Mailbox Neighbors ← Back to site

Legal

Privacy Policy

Effective October 7, 2026 · Last updated October 7, 2026

The short version

• We collect the contact and business details you give us so we can sell, design and deliver your ad, plus basic technical data that every website receives.
• We do not sell or rent your personal information, and we don't share it for other companies' advertising.
• Our postcards are delivered by USPS to every address on a mail route. We never buy or use residents' names or mailing lists.
• Our website uses no advertising trackers or analytics cookies.
• You can ask us to see, correct or delete your information at any time by emailing [email protected].

1. Who we are and what this policy covers

Mailbox Neighbors ("we," "us," "our") is a small business based in San José, California that sells advertising space on shared postcards mailed to homes. This policy explains how we collect, use, share and protect personal information when you visit mailboxneighbors.com (the "Site"), contact us, reserve or buy an ad spot, or scan a QR code printed on one of our postcards.

This policy does not cover the websites or practices of the businesses that advertise on our postcards. If you contact an advertiser or visit their website, their own privacy policy applies.

2. Information we collect

Information you give us

• Reservation and contact details: when you use our "Hold my category" form or contact us, we collect your name, business name, business category, preferred spot size, phone number, email address, and anything you choose to write in the message box.
• Ad materials: logos, photos, text, offers, website addresses and phone numbers you send us for your ad.
• Communications: the content of emails, calls, texts and messages you exchange with us.
• Payment information: payments are processed by our payment processor, Stripe. Stripe collects your card or bank details directly; we never see or store full card or bank account numbers. We receive limited details such as your name, email, the amount paid, and the last four digits of the card.

Information collected automatically

• Basic technical data: like nearly all websites, our hosting provider (Cloudflare) automatically processes your IP address, browser type, device type, pages requested and date and time of access, to deliver the Site, keep it secure and prevent abuse.
• QR code scans: each ad on our postcards may include a QR code that links through our Site to the advertiser. When someone scans it, we record that a scan happened, along with the date and time and basic technical data (such as approximate location derived from IP address and device type), so we can report total scan counts to the advertiser. We share scan counts and totals with advertisers, not information that identifies you.
• Cookies: our Site does not use advertising, analytics or tracking cookies. Our hosting provider may set strictly necessary security cookies to protect the Site from bots and attacks. The Site loads fonts from Google Fonts, which means your browser sends your IP address to Google when it loads those fonts.

Information from public sources

To find local businesses that may want to advertise, we use publicly available business information, such as business names, business phone numbers, business email addresses and website addresses published on business websites and public business listings (for example, Google Maps). We use this information only to contact businesses about advertising with us.

3. How we use information

• To respond to your reservation or questions, confirm your category, and send you mockups, proofs, payment links and receipts.
• To design, print and mail your ad, and to report QR scan results to you.
• To process payments, refunds and disputes, and to keep business, accounting and tax records.
• To contact businesses about advertising opportunities, including by phone and email, in line with applicable law.
• To keep the Site and our services secure, prevent fraud and abuse, and fix problems.
• To comply with the law, enforce our Advertiser Terms, and protect our rights and the rights of others.

4. How we share information

We do not sell personal information and we do not "share" it for cross-context behavioral advertising, as those terms are defined under California law. We share information only as follows:

• Service providers that help us run the business, under their own privacy and security obligations: Cloudflare (website hosting, security and email forwarding), Google (business email and file storage), Stripe (payment processing), Telegram (internal notifications of new reservations to our phone), our commercial printer (ad artwork only), and the U.S. Postal Service (delivery of postcards, which does not involve your personal information).
• On the postcard itself: if you advertise with us, the ad content you approve (such as your business name, logo, phone number, website and offer) is printed and mailed to thousands of homes and may be shown as an example on our Site. Please only include information in your ad that you want to be public.
• Legal reasons: when we believe in good faith that disclosure is required by law, subpoena or court order, or is needed to protect the safety, rights or property of anyone, or to investigate fraud.
• Business transfers: if Mailbox Neighbors is sold, merged or reorganized, information may be transferred to the new owner, who will be required to honor this policy for the information it receives.
• With your permission: in any other case where you ask us to or agree to it.

5. Email, phone and text messages

Our business emails identify who we are and include our contact information. If you don't want to hear from us, reply "no thanks" or "unsubscribe," or email [email protected], and we will stop within 10 business days. We may still send messages needed for an ad you've already reserved or paid for, such as proofs, receipts and delivery updates.

If you give us your phone number on our form, you agree that we may call or text you about your reservation. We do not send automated or mass text messages, and we do not sell phone numbers. Message and data rates from your carrier may apply. To stop texts, reply STOP or tell us.

6. How long we keep information

We keep information only as long as we need it for the purposes in this policy. Generally: inquiry and reservation details for up to 3 years after our last contact; payment, invoice and tax records for at least 7 years, as required for tax and accounting purposes; ad materials for as long as you advertise with us plus 2 years (so we can rerun your ad if you return); and QR scan records for up to 2 years. When information is no longer needed, we delete it or make it anonymous.

7. How we protect information

We use reasonable administrative, technical and physical safeguards, including encrypted (HTTPS) connections to our Site, accounts protected by strong passwords and two-step verification, limited access to information, and reputable service providers. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. If a data breach affecting your personal information occurs, we will notify you as required by law.

8. Your choices and rights

No matter where you live, you can ask us to:

• Access the personal information we hold about you;
• Correct information that is inaccurate;
• Delete your information, unless we need to keep it for legal, tax or accounting reasons or to complete a transaction you requested; and
• Stop marketing calls, texts or emails from us.

To make a request, email [email protected] with the subject "Privacy request." We may need to confirm your identity before acting on a request, and we will respond within 45 days. We will not treat you differently for making a privacy request.

California residents: California's "Shine the Light" law (Civil Code § 1798.83) lets California residents ask whether a business disclosed personal information to third parties for those third parties' own direct marketing. We do not make such disclosures. If you have questions, contact us as described below. Depending on our size, certain California privacy laws, such as the California Consumer Privacy Act, may not apply to us; we nonetheless honor the requests described above.

Do Not Track: some browsers send a "Do Not Track" signal. Because our Site does not track visitors across other websites or over time for advertising, we do not change our practices in response to these signals. We do honor the Global Privacy Control signal as a request not to sell or share personal information, which we do not do in any case.

9. Children

Our Site and services are meant for adults and businesses. They are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

10. Links to other websites

Our Site and postcards link to advertisers' websites and to other services. We are not responsible for the privacy practices or content of those websites. Please review their privacy policies.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and change the "Last updated" date above. If we make a material change to how we use personal information we have already collected, we will notify affected customers by email before the change takes effect.

12. Contact us