Privacy Policy
Last updated October 26, 2026
This Privacy Policy explains how Stuart Saward (doing business as "Routeability") (“Routeability”, “we”, “us”) collects, uses, shares and protects personal data in connection with the Routeability platform and website. Our registered address is 106 Rolling Meadows Ln, Chapel Hill, NC 27517, USA.
Two roles. For personal data about your own account and users (for example names, emails, billing details), we are the controller. For personal data your organization uploads into the Service about your customers and contacts (“Customer Data”), you are the controller and we act as your processor, processing it on your instructions to provide the Service.
1. Data we collect
- Account data — name, work email, workspace and company details, and credentials.
- Billing data — subscription, plan and payment status. Card details are collected and stored by Stripe, our payment processor; we do not store full card numbers.
- Usage data — log and device data, pages viewed, and actions taken, used to operate and secure the Service.
- Customer Data — the records your organization chooses to store in the Service (for example your customers’ contacts, notes and commercial data).
- Communications — messages you send us (for example support or sales inquiries).
2. How we use personal data and our lawful bases
- To provide, maintain and secure the Service — performance of our contract with you.
- To process payments and manage subscriptions — performance of our contract and legal obligations.
- To communicate about the Service, including service and billing notices — contract and our legitimate interests.
- To improve and develop the Service, using aggregated or anonymized data — our legitimate interests.
- To comply with legal obligations and to establish, exercise or defend legal claims.
- For Customer Data, we process only on your instructions as set out in this policy and your agreement with us.
3. AI-assisted features
Some features use a third-party AI provider (Anthropic) to draft or analyse content. Where these features run, the relevant inputs are sent to the provider to generate output, which is then returned to the Service for your review. Output may be inaccurate and should be checked before you rely on it.
4. Sharing and sub-processors
We do not sell personal data. We share it with service providers who process it on our behalf, under contracts that require appropriate protection, and with authorities where required by law. Our current sub-processors are:
| Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing and subscription billing | USA / EU |
| Supabase | Application database, authentication and file storage | USA (us-east-1) |
| Vercel | Application and website hosting | USA / global edge |
| Amazon Web Services (SES) | Transactional and notification email | USA |
| Anthropic | AI-assisted drafting and analysis features | USA |
5. International transfers
Some providers are located outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards (such as standard contractual clauses) to protect it.
6. Retention
We keep account and billing data for as long as your account is active and as needed for legal, accounting and security purposes. Customer Data is retained while your subscription is active; after termination you may export it for a reasonable period, after which we may delete or anonymize it.
7. Security
We use technical and organizational measures to protect personal data, including encryption in transit, access controls, tenant isolation at the database level, and optional multi-factor authentication and single sign-on. No method of transmission or storage is completely secure, but we work to protect your data.
8. Your rights
Subject to applicable law, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, contact us at hello@routeability.com. Where we process Customer Data as a processor, we will refer requests from individuals to the relevant Customer (the controller) and assist as required. You may also complain to your data-protection authority (the relevant data protection authority in your jurisdiction).
9. Cookies
We use strictly necessary cookies to run the Service (for example to keep you signed in). If we use analytics or other non-essential cookies, we will describe them here and seek consent where required.
10. Children
The Service is for business use and is not directed to children. We do not knowingly collect data from children.
11. Changes
We may update this policy from time to time and will update the “last updated” date above. Material changes will be notified by email or in-app.
12. Contact
For privacy questions or to exercise your rights, contact us at hello@routeability.com.