensitive credentials, purpose-limited mailbox authorization, provider-side authentication where available and data-minimization practices.

No Internet or information-storage system can be guaranteed to be completely secure.

Depending on where you live and applicable law, you may have rights to request access to, correction of, deletion of or portability of certain personal information, and to opt out of certain sale, sharing, profiling or targeted-advertising activities.

Coast Up does not require you to create a new account solely to submit a privacy request.

To submit a request, email info@coastupai.com.

We may take reasonable steps to verify your identity and authority before fulfilling a request.

Where applicable law permits an authorized agent to submit a request on your behalf, we may ask for proof of the agent’s authorization and may also verify your identity directly.

If applicable law gives you a right to appeal a privacy-request decision, reply to our decision or email info@coastupai.com with the subject Privacy Appeal.

Coast Up will not unlawfully discriminate against you for exercising applicable privacy rights.

Coast Up is intended for adults age 18 and older and is not directed to children.

Coast Up is currently designed primarily for U.S. residential moves and U.S. addresses.

We may preserve or disclose information when reasonably necessary to comply with applicable law, lawful process, enforce our agreements, protect users or the service, investigate fraud or security issues, or establish, exercise or defend legal claims.

If a security incident triggers legally required notification obligations, Coast Up will provide notices required by applicable law.

We may update this Privacy Policy as Coast Up changes. We will post the updated Policy and revise the Last Updated date. When required by applicable law, we will provide additional notice or obtain consent.

info@coastupai.com

See also our Terms of Service and Refund Policy.