Privacy policy

When you book, we collect:

• Your name, email address, and mobile number, and whether you agreed to text messages.
• The street address of the mailbox, the house numbers to install, and its map location.
• Your HOA name, gate or community code, and any notes you add, if you give them.
• A photo of your mailbox, if you upload one, and the before-and-after photos the crew takes.
• Which services you chose, your preferred date, and what you paid. Stripe keeps the card details; we keep a payment reference.

When you use the site, we also record:

• The code printed on a postcard or door hanger you scanned, and any campaign tags in the link, so we know which mailing brought you here.
• For each scan of a printed QR code: the time, a one-way hash of your network address (we do not keep the address itself), your browser type, and the rough city and region Cloudflare reports. This tells us how a mailing performed, not who you are.
• Which steps of the booking flow were reached, tied to a random session id, so we can see where people give up.

If you leave your email to hear when booking opens or to ask for a Neighborhood Day, we keep that email, the neighborhood, and the printed code if you scanned one.

• To do the job: route the crew, install the right numbers, and get through the gate.
• To take your payment and issue refunds.
• To send your confirmation, the day-before notice, and, with your text consent, on-the-way messages.
• To schedule the crew’s route and, when a job is billed by invoice instead of paid online, to send you that invoice.
• To decide whether your address qualifies for Neighborhood Day pricing.
• To measure which mailings and neighborhoods lead to bookings.
• About eleven months after your visit, to email you once asking whether you want a refresh. You can opt out of that email.

We use before-and-after photos of your mailbox in marketing only if you checked that box at booking. Email us to withdraw consent at any time.

These services process your information on our behalf. Each one sees only what it needs for its job.

• Stripe takes your payment. Your card details go to Stripe directly and never touch our servers.
• Resend sends our email (confirmation, day-before notice, booking links).
• Twilio sends our text messages, only if you opted in.
• Railway hosts the site and runs its scheduled jobs.
• Supabase hosts our database, where bookings and customer records live.
• Cloudflare sits in front of the site for security and speed, and sees the network address of every visit.
• Google Places and Geocoding turns the address you type into a verified street address and map location.

We do not sell your information, and we do not share it with advertisers or data brokers.

The site sets a few cookies of its own and no advertising cookies. One remembers the printed code you scanned for 60 days so your booking is credited to that mailing. One carries your booking in progress while you move through the steps. One keeps you signed in for a day after you open a “find my booking” link. The owner’s admin sign-in uses one more.

• Booking and customer records: for as long as we operate, so we can honor the HOA fix promise and handle refunds.
• Booking-in-progress data: cleared when the booking completes or the hold expires.
• QR scan records: kept in hashed form as mailing statistics; they cannot be traced back to you.
• Emails left to hear about booking: until you ask us to remove them or booking in that neighborhood has opened and closed.
• Photos: for as long as the booking record, or until you withdraw marketing consent for any marketing copies.

The site runs over HTTPS. Card details never reach us. Booking links and sign-in links are signed and expire. We keep street addresses and contact details out of web addresses and logs. Access to the database is limited to the owner.

Email us to see what we hold about you, to correct it, or to have it deleted. We will delete everything except what we must keep for tax and payment records. To stop text messages, reply STOP. To stop marketing use of your photos, email us.

Mailbox Spa
{{PHONE}}
{{SUPPORT_EMAIL}}

See also our terms of service.