Mailiens Privacy Policy

Information we process

• Account and business information: names, email addresses, authentication records, company profile, business address, phone number, preferences, and support communications.
• Campaign information: artwork, campaign settings, QR destinations and appearance, approvals, quantities, quotes, postage evidence, production records, and fulfillment status.
• Mailing-list information: recipient names, postal addresses, and other fields a customer is authorized to upload for the campaign.
• Response information: the unique mail-piece identity and QR side scanned, scan date and time, repeat-response indicators, device/browser user-agent information, and a one-way hash of the network address. Mailiens does not display raw network addresses to customers.
• Transaction and integration information: payment authorization status, processor references, accounting-connection metadata, receipts, and reconciliation evidence. Payment-card details are intended to be collected directly by an approved payment provider rather than stored by Mailiens.

How we use information

We use information to create and administer accounts; calculate campaign and postage pricing; prepare production files; place recipient-specific QR identities; provide response analytics and requested notifications; prevent fraud and abuse; reconcile payments and provider activity; support customers; and comply with legal, postal, accounting, and security obligations.

Unique QR response attribution

A Mailiens campaign may place one or two unique QR identities on each mailed piece. When a recipient scans one of those codes, Mailiens can associate the response with the exact piece, campaign, and QR side. If the customer supplied authorized recipient information for that piece, the customer may be able to identify the intended recipient. A scan does not prove who physically held or scanned the piece.

Sources of information

We receive information from customers and their authorized users; uploaded artwork and mailing lists; QR interactions; production, postal, hosting, communications, payment, and accounting providers; and ordinary browser/server operations.

When information is disclosed

We disclose information only as needed to service providers that support hosting, security, postal qualification, printing and mailing, notifications, payment processing, accounting, and customer support; to professional advisers; during a business transaction; or when required to protect rights, safety, or comply with law. We do not sell personal information or share it for cross-context behavioral advertising.

SMS notifications and consent

Main Course Design, LLC offers an optional campaign scan notification program for account holders. SMS enrollment and delivery are not yet active. These privacy protections apply to information collected for the program as it becomes available.

For SMS enrollment, we process the mobile number supplied by the customer, account association, notification preferences, consent wording and version, authorization timestamps, opt-out records, and message delivery information. We use this information to administer the requested alerts, honor messaging choices, provide assistance, and maintain consent and delivery records.

Text messaging originator opt-in data and consent are not sold, rented, shared, or transferred to third parties, affiliates, partners, or a business successor. This restriction takes precedence over every broader disclosure or business-transfer provision in this policy. Consent applies only to messages from Main Course Design and cannot be passed to another sender.

Mobile information is not sold or shared for marketing or promotional purposes. Messaging providers and carriers may process the destination number and message content solely to transmit requested messages and report delivery; this does not grant them permission to market to the customer or acquire the customer's messaging consent.

Customers may withdraw SMS consent through their notification settings or by replying STOP when the program is active. We retain the records needed to honor opt-outs and document prior consent. Withdrawal does not require deletion of historical campaign or transaction records. For questions about mobile information or consent, use our privacy-request form. See the SMS notification terms for program details.

Customer responsibilities

Customers must have lawful authority to upload and use mailing-list information, artwork, trademarks, and QR destinations. Customers are responsible for their own notices, consent, suppression, and direct-marketing obligations.

Retention and security

We retain information for as long as reasonably necessary to provide the service, preserve campaign and financial evidence, resolve disputes, satisfy legal obligations, and maintain security. Retention varies by record type. We use access controls, encrypted transport, protected private storage, tenant separation, audit evidence, and one-way hashing where appropriate. No system can guarantee absolute security.

Your choices and requests

Depending on where you live, you may request access, correction, or deletion of personal information, or ask questions about its use. We may need to verify identity and authority before acting, and some records may be retained where legally permitted or required. Submit a request through the Mailiens Privacy Request form.

Tracking signals and children

Mailiens does not use cross-site advertising trackers and does not currently respond to browser “Do Not Track” signals. Mailiens is a business service and is not directed to children under 13.

Changes

We may update this policy as the service changes. The effective date above identifies the current version. Material changes will be presented through an appropriate service notice.