Privacy Policy
Last updated: September 22, 2026
1. Introduction
Meadley Bros. ("we," "us," "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, how we share it, and your rights regarding that information.
The Service is operated by My Lead Hawk, LLC, a North Carolina limited liability company doing business under the Meadley Bros. brand.
2. Information We Collect
Account information: Name, email address, password (stored as a one-way hash), business name, and phone number if provided.
Third-party sign-in information: If you sign in using Google, Apple, or Facebook, we receive your name, email address, and a unique identifier from that provider. We do not receive your password. We may also receive a profile photo if your provider shares one. Your relationship with the third-party provider is governed by their own privacy policies, not ours.
Payment information: Payment details are collected and processed by our payment processor, Stripe, Inc. We do not see or store your full credit card number, CVV, or bank account number. We store Stripe customer, checkout-session, payment, and subscription identifiers together with order totals and status so we can manage purchases and membership.
Transaction data: Purchase history, mailing lists generated, postcard designs created, and files uploaded.
User-uploaded content: Photos, logos, business information, and postcard designs you create or upload to our platform.
Usage data: Pages visited, features used, searches performed, IP address, browser type, device type, operating system, referring URLs, and timestamps of activity.
Browser storage and similar technologies: Authentication sessions, cart state, and saved preferences needed to operate the Service.
3. How We Use Your Information
- To create and maintain your account
- To process purchases and deliver address lists
- To generate print-ready postcard files that you can take to a printer of your choice
- To send transactional emails (order confirmations, download links, delivery notifications)
- To improve our service, filtering algorithms, and user experience
- To detect fraud, abuse, and protect against unauthorized access
- To respond to customer support requests
- To comply with legal obligations and enforce our Terms of Service
4. Third-Party Services We Use
We share limited information with the following service providers. Each has been selected because they maintain industry-standard security and privacy practices. By using our Service, you acknowledge that your data will be processed by these providers.
Stripe (payment processing): receives your payment method and billing details. Stripe's privacy policy: https://stripe.com/privacy
Third-party printers you choose (postcard printing and mailing, for example Vistaprint): when you download print-ready files and recipient addresses and take them to a printer, you are sharing that data with the printer directly under their privacy policy. We do not send your data to printers ourselves.
Google Authentication / Apple Sign In / Facebook Login (if you choose to use them): receives sign-in requests to verify your identity.
Email delivery providers (transactional email): receive your email address and message content to deliver our communications to you.
Google Analytics (site usage measurement): receives anonymized IP address, browser and device information, and the pages and actions you take on this site. It does not receive your name, email, or list contents. Google's privacy policy: https://policies.google.com/privacy
Cloud hosting and data storage providers: your data is stored on encrypted servers operated by our hosting provider.
We do not sell the personal information of our customers or site visitors to third parties. We do not share your email address with marketing partners. We do not use your personal data for third-party advertising. The property mailing lists we sell are a different thing, described in section 5.
5. Property Data We Sell
The address lists we sell are compiled from publicly available property records, including county assessor data, tax records, utility data, and satellite imagery analysis. This data reflects public information about properties, not personal information collected from individuals through our Service. Depending on the mailing option a customer chooses, a list contains either a property address addressed to "Current Resident" or a property owner's name and mailing address. Use of these lists by our customers is governed by our Terms of Service.
Where we do not sell. We do not sell lists of properties in California, New Jersey, Oregon, or Vermont, and we do not sell the name or mailing address of an owner whose mailing address is in one of those states, wherever the property is.
Removing your address. If you are a homeowner or resident and do not want your address included in the lists we sell, email support@meadleybrothers.com with the property address. You do not need an account or a purchase. We will confirm within ten business days, and once confirmed the address is kept out of every list we build from then on, including lists refreshed or rebuilt later. We keep only the address and the date of your request, so that we can honour it.
6. Cookies and Tracking Technologies
Essential browser storage (required for the site to function): login sessions, cart state, security tokens, and saved searches.
Preference storage (used to remember your settings): display and workflow preferences.
Analytics. We use Google Analytics to understand how the site is used: which pages are visited, how searches and purchases progress, and where visitors leave. Google Analytics sets cookies and receives your IP address (which Google anonymizes), your browser and device type, and the pages and actions on this site. We do not send Google your name, email, or any address from a list, and we do not use Google Analytics for advertising or audience building. You can opt out with the Google Analytics opt-out browser add-on. Google's own privacy policy is at policies.google.com/privacy.
We do not use advertising cookies or third-party marketing trackers. Disabling required browser storage may prevent account, cart, and checkout features from working.
Why you do not see a cookie banner. We measure traffic; we do not sell or share your personal information for advertising, and we do not build advertising audiences. Google Analytics runs with advertising features, ad personalization, and Google Signals switched off. We do not currently serve California, New Jersey, Oregon, or Vermont, and we do not sell to the EU or UK. If that changes, or if we ever begin advertising with this data, we will add a consent choice before we do.
7. Data Security
We use HTTPS encryption for all data transmission. Passwords are stored as one-way hashes using industry-standard algorithms. Payment processing is handled by PCI-DSS-compliant providers. Access to customer data is restricted to authorized personnel with a business need.
Despite our precautions, no system is completely secure. If we become aware of a data breach that affects your personal information, we will notify you in accordance with applicable laws.
8. Data Retention
- Account data is retained as long as your account is active.
- Purchase records and invoices are retained for at least seven years for tax and accounting purposes.
- Uploaded images and designs are retained for 90 days after your most recent activity to support reorders, then deleted unless you have saved them to your account.
- You may request account deletion using the verified contact method published on our Contact page before customer accounts open.
9. Your Rights
Depending on your location, you may have the following rights:
- Access: request a copy of the personal data we hold about you
- Correction: request that we correct inaccurate information
- Deletion: request that we delete your account and associated data
- Portability: request an export of your data in a common format
- Opt-out: opt out of non-essential communications
California residents (CCPA/CPRA): you have the right to know what categories of personal information we collect, the purposes for which it is used, and to request deletion. You have the right to opt out of the sale or sharing of your personal information. Meadley Bros. does not sell or share the personal information of its customers or site visitors as those terms are defined by California law, and does not sell property lists in California or the name or mailing address of any owner whose mailing address is in California (section 5).
Homeowners and residents who are not our customers: if your address appears in a list we sell, you can have it removed. See Removing your address in section 5.
EU/UK residents (GDPR): you have the right to lodge a complaint with your local data protection authority.
To exercise any of these rights, use the verified contact method published on our Contact page.
Texas data broker notice and Texas residents
THE ENTITY MAINTAINING THIS WEBSITE IS A DATA BROKER UNDER TEXAS LAW. TO CONDUCT BUSINESS IN TEXAS, A DATA BROKER MUST REGISTER WITH THE TEXAS SECRETARY OF STATE (TEXAS SOS). INFORMATION ABOUT DATA BROKER REGISTRANTS IS AVAILABLE ON THE TEXAS SOS WEBSITE.
The entity is My Lead Hawk, LLC, which does business as Meadley Bros. (Meadley Brothers).
How Texas residents use their rights. You may ask us to confirm whether we process your personal data and to see it; to correct it; to delete it; to get a copy in a portable format; and to opt out of its sale, of targeted advertising, and of profiling. Email support@meadleybrothers.com with “Texas privacy request” in the subject and the name and address the request is about. You do not need an account. We answer within 45 days. If we decline your request, you may appeal by replying to our answer, and we will respond to the appeal within 60 days with the reasons for our decision. If we deny your appeal, you may submit a complaint to the Texas Attorney General.
To opt out of the sale of your address, see Removing your address in section 5. That request needs no account and applies to every list we build afterwards. We do not use your personal data for targeted advertising.
10. Children's Privacy
Meadley Bros. is a business tool intended for users 18 years or older. We do not knowingly collect information from anyone under 18. If we discover that we have collected information from a minor, we will delete it promptly.
11. International Data Transfers
Meadley Bros. is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a notice on the Service. Changes take effect when posted. Your continued use of the Service after changes constitutes acceptance of the updated policy.
13. Contact
Privacy contact information will be published on our Contact page before customer accounts open.