Privacy Policy
Last Updated: May 12, 2026
Notice: This Privacy Policy has not yet been reviewed by licensed counsel. Use is at your own risk pending that review.
This Privacy Policy describes how The Friday Pack ("we," "us," or "our") collects, uses, discloses, and protects personal information when you visit thefridaypack.com (the "Site"), create an account, or purchase a Lead Pack.
By using the Site or our service, you consent to the practices described in this Privacy Policy. If you do not agree, do not use the service.
1. Information We Collect
1.1 Information you provide directly
- Account / order information: name, email address, and the market(s) you select when ordering.
- Payment information: processed by Stripe, our payment processor. Stripe collects and stores your full payment card details. We receive only a tokenized customer ID, the last 4 digits of your card, and billing metadata necessary to associate orders with your account. We never see or store full card numbers.
- Support correspondence: email content, attachments, and any information you voluntarily provide when contacting support.
- Calibration responses: if you reply to our pre-delivery calibration email with filter preferences, we store that response and apply it to your future Lead Packs.
1.2 Information collected automatically
- Usage data: pages visited, links clicked, browser type, device type, IP address, referrer URL, and timestamps. Collected via Vercel platform analytics and used in aggregate to improve the Site.
- Cookies: we use minimal first-party cookies for session management (login state). We do not use third-party advertising cookies. We do not currently use Google Analytics or Meta Pixel.
- Email engagement: open rates and click-through rates on emails we send you, collected via Resend.
1.3 Information we DO NOT collect about you
We do not collect: precise geolocation, biometric data, social media account contents, health information, financial account information beyond the Stripe-tokenized payment metadata described above, or any "sensitive personal information" as defined by the California Consumer Privacy Act ("CCPA").
2. Lead Pack Source Data (Not About You)
The Lead Packs we deliver to customers contain data about third parties (residential property owners and their listings). This data is aggregated from publicly available sources — county property records, public listing platforms, and other publicly accessible business directories. This data is NOT personal information about you, the customer; it is the work product we deliver to you. Our handling of source data is governed by the Terms of Service (/legal/terms) and applicable public-records laws, not this Privacy Policy.
If you are an individual property owner who has discovered your contact information in one of our Lead Packs and you would like it removed from future packs, email support@thefridaypack.com with the subject "Owner Data Removal Request" and the property address. We will remove your data from our active dataset within 14 days and prevent its inclusion in future packs. We cannot recall packs already delivered to customers.
3. How We Use Your Information
We use the personal information you provide to:
(a) Process your orders and deliver Lead Packs; (b) Send you account, transactional, and service emails (order confirmations, delivery notifications, calibration questions, billing receipts, security notices); (c) Respond to your support requests; (d) Detect and prevent fraud or abuse; (e) Comply with legal obligations; (f) Improve the service, in aggregated and anonymized form; (g) Send occasional product update emails — you can opt out of these via the unsubscribe link in any such email (transactional emails are not opt-out-able).
We do not sell, rent, or trade your personal information.
4. How We Share Your Information
We share personal information only as follows:
- Service providers: Stripe (payments), Resend (email delivery), Vercel (hosting), Supabase (database). Each has its own privacy and security commitments and processes your data on our behalf.
- Legal compliance: in response to valid subpoenas, court orders, or other legal process; to comply with applicable law; to enforce our Terms; or to protect the rights, property, or safety of The Friday Pack, our users, or others.
- Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to the acquirer's commitment to honor this Privacy Policy.
5. Data Retention
- Account information: retained while your account is active, plus 30 days after termination.
- Payment metadata: retained as required by Stripe and by applicable financial regulations (typically 7 years for tax purposes).
- Email correspondence: retained 24 months from last contact.
- Delivered Lead Packs (our copy): retained 12 months from delivery for dispute-resolution purposes.
You may request earlier deletion at any time by emailing support@thefridaypack.com.
6. Security
We use industry-standard technical and organizational measures to protect your information, including HTTPS for all data in transit, encrypted storage at rest via our hosting providers, access controls on internal systems, and routine audits of third-party processors. No method of transmission or storage is 100% secure; you provide information to us at your own risk.
7. Your Rights
Depending on your jurisdiction, you may have rights including:
- Access: request a copy of personal information we hold about you.
- Correction: request that we correct inaccurate information.
- Deletion: request that we delete your personal information ("right to be forgotten").
- Portability: request export of your personal information in machine-readable format.
- Opt-out of marketing emails: unsubscribe link in any marketing email; transactional emails are required for service operation.
- California residents: under the CCPA, you have additional rights including the right to know categories of information collected, the right to opt out of "sale" of personal information (we do not sell), and the right to non-discrimination for exercising your rights.
To exercise any right, email support@thefridaypack.com with the subject "Privacy Rights Request." We will respond within 30 days.
8. Children's Privacy
The service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, contact us at support@thefridaypack.com and we will delete it.
9. International Users
The Friday Pack is operated from the United States. If you access the service from outside the US, your information will be transferred to and processed in the US. The US may have data-protection laws less protective than those of your jurisdiction. By using the service from outside the US, you consent to this transfer.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email and by updating the "Last Updated" date above. Continued use of the service after changes take effect constitutes acceptance.
11. Contact
For privacy questions or requests, email: support@thefridaypack.com
Mailing address: [to be added — placeholder for registered business address]