Privacy

Last updated August 20, 2026

PostcardRobot sends postcards for local service businesses. There are two very different groups of people in this policy, and mixing them up is how privacy policies become useless, so they are kept apart: customers, who sign up and pay us, and recipients, who receive a postcard and never asked us for anything.

If you received a postcard

You are a recipient. You do not have an account with us and we did not get your information from you.

Where your address came from. Property records are public. County recorders, assessors and courts publish deeds, transfers, liens and filings, and companies aggregate those records and license them. We license property data from a data provider and use it to work out which addresses match a business’s criteria — for example, a home that recently changed hands, in a particular set of ZIP codes.

What we hold about you. A mailing address, the property attributes that came with it from the public record, which card was sent and when, and whether the card was delivered or returned. If you scan the QR code or use the promo code on the card, we record that the card was scanned so the business can tell their mail is working. We do not build a profile of you across the web, we do not buy or infer your browsing history, and we do not sell your information.

How to stop it. Use the stop page and enter the code printed on your card, or just the address. It takes one submission, there is no account to create and no email to confirm. The removal applies to every business mailing through us, not only the one that mailed you, and it does not expire. A card already handed to USPS may still arrive; we cannot recall mail that has left.

We keep the address on the do-not-mail list permanently. That is the point of it — deleting the record is what would let you be mailed again.

If you are a customer

We collect what running the account requires:

• Your name, email and sign-in identity, handled by our authentication provider.
• Your business details — trade, phone, website, service area — which you enter, and which get printed on your cards.
• Billing records. Card details go directly to Stripe; we never receive or store a card number.
• Your campaigns, templates, mailing history and the results attributed to them.

You can export or delete your account data by asking us. Deleting your account does not delete the do-not-mail list — those entries belong to the people who asked to be left alone, not to your account.

Who we share data with

Only the vendors needed to run the product, each of which sees the minimum required to do its job: a print and mail vendor (recipient address and card contents), a property data provider (the areas and criteria being searched), a payment processor, an authentication provider, an email provider, and our hosting and database providers. We do not sell personal information and we do not share it for cross-context behavioural advertising.

Your rights

Depending on where you live you may have the right to know what we hold, to get a copy, to correct it, to delete it, and not to be discriminated against for asking. Recipients in California, Colorado, Connecticut, Virginia and other states with comparable laws can exercise these rights whether or not they have an account. Email privacy@postcardrobot.com. For the specific request we expect most often — stop mailing me — the stop page is faster and needs no identity check.

Children

This is a tool for businesses. It is not directed at children and we do not knowingly collect information from anyone under 18.

Changes

If this policy changes materially we will update the date above and tell account holders by email. Questions: privacy@postcardrobot.com.