Privacy Policy

This policy describes how PostChamp (“we”, “us”) collects, uses, and protects information when you use our website at trypostchamp.com or our customer portal. We try to keep this short and in plain English. If anything is unclear, email hello@trypostchamp.com and we’ll explain.

1. Who this applies to

We work with two groups of people, and the data we hold is different for each:

• Contractors (our customers). Businesses who sign up at trypostchamp.com to run direct-mail postcard campaigns. We hold their contact and business information, payment records, and the brand assets they upload (logo, colors, etc.).
• Homeowners (recipients of mail).Property owners on the address lists our customers send us or that we curate by zip code. We hold their mailing addresses and (for the duration of an active campaign) a generated rendering of their home with the contractor’s service applied. We do not contact homeowners directly outside of the postcard mailing itself.

2. What we collect from contractors

When you sign up and use the portal, we collect:

• Name, email, phone, business name, service area, vertical/trade
• Brand assets you upload (logo, colors, tagline, license info)
• Mailing list data you upload (addresses + optional metadata)
• Payment records via Stripe (we don’t store full card numbers — Stripe handles those)
• Account activity (campaigns created, samples approved, etc.)

3. What we collect about homeowners

For each address on a campaign mailing list:

• Mailing address (street, city, state, zip)
• A publicly-available street-level photo of the property (sourced from Google Street View)
• An AI-generated rendering of that property with the customer’s service applied (created by us using Google’s Gemini API)
• Optional metadata if provided in the customer’s list (e.g., home value, year built)

We do not collect homeowner names beyond what appears on the customer’s list, and we do not sell, share, or otherwise provide homeowner data to anyone outside the customer running the campaign and our print/mail vendor (Lob).

4. How we use information

• To render and mail postcards on behalf of contractor customers
• To bill contractors and process payments
• To communicate with contractors about their campaigns (transactional email)
• To improve the product (aggregate, non-identifying analytics)
• To prevent fraud and enforce our Terms of Service

5. Sharing with third parties

We use a small number of trusted vendors to operate the service. Each only receives the data they need:

• Stripe — payment processing
• Lob— print & mail fulfillment (recipient address + postcard content only)
• Google — Street View imagery, Gemini rendering, Maps geocoding (homeowner addresses + photos pass through)
• Resend — transactional email to contractors
• Cloudflare R2 — storage of generated images
• Supabase — database hosting
• Clerk — authentication
• Inngest — background job processing
• Sentry — error monitoring
• Vercel — application hosting

We do not sell personal information to anyone, ever.

6. Retention

• Contractor accounts and campaigns: retained indefinitely while the account is active. On account deletion, we remove personal information within 30 days (some records may be retained longer where required by law, e.g. payment records for tax purposes).
• Homeowner addresses and renderings: retained for the life of the campaign and up to 12 months afterward for support purposes (returned mail, redelivery, dispute resolution). After that, deleted automatically.

7. Your rights

Depending on where you live (California, EU, etc.) you may have rights to access, correct, or delete personal information we hold about you, or to opt out of certain uses. To exercise any of these rights, email hello@trypostchamp.com. We respond within 30 days.

Homeowners who received a postcard and want their address excluded from future mailings can email the same address with the property address — we’ll add it to a permanent suppression list.

8. Security

We use industry-standard practices: TLS in transit, encrypted storage at rest, scoped API keys per vendor, two-factor auth on operator accounts. No system is perfect; if we ever have a breach affecting your data we’ll notify you promptly.

9. Children

PostChamp is for businesses. We don’t knowingly collect information from anyone under 18.

10. Changes to this policy

We may update this policy as the product evolves. Material changes will be flagged via email to active customers and the effective date at the top of this page will change. Continued use after a change means you accept the updated policy.

11. Contact

Questions, requests, or complaints: hello@trypostchamp.com.