Legal
Privacy Policy
Effective August 21, 2026
The short version. Fancyphonebook is a contact and relationship manager. We collect the account details needed to sign you in, and we store the contact records, notes, and files you put into your workspace. We do not sell personal information, and we do not use the contents of your workspace to train machine-learning models.
Data you enter about other people belongs to you. We hold it on your behalf and act on your instructions.
On this page
- Who we are
- Our role in your data
- What we collect
- How we use it
- Legal bases
- Google user data
- Sharing and sub-processors
- Email sending
- Retention
- Security
- Your rights
- International transfers
- Children
- Changes
- Contact
1. Who we are
Fancyphonebook is operated by Range Lab LLC(“Range Lab”, “we”, “us”). This policy explains how we handle personal information across the Fancyphonebook marketing site and the Fancyphonebook application.
For privacy questions or requests, write to privacy@fancyphonebook.com.
2. Our role in your data
Fancyphonebook holds two different kinds of personal information, and our responsibilities differ for each.
- Your account information.For the details that identify you as a customer — your name, email address, sign-in credentials, billing records — Range Lab is the controller. This policy describes what we do with it.
- Your workspace content. For the contacts, organizations, leads, notes, tasks, and files you put into Fancyphonebook, you are the controller and Range Lab is a processor. We store and process that content to provide the service and to follow your instructions. If you are uploading information about other people, you are responsible for having a lawful basis to do so.
3. What we collect
Account and profile data
Your name, email address, and workspace membership. If you sign in with Google or Microsoft, we receive your email address, name, and account identifier from that provider — never your password. If you sign in with a password, we store only a salted hash of it.
Workspace content
Whatever you choose to store: contact and organization records, lead pipelines and statuses, notes, tasks and activity history, calendar events, email templates and drafts, booking links, and files you upload to the Vault.
Integration data
If you connect Google Calendar, we store the access and refresh tokens needed to read and write the calendars you authorize, plus the event data required to display and sync your schedule. You can disconnect the integration at any time from the application settings, which revokes our stored tokens.
Email engagement data
When you send email through Fancyphonebook we record delivery events from our email provider — delivered, bounced, complained, opened, clicked — so that we can show sending statistics, honour unsubscribe requests, and keep our sending reputation healthy.
Technical and usage data
Server logs including IP address, browser and device type, pages requested, and timestamps. The Fancyphonebook marketing site uses Microsoft Clarity to understand how visitors navigate the page; Clarity records page interactions in an aggregated form. The application itself sets only the cookies required to keep you signed in — we do not run advertising trackers.
4. How we use it
- To provide, maintain, and secure the service.
- To authenticate you and keep your session active.
- To send transactional messages: sign-in links, password resets, service notices.
- To send email you compose, to the recipients you choose.
- To diagnose faults, prevent abuse, and investigate security incidents.
- To bill you, if you are on a paid plan.
- To comply with legal obligations.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not use the contents of your workspace to train machine-learning models. Where the product offers an optional AI feature, the specific text you submit to that feature is sent to our AI provider to generate a response for you and is not used by us for model training.
5. Legal bases (EEA and UK)
If you are in the EEA or UK, we rely on the following legal bases:
- Contract— to provide the service you signed up for and to bill for it.
- Legitimate interests— to keep the service secure, prevent abuse, and improve reliability, balanced against your rights.
- Legal obligation— to meet tax, accounting, and lawful-request requirements.
- Consent— where we ask for it, such as connecting an optional third-party integration. You may withdraw consent at any time.
6. Google user data
If you sign in with Google, we receive your email address, basic profile information, and Google account identifier. We use these solely to create and authenticate your Fancyphonebook account.
If you separately connect Google Calendar, we request access to your calendar data in order to display your schedule inside Fancyphonebook and to create events you ask us to create.
Fancyphonebook's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not transfer Google user data to third parties except as necessary to provide or improve the features you use, to comply with applicable law, or as part of a merger or acquisition; we do not use Google user data for advertising; and we do not allow humans to read your Google data unless you give explicit consent for specific items, it is necessary for security purposes or to comply with applicable law, or the data is aggregated and anonymised.
You can revoke our access at any time from your Google account permissions page or from within Fancyphonebook.
7. Sharing and sub-processors
We share personal information only with service providers who help us run Fancyphonebook, and only to the extent they need it. Each is bound by contract to protect the data and to use it only on our instructions.
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication, file storage | Account data, workspace content, uploaded files |
| Vercel | Application hosting and delivery | Request logs, IP addresses |
| Resend | Outbound email delivery | Recipient addresses, message content, delivery events |
| Optional sign-in and calendar integration | Account identifier, email, calendar data you authorize | |
| Microsoft | Optional sign-in; marketing-site analytics (Clarity) | Account identifier, email; aggregated page interactions |
| Stripe | Payment processing for paid plans | Billing contact and payment details, held by Stripe |
| OpenAI | Optional AI-assisted features | Only the text you submit to that feature |
We may also disclose information if required by law, to enforce our terms, or to protect the rights and safety of our users. If Range Lab is involved in a merger, acquisition, or sale of assets, personal information may transfer as part of that transaction; we will give notice before your information becomes subject to a different privacy policy.
8. Email sending
Fancyphonebook lets you send email to your contacts. You are the sender of that mail and you are responsible for its content and for complying with anti-spam law, including CAN-SPAM, CASL, and the GDPR where they apply.
Every message we send on your behalf carries an unsubscribe mechanism. When a recipient unsubscribes or a message hard-bounces, we add that address to a suppression list for your workspace and will not deliver further mail to it.
9. Retention
We keep your workspace content for as long as your account is active. If you delete a record, it is removed from the live database. If you close your account, we delete or anonymise your workspace content within 30 days, except where we must retain records for legal, tax, or dispute-resolution purposes. Backups are retained on a rolling basis and are overwritten in the normal course.
10. Security
Data is encrypted in transit with TLS and at rest by our hosting providers. Workspaces are isolated at the database level by row-level security policies, so one customer's queries cannot reach another customer's rows. Access to production systems is limited to personnel who need it.
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and any relevant regulator as required by law.
11. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete your information.
- Export your information in a portable format.
- Object to or restrict certain processing.
- Withdraw consent where processing relies on it.
- Lodge a complaint with your supervisory authority.
California residents have the rights described in the CCPA/CPRA, including the right to know, delete, and correct, and the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined by the CPRA.
Much of this you can do yourself from within the application. For anything else, email privacy@fancyphonebook.com and we will respond within the period required by applicable law. If you are a contact stored in someone else's Fancyphonebook workspace, please direct your request to that customer; we will forward it if you contact us instead.
12. International transfers
Range Lab operates from the United States, and our providers may process data in the United States and other countries. Where we transfer personal information out of the EEA or UK, we rely on the European Commission standard contractual clauses or another approved transfer mechanism.
13. Children
Fancyphonebook is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
14. Changes to this policy
We may update this policy as the product changes. When we make a material change we will update the effective date above and, for significant changes, notify account holders by email before the change takes effect.
15. Contact
Range Lab LLC
privacy@fancyphonebook.com