1. Introduction

HospitalityThankYou ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect information when you use hospitalitythankyou.com.

2. Information We Collect

We collect the following types of information:

Email address — provided when you place an order, used to send your tracking number and order confirmation
Mailing address — the recipient's address you provide for us to mail your document
Payment information — processed entirely by Stripe, Inc. We never see or store your credit card number
Uploaded files — documents you upload. Uploads that never reach checkout are deleted automatically within about 6 hours, and a paid order's files about 30 days after delivery (see Data Retention)
Usage data — IP address, browser type, pages visited, and similar analytics data collected via Google Analytics

3. How We Use Your Information

We use collected information to:

Fulfill your print-and-mail order
Send your order updates, and a tracking number when your order has one
Respond to customer service inquiries
Improve our service through aggregate analytics
Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. File & Document Security

Your file privacy is paramount: Uploads are encrypted in transit, and the upload links we issue expire after 15 minutes. Files are stored on access-controlled infrastructure we operate, using AWS-managed storage that is encrypted at rest with keys managed by AWS. Uploads that never reach checkout are deleted automatically within about 6 hours. A paid order's files are deleted automatically about 30 days after delivery, and never kept more than 90 days after payment. You can ask us to delete them sooner at any time — see Your Rights. Our team does not read the contents of your documents.

5. Payment Processing

All payments are handled by Stripe, Inc. (HospitalityThankYou never stores credit card data). Stripe's privacy policy governs the handling of your payment information: stripe.com/privacy.

6. Cookies & Analytics

We use Google Analytics 4 to understand how visitors use our site. This involves cookies that collect anonymous usage data. We use anonymous IP addresses and do not enable remarketing or advertising features.

Your choice. If you are in the United States, Google Analytics counts your visit by default. You can turn that off at any time: choose Reject all in the cookie banner, or open Cookie preferences and switch Analytics off. Your choice is saved in this browser and applies on every page of this site. If your browser sends a Global Privacy Control signal, we treat it as that opt-out. Outside the United States, Google Analytics sets no cookies unless you accept them in the banner. Advertising cookies, the Facebook Pixel and Microsoft Clarity session analytics stay off unless you accept them.

We may also use a Facebook Pixel for conversion measurement. You can opt out of Facebook data use at facebook.com/settings.

7. Third-Party Services

Our service depends on the following third-party providers:

Stripe — payment processing
Shipping carriers — mail delivery
Amazon Web Services — infrastructure, file storage
Google Analytics — usage analytics
Shippo — shipping label generation
PostGrid — printing and mailing letters. We check mailing addresses with PostGrid, which matches them with USPS records, and when you send a letter, we share the document and the mailing addresses with PostGrid, which prints and mails it for us.

Each of these providers has their own privacy policy governing their use of data.

8. Data Retention

Uploaded files: uploads that never reach checkout are deleted automatically within about 6 hours; a paid order's files are deleted automatically about 30 days after delivery, and never kept more than 90 days after payment. You can request deletion sooner at any time
Order records: retained for 7 years for tax and legal compliance
Analytics data: managed per Google Analytics retention settings (14 months)

9. Your Rights

You have the right to:

Request a copy of personal data we hold about you
Request deletion of your personal data (subject to legal retention obligations)
Opt out of marketing communications
Lodge a complaint with a data protection authority

To exercise these rights, email us at hello@hospitalitythankyou.com.

10. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect information from children. If you believe a child has submitted information to us, contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. The date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance.

12. Contact

Privacy questions or requests? Email us at hello@hospitalitythankyou.com.

Privacy Policy