Privacy policy
Effective 2026-09-21. This policy covers No Errands, operated by Maren Technologies LLC, a company organised in Missouri, United States.
Plain version: we collect the small amount we need to run the service, we use it to run the service, we do not sell it, and you can ask us to delete it.
Who we are
Maren Technologies LLC runs No Errands. Contact us at support@noerrands.com. Our service is offered in the United States only.
What we collect
| What | Where it comes from | Why we have it |
|---|---|---|
| Your email address | You, when you create an API key | Receipts, top-up confirmations, support, and security notices |
| A hash of your API key and its first 12 characters | Generated when you create a key | To check that a request is really yours. We never store the key itself |
| Your credit balance and ledger of charges | Your use of the service | Billing and refunds |
| Requests you make to our API | Your agent or your own code | To run the service |
| Basic technical logs: IP address, timestamp, endpoint, status code | Your connection | Security, abuse prevention, rate limiting, and debugging |
| A request for a higher agent payment limit: email, business name, website, what your agents do and expected spend | You, on the higher limits form | To review the request |
Content you send through a specific connector is described on that connector's own privacy page:
- No Errands Mail: addresses and what goes on the paper.
- No Errands Fax: fax numbers and the document.
- No Errands Bookings: your name, email and phone, and what merchants share with us.
- No Errands Tables: the restaurant, the party and the name the table goes under.
- No Errands Ship: the from and to addresses, the parcel and the label.
- No Errands Prints: your photos and the address they are posted to.
- No Errands Cards: the card's message and both addresses.
- No Errands Sign: the document, your signers' names and emails, their signatures, and the audit trail.
What we do not collect
- We do not collect card numbers. Payments run through Stripe; your card details go to Stripe, not to us.
- We do not use analytics, advertising tags, cookies for tracking, or third-party scripts on this website.
- We do not ask for or store your Muse account credentials.
How agents use your data
If you use No Errands through an AI agent such as Meta's Muse, the agent acts on your behalf and only with your approval. Our connector brief requires the agent to show you the recipient, a summary of the content, and the price, and to get your explicit approval before anything that costs money or leaves our system. We treat requests arriving with your API key as coming from you.
Your API key belongs in the agent's secure credential store. We never ask you to type a key into a chat window, and no support request from us will ever ask you to send us your key.
Who we share it with
We share the minimum needed, and each company below sees data only from the connector that needs it:
- PostGrid, our print and mail provider, which prints and mails letters, postcards and printed cards and checks mailing addresses. It receives the recipient and sender addresses and what goes on the paper.
- Handwrytten, which writes and mails handwritten cards. It receives both addresses and the message.
- Sinch, our fax provider and our voice and messaging provider. It transmits faxes, places the automated calls and texts to restaurants, and tells us whether a number is a mobile or a landline. It receives the numbers and the fax document or the wording of the request.
- Square, and the business you are booking, when you book an appointment. They receive your name, email and phone, because a real business has to know who is coming.
- The restaurant you ask for a table, which hears or reads the request.
- EasyPost, our shipping provider, which checks addresses, buys labels from the carriers, books pickups and tracks packages. It receives both addresses, the parcel's weight and size, and any phone or email you give for carrier notices.
- Prodigi, our print lab, which prints photos, T-shirts and mugs and posts them. It receives the photos and the recipient's name and address.
- The carriers that deliver: the United States Postal Service for mail and cards, the carrier on a shipping label (USPS, UPS, FedEx or another), the carrier the print lab chooses, and the telephone network for faxes and calls. They see what is on the outside of the item or the number being called.
- The people you send a document to for signature, who see the document, your email as the sender and, once it is finished, the signing certificate.
- An email delivery provider, only for a restaurant that asked to get requests by email. It receives that restaurant's email address and the request.
- Stripe, our payment processor, to take payment for credits. Stripe receives your email address and the amount. Stripe handles your card details directly under its own privacy policy.
- Coinbase, only if your agent pays for credits in USDC through x402. Coinbase runs the payment service that checks and settles the payment. It receives the signed payment (the paying wallet address and the amount) and a description of what is being bought, never your email or anything you send through a connector.
- Cloudflare, our hosting provider, which runs the API and the signing page and stores our database and files.
- Law enforcement or a court, if we are legally required to.
That is the whole list. We do not share your data with advertisers or data brokers.
We do not sell your data
We do not sell personal information and we do not share it for cross-context behavioural advertising.
Text messages and mobile numbers
Mobile numbers will not be shared or sold with affiliates or third parties for marketing or promotional purposes. Text messaging opt-in data and consent are never shared with any third party. The only outside company that sees a mobile number is the carrier partner that delivers our messages, and only to deliver them.
Where your data is processed
We are a US company and the service is offered in the United States, but not every part of it runs there:
- Cloudflare runs our API on its global network, so a request is handled at the Cloudflare data centre nearest whoever sent it, which can be outside the United States. Our database (Cloudflare D1) is placed in western North America and our file storage (Cloudflare R2) in eastern North America. Those are placement settings, not a legal guarantee that the data never leaves North America.
- PostGrid, which prints and mails letters, postcards and printed cards and checks addresses, is based in Canada.
- Sinch is based in Sweden. Faxes go through Sinch's global endpoint, which picks the Sinch region that handles each fax, so a fax can be processed outside the United States. Restaurant texts go through Sinch's US region; calls and number lookups go through its global endpoints.
- Prodigi, the print lab, is based in the United Kingdom and may print an order outside the United States.
- Stripe, Coinbase, Square, Handwrytten, EasyPost and the carriers are based in the United States.
When data leaves the United States it goes only to the company doing that step, under that company's own terms and safeguards. We have not signed separate transfer agreements, such as Standard Contractual Clauses, with them.
How long we keep it
| Data | Retention |
|---|---|
| Account email | Until you delete your account. delete_my_data erases it at once; we keep no copy or hash of it |
| Account record without the email: id, creation date, balance | Kept, so the billing ledger still adds up |
| API key hashes | Until the key is revoked, then 30 days |
| Billing ledger and receipts: amounts, dates and references, no addresses or content | At least 7 years, because tax rules require it |
| Saved copy of a request's result, kept so a retried request is answered without being repeated | Deleted once it is 24 hours old, by the next daily sweep |
| Mail records | Addresses cut to city, state and the first three ZIP digits 30 days after the item is finished with, and never more than 60 days after it was sent. The cut-down record is kept with your billing history |
| Content of items you mailed | Never stored. It goes straight to the print provider |
| Technical logs | Up to 90 days. Rate-limit counters, which hold IP addresses, are deleted within 3 days |
| Requests for a higher agent payment limit | 30 days after we decide, or 90 days after you last sent one we have not decided. Deleted with your account |
Each connector's own privacy page lists its own retention windows.
Deleting your data
Ask your agent to delete your data and it calls delete_my_data, which works
on every connector. Straight away it scrubs the personal details from every
record on your account, whatever their age, deletes the saved copies of your
recent results, erases your account email and revokes your keys. The revoked
key hashes are deleted 30 days later.
You can also email support@noerrands.com from the address on your account and ask us to delete it. We will revoke your keys and delete your account data within 30 days, except records we must keep for tax or legal reasons, which we keep in the billing ledger only.
You can also ask us for a copy of what we hold about you, or ask us to correct it. Same address.
Items already handed to the postal service cannot be recalled, and records of them stay in the billing ledger.
Children
No Errands is not for people under 18. We do not knowingly collect data from children.
Security
API keys are stored as SHA-256 hashes. Traffic is HTTPS only. Access to production data is limited to people who need it. No system is perfect; if we discover a breach that affects you, we will email you.
Changes
If we change this policy we will update the effective date at the top and, for material changes, email account holders.
Contact
Maren Technologies LLC, support@noerrands.com.