Privacy Policy

NameRight is a document guidance and preparation tool that helps individuals navigate the legal name and gender marker change process in the United States. We are not a law firm and do not provide legal advice.

The data controller is NameRight, an individual-operated digital service. The privacy contact person (DPO): not applicable.

Privacy contact: support@nameright.app

Many of our users are LGBTQ+ individuals whose safety depends on the confidentiality of their personal information. We treat this as a safety commitment, not a legal formality. Concretely:

• We do not sell your data. Never has, never will.
• We do not use your data for advertising profiling.
• We minimize what we collect. Legal name, chosen name, and reason for change are optional fields, only used to personalize your filing plan.
• You can leave at any time. Delete your account and all associated data from your Settings page, or email us — deletion is initiated immediately and completed within 30 days (see Data Retention below).
• We shrink the exposure surface. Email subjects never contain your legal name; email bodies are scanned for your former name and replaced before sending.

If you ever have a question about where your data lives, who can see it, or when it is deleted, email support@nameright.app and a human will answer.

Account information: Email address and password (hashed) when you create an account.

Profile information: U.S. state, name change reason category, privacy preferences, timeline, and checklist status. Your current legal name and chosen name are optional and only used to personalize your filing plan.

Payment information: We do not store payment card details. Payment card data is processed exclusively by our PCI-DSS compliant payment processors Waffo Pancake and PayPal under their own privacy policies, and is never stored on our servers.

Automatically collected information: IP address, device type, operating system, browser type and time zone (inferred from the IP address), pages visited, features used, session duration, and operational logs (request time, error logs, performance data).

Usage data: Pages visited and features used, collected to improve the product.

We use your information solely to:

• Generate your personalized name change guide and checklist
• Save and sync your progress across sessions
• Send policy change alerts relevant to your state (opt-out available)
• Respond to support requests
• Improve and maintain the NameRight platform

We do not sell your data. We do not use your data for advertising profiling.

We use a limited number of third-party services to operate NameRight. Each is a processor we send the minimum data needed for that service; we do not sell your personal information and do not use it for advertising profiling:

• Supabase — encrypted database, authentication, and private document storage
• Waffo Pancake — payment processing (Merchant of Record, PCI-DSS compliant)
• PayPal — alternative payment processing
• Vercel — website hosting
• PostHog — privacy-friendly product analytics (PostHog Privacy Policy)
• OpenAI (or a configured AI provider) — AI-assisted guidance and document text extraction (OCR). When you use OCR or AI chat, the content you submit is sent to this provider only to process your request.
• Resend — transactional email delivery
• Sentry — error monitoring

These providers are contractually bound to protect your data and may not use it for any purpose beyond providing their services to us. OCR and AI chat are opt-in per action: you can decline OCR and type fields manually, and you should never paste a Social Security number, full date of birth, case number, or protected address into AI chat.

We retain your data for as long as your account is active. When you request account deletion, we begin deleting immediately and complete deletion of your account, database records, and uploaded files within 30 days. This does not apply to:

• Payment transaction records, retained up to 7 years as required by financial regulations.
• Support correspondence, retained up to 3 years.
• Backup copies, which expire on the backup schedule of our hosting provider (not instantly, but no later than the next backup rotation).
• Aggregate analytics, retained up to 12 months.

Uploaded sensitive documents (e.g. medical letters) use a shortened retention window: the original file is deleted 30 days after upload, and only OCR-extracted key fields are retained.

You have the right to access, correct, delete, or export your personal data at any time. Email support@nameright.app and we will begin processing your request within 30 days. Account deletion requests are initiated immediately; completion of all retention categories follows the schedule in Data Retention above.

We use PostHog (US-hosted) for product analytics to understand how the product is used and improve the experience. PostHog processes analytics data under its own privacy policy. We do not use advertising trackers and we do not sell your data.

Cookies:

• Strictly necessary (cannot be disabled): session and authentication cookies required to keep you logged in.
• Functional: preference cookies (e.g., dismissed banners).
• Analytics (can be disabled): PostHog analytics cookies. You can opt out at any time via Anonymous Mode or browser settings.

When Anonymous Mode is enabled, NameRight pauses session-level analytics for that browsing session. Core security, fraud-prevention, and service integrity logs may still be retained to keep the platform safe and reliable.

Anonymous Mode does not create a private browsing session in your browser or on your device. For additional privacy, consider using a privacy-focused browser profile or email address.

All data is encrypted in transit using TLS. At rest, data is stored on encrypted infrastructure provided by our cloud hosting providers. We use hashed passwords, row-level database security, and regular security reviews. We do not currently claim client-side, end-to-end encryption of uploaded documents; document storage uses our hosting provider's private storage with server-side access controls. For users with heightened safety needs, we recommend using a privacy-focused email address and the Quick Exit button visible in your browser tab.

In the event of a security incident affecting your personal data, we will notify you and, where applicable, relevant authorities within 72 hours of confirmation of the incident, consistent with GDPR requirements.

Government and legal requests: If we receive a subpoena, court order, or other legal demand for user data, our position is to (1) verify the request is valid and within our legal obligations, (2) limit the response to the minimum data actually demanded, and (3) notify the affected user before disclosure wherever the law permits, so they can seek protection (e.g. a motion to quash or a protective order). We will not voluntarily hand over user data to third parties or government bodies in the absence of a valid legal demand. If you believe you may be the target of such a request, contact us at support@nameright.app.

NameRight is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

Users aged 13–17: We allow teenagers to use NameRight because we recognize that many young people — particularly transgender youth — need name-change resources. When a user identifies as 13–17, we apply a minor account tier with additional privacy safeguards:

• Email notifications are disabled by default; communications appear only inside the app.
• Quick Exit is force-enabled and cannot be turned off.
• The account is flagged for shortened data-retention windows where applicable.
• Where state law requires parental consent for a legal name change (e.g. California SB 1475), we surface a guardian consent step before any document is generated.

Per COPPA, we do not knowingly collect personal information from children under 13 without verified parental consent.

Our servers and those of our service providers (including Vercel, Supabase, and PostHog) are located primarily in the United States. When personal data is transferred across borders, we rely on the following safeguards:

• Data processing agreements incorporating EU Standard Contractual Clauses (SCCs) with providers that store data outside your jurisdiction.
• Transfer to recipients that offer an adequate level of protection.
• We do not transfer your data for any purpose other than providing the Service.

NameRight is not a HIPAA-covered entity or business associate. The Health Insurance Portability and Accountability Act (HIPAA) only applies to healthcare providers, health plans, healthcare clearinghouses, and their business associates.

Some name-change workflows require you to upload a gender-marker letter from a licensed medical provider, or other documents that may contain medical information (e.g. physician signatures, diagnosis codes). When you upload such a document:

• The document leaves the protection of HIPAA and is governed instead by this Privacy Policy and applicable state privacy laws (e.g. CCPA/CPRA).
• We apply a shortened 30-day retention window for these documents, after which the original file is permanently deleted and only OCR-extracted key fields are retained.
• Medical information is only shared with processors needed to operate the service (e.g. the AI provider performing OCR), and never sold or used for advertising.

If you prefer to keep a document under HIPAA protection, do not upload it to NameRight. You may instead bring the original document directly to the filing court.

Many NameRight users are transgender or non-binary individuals whose safety depends on the confidentiality of their former name (sometimes called a "deadname") and gender history. We apply additional safeguards:

• Email outing prevention: Email subjects never contain your legal name. Email bodies are scanned for your former name and replaced with your chosen name (or a neutral greeting) before sending.
• Quick Exit: Press Escape twice or Ctrl/Cmd+Shift+X to leave the site immediately and erase your session.
• Anonymous Mode: Browse without persistent analytics.
• Sealed record guidance: Our state guides flag jurisdictions that allow sealing name-change records, which is particularly relevant for safety-conscious transgender filers.

This section applies to California residents under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). NameRight does not sell personal information and has not sold personal information in the preceding 12 months.

Categories of personal information collected: identifiers (name, email, address), customer records (account data, filing progress), internet activity (pages visited via analytics), and inferences drawn from the above (state of residence, filing readiness). Sensitive personal information (gender identity, former name) is collected only when you voluntarily provide it.

Your rights under CCPA:

• Know: Request disclosure of the categories and specific pieces of personal information collected.
• Delete: Request deletion of your personal information (subject to legal retention obligations).
• Correct: Request correction of inaccurate personal information.
• Opt-out of sale: NameRight does not sell your data, so no opt-out is necessary. No "Do Not Sell My Personal Information" link is required, but you may email us to confirm.
• Limit use of sensitive personal information: We do not use sensitive personal information for purposes other than providing the service you requested.
• Non-discrimination: We will not discriminate against you for exercising your CCPA rights.

How to exercise your rights: Email support@nameright.app with "CCPA Request" in the subject line. We will verify your identity before processing. Authorized agents may submit requests on your behalf with written permission.

Response time: We respond to verifiable requests within 45 days, extendable by an additional 45 days when necessary with notice.

If we make material changes to this Policy, we will notify you at least 15 days before the changes take effect by email and by updating this page with a new effective date. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

Email: support@nameright.app
We make reasonable efforts to respond to privacy-related requests in a timely manner.