Privacy Policy
Effective date: April 18, 2026
Bright Mailbox is operated by Loran Gutt d/b/a Bright Mailbox, located at 4309 Morningside Road, Edina, MN 55416. This Privacy Policy explains how Bright Mailbox collects, uses, shares, and retains information when you use the Bright Mailbox website, mobile application, and related services.
Information we collect
We may collect information you provide directly, including your name, email address, phone number, mailing information, account credentials through our authentication providers, payment-related identifiers, uploaded photos, postcard messages, voice recordings, recipient names, recipient mailing addresses, birthdays, and other information you choose to provide.
We may also collect technical information such as IP address, browser type, device information, app usage details, push notification tokens, and log data generated when you use the service.
How we use information
- Provide, operate, and improve Bright Mailbox.
- Create, print, address, and mail postcards on your behalf.
- Verify recipient mailing addresses and track postcard fulfillment.
- Process subscriptions, one-time purchases, gift subscriptions, and billing.
- Send transactional emails, reminders, service updates, and optional text notifications.
- Support features such as Family Circles, referrals, voice messages, and Auto-Pilot drafting.
- Protect the service, prevent misuse, and comply with legal obligations.
Recipient information
Bright Mailbox users may provide information about recipients who do not have accounts, such as grandparents, parents, or other loved ones. We use that information only to provide the service requested by the user, including postcard delivery, personalization, reminders, and related support. If a recipient wants their information removed, they may contact us at admin@brightmailbox.com.
How we share information
We share information only as reasonably necessary to operate the service. That may include service providers that support authentication, billing, printing and mail fulfillment, messaging, cloud storage, infrastructure hosting, analytics, customer support, and AI-assisted drafting. These providers may include Clerk, Stripe, Lob, Twilio, Resend, OpenAI, Google, Meta, Dropbox, and infrastructure partners that process data on our behalf.
Data retention
We retain account information for as long as needed to provide the service and for legitimate business purposes. If you request deletion of your account, we may retain certain information for up to 30 days after deletion to complete operational, fraud-prevention, legal, accounting, or billing obligations. Some records, such as transaction history, may be retained longer where required by law.
Your choices
You may update certain information in your account, disconnect third-party photo integrations, delete recipients, delete draft postcards, unsubscribe from marketing emails, and opt out of SMS notifications by replying STOP where available. You may request account deletion or privacy assistance by emailing admin@brightmailbox.com.
Children
Bright Mailbox is not intended for children under 13. By using the service, you represent that you are at least 13 years old.
Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
U.S. service
Bright Mailbox is operated in the United States and is intended primarily for U.S. users.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version with a revised effective date.
Contact
Privacy questions and requests should be sent to admin@brightmailbox.com or mailed to Loran Gutt d/b/a Bright Mailbox, 4309 Morningside Road, Edina, MN 55416.