Privacy Policy

Last Updated: April 27, 2026

At HeyAddress, we respect your privacy. Please read this Privacy Policy carefully to understand how we collect, use, share, and protect your information ("personal information"), and to learn about your rights and choices.

This Privacy Policy applies to HeyAddress, LLC ("HeyAddress," "we," "us," or "our") and governs the personal information we collect through our websites (heyaddress.com, heyaddress.io, heyaddress.ai) and through your use of the HeyAddress platform and services. By continuing to use our sites or services, you agree to the terms of this Privacy Policy.

HeyAddress is a direct mail remarketing platform. A core function of our service involves helping businesses reach their website visitors through physical mail. This means we process certain visitor data on behalf of our business customers ("Customers"). This policy explains both how we handle data about you as a Customer of HeyAddress, and how we handle visitor data processed through our platform.

1. Information We Collect

Information You Provide to Us

When you create a HeyAddress account, submit a campaign, or contact us for support, you may provide us with:

Identifiers such as your name, business name, email address, phone number, and mailing address
Financial information such as credit card or payment details (processed and stored securely by our payment processor, Stripe; HeyAddress does not store full card numbers)
Campaign information including your property URL, target geography, postcard creative files, budget settings, and suppression lists
Communications you send us via email, chat, or support requests
Account credentials including your email and password (passwords are stored in encrypted form and never in plain text)

Information We Automatically Collect

When you visit the HeyAddress platform, we automatically collect certain information about your device and usage, including:

IP address, browser type, browser version, and operating system
Pages visited, time and date of your visit, time spent on pages, and referring URLs
Session data and interaction logs for platform features

This information is collected using cookies, web beacons, and similar technologies as further described in Section 4.

Information We Collect From Third Parties

We may receive information about you from third-party services if you connect your account or authenticate through them (e.g., Google single sign-on). The information we receive depends on that service's policies and your account settings with them.

Visitor Data Collected on Behalf of Customers

When a HeyAddress Customer installs our tracking tag on their website, HeyAddress's systems collect data about visitors to that Customer's website for the purpose of enabling direct mail remarketing. This data may include IP addresses and behavioral signals used to facilitate address matching through our third-party identity resolution partners. HeyAddress processes this data as a service provider on behalf of our Customers. Customers are independently responsible for disclosing their use of such tracking technology in their own privacy policies.

2. How We Use Your Information

We use your personal information for the following purposes:

To create and manage your HeyAddress account
To process and fulfill your direct mail campaigns
To charge and collect payment for services rendered
To communicate with you about your account, campaigns, and support requests
To send transactional emails such as campaign confirmations, status updates, and billing receipts
To send marketing or promotional communications (you may opt out at any time)
To improve and develop the HeyAddress platform through usage analytics
To detect and prevent fraud, security incidents, and abuse of our platform
To comply with applicable legal obligations

We do not use your personal information to train machine learning models or sell it to data brokers.

3. How We Share Your Information

Fulfillment Partners

To deliver physical postcards on your behalf, we share relevant campaign data (including creative files, campaign parameters, and address data) with our third-party print and mail fulfillment partner(s). These partners are contractually obligated to use your data solely for the purpose of fulfilling your HeyAddress campaigns.

Service Providers

We share information with third-party service providers that help us operate the HeyAddress platform, including:

Payment processing (Stripe)
Cloud infrastructure and database hosting (Supabase)
Transactional email delivery
Analytics and error monitoring
Identity resolution and address matching (for the purpose of direct mail remarketing)

All service providers are bound by contractual obligations to protect your information and use it only as directed by HeyAddress.

Legal Disclosures

We may disclose your personal information when required by law, court order, or lawful request from a government authority, or when we believe disclosure is necessary to protect the rights, property, or safety of HeyAddress, our Customers, or others.

Business Transfers

If HeyAddress is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in control via email or a prominent notice on the platform.

Aggregated & Anonymized Data

We may share aggregated or de-identified data that cannot reasonably identify you with third parties for analytics, benchmarking, or research purposes.

We Do Not Sell Your Personal Information

HeyAddress does not sell your personal information to third parties. We do not share your personal information with advertising networks for the purpose of targeting you with ads on other websites.

4. Tracking Technology & Cookies

Cookies

HeyAddress uses cookies and similar technologies to operate and improve the platform. Cookies help us remember your login session, maintain your preferences, and understand how the platform is being used.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain platform features. For common browsers:

Chrome: Settings > Privacy and Security > Cookies
Firefox: Settings > Privacy & Security > Cookies and Site Data
Safari: Preferences > Privacy > Manage Website Data
Microsoft Edge: Settings > Privacy, search, and services > Cookies

Analytics

We may use analytics tools such as Google Analytics to understand platform usage patterns. Information collected through analytics tools is used only to improve our services and is not combined with personally identifiable information in ways that would identify you to us.

Do Not Track

Our platform does not currently respond to browser-initiated Do Not Track ("DNT") signals, as there is no universally adopted standard for how such signals should be interpreted. We will revisit this position as industry standards develop.

5. Direct Mail Remarketing & Visitor Data

This section applies specifically to the data collected via HeyAddress tracking tags installed by our Customers on their websites.

How It Works

When a Customer installs the HeyAddress tracking tag on their website, the tag collects signals from website visitors (such as IP address and behavioral data). HeyAddress passes this data to third-party identity resolution partners who attempt to match visitor signals to a U.S. postal address. Matched addresses are then used by our fulfillment partners to mail postcards on the Customer's behalf.

Your Role as a Website Visitor

If you are a consumer who has received a postcard as a result of visiting a website that uses HeyAddress, your address was matched through this identity resolution process on behalf of that website's operator (our Customer). HeyAddress processed your data as a service provider under the direction of that Customer.

To opt out of receiving postcards from a specific HeyAddress Customer, you may contact that business directly. To opt out of address matching through HeyAddress's platform globally, please contact us at info@heyaddress.com and we will process your suppression request.

Suppression Lists

HeyAddress maintains suppression lists on behalf of Customers to honor opt-out requests. Consumer suppression requests submitted to HeyAddress are processed within a commercially reasonable timeframe and applied across all active campaigns for the relevant Customer.

6. SMS Messaging Terms

By providing your mobile number and opting in to receive SMS messages from HeyAddress, you consent to receiving two categories of text messages:

Transactional messages — account alerts, campaign status updates, and one-time passcodes. Frequency varies based on your account activity.
Promotional messages — platform updates and special offers. No more than four (4) promotional texts per month.

Message and data rates may apply. You may opt out of all SMS at any time by replying STOP to any message (you will receive a single confirmation). For assistance, reply HELP or contact info@heyaddress.com. We use your mobile number only for the purposes described in this section.

7. Children's Privacy

The HeyAddress platform is not directed at individuals under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us at info@heyaddress.com and we will promptly delete such information.

8. Data Security

We implement commercially reasonable technical and organizational security measures to protect your personal information, including:

HTTPS encryption on all platform communications
Encrypted storage of passwords and sensitive credentials
Role-based access controls limiting employee access to personal data
Regular security review of our platform and third-party service providers

However, no website, application, or data transmission can be guaranteed to be completely secure. While we work hard to protect your information, we cannot warrant the absolute security of any data you transmit to us. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including:

Account information: retained for the duration of your account and for a reasonable period after account closure to comply with legal obligations
Campaign data: retained for the duration of your active campaigns and for up to 36 months thereafter for billing, audit, and legal purposes
Visitor data processed on behalf of Customers: retained in accordance with our agreements with Customers and applicable law, and deleted upon verified suppression or deletion requests

When information is no longer needed, we delete it or de-identify it so it can no longer be associated with you.

10. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes via email or a prominent notice on the platform at least 14 days before the changes take effect. The date this policy was last updated is indicated at the top of this page. We encourage you to review this policy periodically.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

HeyAddress, LLC
Email: info@heyaddress.com
Website: heyaddress.com

We will respond to all legitimate requests within a reasonable time period. You may be asked to verify your identity before we process certain requests.

12. Privacy Rights & Additional Disclosures for U.S. Residents

Several U.S. states grant residents specific data rights. The following disclosures apply to residents of California, Colorado, Connecticut, Virginia, and other states with applicable privacy legislation. To exercise any right, contact us at info@heyaddress.com.

Right to Know

You may request that we disclose the categories of personal information we collect about you, the purposes for collection, the categories of third parties with whom we share it, and the specific pieces of personal information we hold about you (for the preceding 12 months).

Right to Delete

You may request that we delete personal information we have collected about you, subject to certain exceptions (e.g., information needed to complete a transaction, comply with a legal obligation, or detect fraud).

Right to Correct

You may request that we correct inaccurate personal information we hold about you.

Right to Portability

In certain circumstances, you have the right to receive a portable copy of your personal information in a commonly used, machine-readable format.

Right to Opt Out of Sale or Sharing

HeyAddress does not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising purposes. If our practices change, we will update this policy and provide an opt-out mechanism.

Right to Limit Use of Sensitive Personal Information

We do not use sensitive personal information (as defined under applicable law) for any purpose beyond providing our services to you, or as otherwise minimally permitted by applicable law.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. You will receive the same quality of service and pricing regardless of whether you exercise a privacy right.

Automated Decision-Making

Residents of certain states have the right to opt out of the processing of personal information for profiling in furtherance of decisions that produce legal or similarly significant effects. HeyAddress does not engage in such automated profiling for decisions that affect your legal rights or similarly significant interests.

Verification Process

To protect your privacy, we verify the identity of individuals submitting privacy rights requests before acting on them. We may ask you to provide information sufficient to confirm your identity and, where applicable, your state of residence. Authorized agents acting on behalf of a resident must provide written authorization from the resident.

Appeal Process

If we decline to act on your privacy rights request, we will provide a written explanation of our reasons. Depending on your jurisdiction, you may have the right to appeal our decision by contacting us at info@heyaddress.com with the subject line "Privacy Rights Appeal."