Effective April 19, 2026

Privacy Policy

Derive Software Inc. (“Company,” “we,” “us,” or “our”) operates the Derive website at deriveir.app (the “Site”). This Privacy Policy describes how we collect, use, and protect information when you visit the Site or subscribe to Derive Journal.

1. Information We Collect

Email Address. When you subscribe to Derive Journal, we collect the email address you provide. This is the only personal information we request.

Usage Data. We use Vercel Analytics to collect anonymous, aggregated data about how the Site is used, including page views and general traffic patterns. Vercel Analytics does not use cookies, does not track users across sites, and does not collect personally identifiable information.

2. How We Use Your Information

Email delivery. We use your email address to send you new Derive Journal posts as they are published. We also send a one-time confirmation email when you subscribe.
Founder notification. When you subscribe, we receive an internal notification so we know someone joined. This notification contains only your email address.
Site improvement. We use anonymous analytics data to understand traffic patterns and improve the Site.

3. Third-Party Services

We use the following services to operate the Site:

Supabase — database hosting (stores your email address). Data is hosted in the United States.
Resend — email delivery (sends confirmation and journal emails).
Vercel — website hosting and anonymous analytics.

These providers access your data only as necessary to perform their functions. We do not sell, rent, or share your personal information with any other third party.

4. Cookies and Tracking

The Site does not use advertising cookies, third-party tracking cookies, or cross-site tracking. Essential cookies may be used by our hosting provider for basic site functionality.

5. Data Storage and Security

Your email address is stored on Supabase infrastructure in the United States, protected by encryption in transit and at rest and row-level security at the database layer. We implement commercially reasonable measures to protect your information, but no system is perfectly secure.

6. Your Rights

You may request deletion of your email address at any time by contacting us at info@deriveir.app. We will process deletion requests within thirty (30) days.

We do not sell personal information. Residents of states with comprehensive privacy legislation (including Virginia, California, and others) may have additional rights under applicable law. To exercise any such rights, contact us at the address above.

7. Children’s Privacy

The Site is not directed at individuals under the age of 18. We do not knowingly collect personal information from children.

8. International Visitors

The Site is hosted in the United States. If you access the Site from outside the United States, your information will be transferred to and processed in the United States.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted by updating the effective date at the top of this page. Continued use of the Site after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this Privacy Policy: info@deriveir.app