Privacy policy

We store your sign-in identity, profile name, forwarding inbox, brands, social-account metadata, email aliases, recovery notes you choose to add, and phone-rental records. Provider billing and service events may also be retained to prevent duplicate charges and investigate failures.

Passwords are encrypted in your browser before storage. Handlebook stores ciphertext and cannot decrypt it without your device-approved vault key, vault password, or recovery key. Phone verification messages are access-controlled, expire, and are not placed in browser storage or analytics.

We use information to operate forwarding, organize accounts, provide encrypted credential storage, provision phone services you request, prevent abuse, secure the service, and provide support. We do not sell personal information.

Handlebook relies on hosting, authentication, database, email, telecommunications, and analytics providers. They receive only the information needed to provide their service and are subject to their own terms and privacy commitments.

Account metadata is kept while your account is active. Short-lived verification messages expire automatically. You may download a data export and delete your account in Settings. The export excludes passwords, vault contents and text-message codes. Deletion removes Handlebook's records and uploaded brand logos but not records held by the payment processor. Active phone numbers and open subscriptions must end before account deletion.

During private beta, send privacy questions to the support contact shown below. This beta policy must be reviewed by qualified counsel before a broad public launch.