Privacy Policy

1. Introduction

Where Do I Send This Thing? is a business software service operated by Wildcard ("we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the service. By accessing or using the service, you agree to this Privacy Policy.

2. Information we collect

2.1 Account information

When you create an account we collect your name, email address, and password. Passwords are hashed and never stored in plain text. We also record account activity such as sign-in times so we can secure the account.

2.2 Prospect information you provide

You provide the people you want to reach, as LinkedIn profile URLs or as rows in a CSV file, and you may include mailing addresses yourself. We process what you give us to find and verify a mailing address and to gather public business context for the card. The resulting records, including names, addresses, company information, and job titles, are stored in your team's account.

2.3 Card content

We store the designs, images, and messages created for your cards, along with the edits and direction you give while reviewing them, so you can revisit and reuse earlier versions.

2.4 QR scan logs

If you add a link or calendar QR code to a card, the printed code points at a short link on our domain that forwards to your destination. When someone scans it we record the time of the scan, the browser user agent, and the referrer, and we associate that with the card so you can see scan counts. Contact-details QR codes are encoded directly on the card and are not tracked.

2.5 Payment information

Credit purchases are handled by a third-party payment processor. We never see or store your full card number. We keep a record of the purchase, the amount, and the credits added to your team's balance.

2.6 Usage data

We collect basic technical information needed to operate the service, such as server logs, IP addresses, and browser type. We do not use third-party advertising or cross-site tracking services.

3. How we use information

• Provide, operate, and maintain the service
• Find and verify mailing addresses for the people you submit
• Research public business context and design cards for your campaigns
• Print, write, and mail the cards you approve
• Manage your account, team, credit balance, and purchases
• Report scan activity for QR codes you chose to add
• Communicate with you about your account or the service
• Improve and develop the product
• Comply with legal obligations

4. Service providers

We rely on service providers to deliver the product. These fall into four groups: data providers used to look up and verify mailing addresses and public business information, printing and mailing partners that produce and post your cards, a payment processor that handles credit purchases, and infrastructure providers that host the application, its database, and stored images.

We share only the minimum information each provider needs. Printing and mailing partners receive the card design, the note, and the recipient's mailing address so the card can be produced and delivered. We do not control the independent data practices of these providers, and we encourage you to review their policies.

5. Cookies and authentication

We use a signed session token stored in a secure, HTTP-only cookie purely to keep you signed in. This cookie is essential to the service and is not used for advertising. We do not use third-party advertising cookies or tracking pixels.

6. Data sharing and selling

We do not sell your personal data. We do not share your information with third parties for their own marketing. We share information only:

• With the service providers described in Section 4, solely to run the service
• When required by law, legal process, or a government request
• To protect the rights, property, or safety of you, us, or others
• In connection with a merger, acquisition, or sale of assets

7. Security

We use reasonable administrative, technical, and physical measures to protect information. Passwords are hashed with industry-standard algorithms and data is transmitted over encrypted connections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Data retention

We keep account information, prospect records, card designs, and campaign history for as long as your account is active, so your past campaigns stay available to you. Records tied to a mailed card, including the address it was sent to, the purchase that paid for it, and its delivery status, are retained for up to seven years to meet accounting and legal obligations. QR scan logs are kept for two years and then deleted.

If you delete your account, we remove your personal data within a reasonable time frame except where we are required to retain it as described above. You can ask us to delete specific prospects or campaigns at any time.

9. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Export your data in a portable format

To exercise any of these rights, contact us using the details below.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date, and material changes will be communicated through the service or by email.

11. Contact us

Questions about this policy or our data practices? Email support@wheredoisendthisthing.com.