Privacy Policy
Last Updated: September 2026. Direct Mail Buzz Inc. (“Direct Mail Buzz”, “we”, “us”, or “our”) is committed to protecting the privacy of our advertisers, website visitors, and the recipients of our physical App Drops.
1. Overview & Scope
Direct Mail Buzz operates a physical distribution network for digital applications and mobile products. We produce oversized 9"x12" jumbo postcards delivered to 10,000+ U.S. households per drop via the United States Postal Service (USPS) Every Door Direct Mail® (EDDM®) program.
This Privacy Policy governs the collection, processing, and protection of information across:
- Our public website and promotional pages (
directmail.buzz). - Our self-serve Advertiser Studio and customer account management portal.
- Our dynamic QR code redirect engine and scan telemetry platform (
/api/qr/[spotId]).
2. Information We Collect
When you create an account, claim a postcard spot, or submit an inquiry, we collect your name, business name, work contact information, and account authentication credentials managed securely via Supabase.
Spot reservations are processed directly through Stripe. Direct Mail Buzz never collects, transmits, or stores sensitive credit card numbers or security CVVs on our servers. Billing history and invoice records are synchronized via secure webhooks.
We store the artwork files (300 DPI images/PDFs), app store destination URLs, slogans, and category tags that you upload to the Advertiser Studio for commercial pre-press printing and drop curation.
When recipients scan physical QR codes printed on our postcards, our server records non-identifying telemetry: cryptographic one-way hashed IP address, timestamp, device OS (iOS vs. Android), and browser type before immediately redirecting to the advertiser destination.
We never collect personal names, residential addresses, or identifiable household records from recipients who scan our physical postcards. All IP addresses are irreversibly hashed to compute aggregate unique household engagement while safeguarding consumer anonymity.
3. How We Use Information
We use the information we collect strictly for commercial operations, campaign execution, and service improvements:
- Drop Fulfillment: Coordinating print production with commercial printers and executing USPS EDDM carrier route delivery.
- Category Exclusivity: Enforcing our strict 1-app-per-category guarantee so competing brands never appear on the same drop.
- Attribution Analytics: Providing real-time scan counts, OS breakdowns, and peak scanning hours inside the Advertiser Studio.
- Account & Security: Authenticating studio access, preventing automated fraud, and mitigating bot attacks via Cloudflare Turnstile.
- Communications: Sending drop milestone updates, pre-press proofing feedback, and payment receipts.
4. Third-Party Disclosures
We do not sell, rent, license, or trade your personal data or scan telemetry to third-party data brokers, advertising networks, or data exchanges. We share data solely with trusted service providers essential for platform operations:
Approved ad artwork and spot layouts are shared with our commercial press facilities. Physical postcard distribution is conducted via the United States Postal Service (USPS).
Handles PCI-DSS compliant credit card transactions and subscription billing under their independent privacy standards.
Provides edge DNS, DDoS protection, and Turnstile bot challenge verification without harvesting personal behavioral profiles.
5. Data Security & Retention
We implement industry-standard administrative, technical, and physical safeguards to protect information against unauthorized access, loss, or alteration. All data in transit is encrypted using modern TLS protocols. Database records are protected behind strict role-based access controls and row-level security (RLS).
We retain advertiser account data for as long as your account remains active or as needed to maintain commercial billing records and comply with legal obligations.
6. Cookies & Tracking Technologies
We use essential cookies and local storage tokens to manage authentication sessions, bot deterrence, and consent choices. For complete details regarding our use of cookies and how to control your preferences, please consult our Cookie Policy.
7. Contact Us About Privacy
If you have questions, feedback, or requests regarding this Privacy Policy or your personal data, please submit an inquiry directly through our contact form: