Privacy Policy
Address CRM · Effective August 8, 2026
Address is operated by MimiJohn LLC, 23000 Windom St, West Hills, CA 91307. This explains what we collect, why, and what we will never do with it.
Two different kinds of people
This matters, so it comes first.
You — the person who signed up for Address. We hold your account details and we are responsible for them.
Your contacts — the people in your CRM. They never signed up with us and never agreed to anything with us. That data is yours; we simply store it on your behalf. We do not market to your contacts, sell their details, or use them for anything except showing them to you and delivering the messages you choose to send.
What we collect about you
- Your name, email, phone, job title, and photo if you upload one.
- Your company details: name, address, logo, phone.
- Your time zone, so reminders arrive at a sensible hour.
- Login records — when you signed in, and from what address.
- Basic usage: what you sent, when, and whether it was opened.
Your card number is never sent to us. Payment goes directly to Stripe, who return only a customer reference and the last four digits.
What you put in, on behalf of others
Contacts, notes, follow-ups, documents, message history. You decide what goes in. You are responsible for having the right to hold it, and for honouring any request from one of your contacts to see it, correct it, or have it deleted. We will help you act on such a request — email us.
What we never do
- We do not sell your data, or your contacts' data, to anybody.
- We do not use it to train AI models.
- We do not send marketing to your contacts.
- We do not share mobile numbers or messaging consent with third parties for marketing purposes.
Who we share it with, and why
Only the services needed to make Address work:
- Stripe — payments and billing.
- Resend — delivering the emails you send.
- Twilio — delivering text messages, where you use that option rather than sending from your own phone.
- Our hosting provider, which stores the database.
Each receives only what it needs to do its job. We also disclose information where the law genuinely requires it.
Our own access
We look at your account data only when you ask us to — to fix something you have reported — or where the law requires it. Access by an operator across account boundaries is recorded automatically.
Security
Traffic is encrypted in transit. Passwords are hashed, never stored in a readable form. Where the app stores card or bank details for you to key into another provider's system, they are encrypted at rest, the security code is never collected at all, and the full number can be wiped once you have used it, leaving only the last four digits.
No system is perfectly secure. If a breach affects your data we will tell you promptly and plainly.
How long we keep it
While your account is active, we keep what you put in. After an account goes inactive we hold the data for 90 days so you can come back or request an export, then it may be deleted permanently. Ask for deletion sooner and we will do it.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. California residents have specific rights under the CCPA, including to know what is collected and to request deletion. We honour those requests regardless of where you live, because drawing that line by geography would be a strange way to treat people.
Email john@address.cc. We aim to respond within a few days, and within 30 at the outside.
Cookies
One session cookie, so you stay logged in. No advertising trackers and no third-party analytics inside the app.
Children
Address is a business tool and is not for anyone under 18. We do not knowingly collect data from children.
Changes
If this policy changes materially we will email account admins. The effective date above reflects the current version.
Contact
MimiJohn LLC
23000 Windom St
West Hills, CA 91307
john@address.cc
See also our Terms of Service. Looking for the privacy policy for the Life Alert SMS follow-up program? That one is here.