Privacy Policy

1. Who we are and what this covers

Mailr provides a direct-mail marketing platform to home-services businesses (“customers”). This policy covers getmailr.com, the Mailr application, and the tracking features we host for our customers (QR redirects, landing pages, embeddable widgets).

We handle personal information in two roles. For information about our customers and visitors to our own website, we are the business responsible for the data. For recipient data — information about our customers’ customers, prospects, and mail recipients that we process to run their campaigns — we act as a service provider processing the data on the customer’s behalf and under our agreement with them. If you received mail or a message from a business that uses Mailr, that business is responsible for the campaign, and requests about their use of your information are best directed to them; Section 8 explains your options, including opting out of future mail.

2. Information we collect

From our customers (businesses): account and contact details (name, email, organization) managed through our sign-in provider; billing details processed by our payment provider (we do not store full card numbers); brand assets and settings; communications with us.

Recipient data, at our customers’ direction: contact and address details (name, email, phone, mailing address) and related business records (job or deal status, amounts, dates, custom fields) received from the CRM systems, file uploads, and integrations the customer connects; leads submitted through customer landing pages and forms (name, contact details, message, and any custom fields the customer configures); and, where the customer uses call tracking, call events including caller number, caller name, call timing, and links to recordings held by the customer’s call-tracking provider.

Property and imagery data: publicly available property records (parcel and address information, property characteristics, and assessed values). Our prospecting property database is intentionally maintained without owner names — we target properties, not named individuals, and prospecting mail is addressed to the resident of the property. We also obtain publicly available imagery of properties and geocoding data from mapping providers.

Collected automatically on tracking surfaces: when someone scans a campaign QR code, visits a landing page, or views an embedded widget, we log the visit with its IP address, browser user-agent, referring page, and timestamp, and associate it with the campaign. When someone submits an opt-out request we log the same technical details to prevent abuse of the opt-out mechanism. We also collect routine application logs and error diagnostics (configured to exclude personal information).

3. How we use information

We use information to operate and secure the Service: authenticate accounts and process payments; design, personalize, print, and mail campaigns; validate and standardize mailing addresses; generate campaign imagery; host landing pages and deliver leads into our customers’ CRM systems; measure campaign activity (scans, visits, calls, conversions) for the customer; honor opt-outs and maintain suppression lists; prevent fraud and abuse; comply with law; and improve the Service, including through aggregated or de-identified data that no longer identifies anyone.

4. Artificial intelligence

The Service uses AI models to select property imagery and to generate the stylized artwork used on mail pieces and landing pages. To do this, property addresses and publicly available imagery of properties are processed by third-party AI providers acting as our service providers, under agreements that limit their use of the data to providing services to us. Where a customer imports public business reviews, review text and reviewer display names may also be processed by AI providers to select and summarize reviews. Campaign imagery generated this way is a digital rendering, not a photograph, and landing pages disclose this.

5. How we disclose information

We disclose personal information to service providers that process it on our behalf under contract, in categories including: cloud hosting and infrastructure; data storage; mapping, geocoding, and address validation; AI model providers; print and mail fulfillment; payment processing; email delivery; and error monitoring and logging (for example, providers such as Vercel, Supabase, Railway, Cloudflare, Google, OpenAI, Stripe, Resend, and our print-fulfillment partner). We also disclose recipient data at the customer’s direction, including delivering leads into the customer’s connected CRM. We may disclose information to comply with law or legal process, to protect rights, safety, and the integrity of the Service, and in connection with a merger, financing, acquisition, or sale of assets, subject to this policy.

Our own marketing. We may use advertising and analytics partners (such as Meta and Google) to promote Mailr to businesses, including through cookies and similar technologies on our website and marketing pages. This may involve sharing information about our website visitors, prospects, and customers with those partners for cross-context behavioral advertising; Section 11 explains how to opt out. We do not sell personal information, and we never use recipient data — information about the households and individuals our customers reach — for our own advertising or marketing.

Campaign landing pages may include advertising and analytics tags configured by the business that sent the campaign; those tags operate under that business’s accounts and at its direction, as described in Section 6.

6. Tracking configured by our customers

Customers may configure their own advertising and analytics tags (such as Meta Pixel, Google Analytics, Google Ads, or HubSpot tracking) to run on their campaign landing pages. These tags operate under the customer’s accounts with those providers, may set cookies and collect information about your visit, and are governed by the customer’s and the provider’s privacy practices, not this policy. Campaign attribution on a customer’s own website may store a campaign code in your browser’s session storage.

7. Cookies

The Mailr application itself uses cookies only for sign-in and session security, plus local browser storage for interface preferences. Our public website and marketing pages may use analytics and advertising cookies as described in Section 5. Recipient-facing surfaces are different: QR scan redirects set no cookies, and the only advertising tags on campaign landing pages are those configured by the sending business (Section 6) — never our own.

8. If you received a postcard from a Mailr customer

The business named on the mail piece chose to send it. For prospecting mail, your address typically came from publicly available property records, addressed to the resident of the property rather than to you by name; for other mail, your information came from your relationship with that business (for example, its customer records). Any image of a property on the mail piece or its landing page is an AI-generated artistic rendering derived from publicly available imagery — it is not a photograph.

To stop receiving mail sent through Mailr, use the opt-out link on the campaign’s landing page or contact us at privacy@getmailr.com with the mailing address to suppress. Opt-outs are applied to the sending business and to our platform-wide do-not-mail list, which suppresses your address for all Mailr customers. To honor an opt-out we must keep the suppressed address on file indefinitely; that record is used only for suppression.

9. Retention

We keep customer account information for the life of the account and as needed afterward for legal, billing, and audit purposes. Recipient data is retained while the customer’s account is active and handled per our agreement with the customer, including deletion on verified request as described in our Terms. Suppression and do-not-mail records are kept indefinitely so opt-outs stay effective. Mailing history and payment ledgers are kept for audit and legal purposes. Campaign tracking logs are retained while the associated campaign data is retained.

10. Security

We protect personal information with measures including encryption in transit, encrypted storage of integration credentials, tenant isolation enforced at the database layer, access controls, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security.

11. Your privacy rights (United States)

Depending on your state, you may have rights to know, access, correct, or delete personal information, to opt out of sale, sharing, or targeted advertising, and to non-discrimination for exercising those rights. We do not sell personal information. Where we share information for cross-context behavioral advertising in connection with our own marketing (Section 5), you may opt out at any time by contacting privacy@getmailr.com or through a recognized opt-out preference signal such as Global Privacy Control, which we honor where required. We do not process sensitive personal information to infer characteristics. Advertising tags on campaign landing pages are configured by, and are the responsibility of, the business that sent the campaign. To exercise rights in information Mailr holds as a business, contact privacy@getmailr.com; we will verify your request and respond as required by law. Where we hold your information as a service provider for a Mailr customer, we will direct your request to that customer and assist them as our agreement requires. Authorized agents may submit requests with proof of authorization.

12. Canada

For personal information handled in Canada or about individuals in Canada, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act. Personal information is processed and stored on servers in the United States by us and our service providers, and while there it is subject to US law, including lawful access by US authorities. Questions or complaints may be directed to privacy@getmailr.com; you may also contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.

13. Children

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child’s information was provided to us, contact us and we will delete it.

14. Changes and contact

We may update this policy; material changes will be posted here with a new effective date, and customers will be notified. Contact: Mailr Marketing Inc., 205 5 Ave SW #123, Calgary, AB T2P 4B9, Canada — privacy@getmailr.com.