Privacy Policy

Introduction

NOHO Mailbox ("we," "us," or "our") operates the website nohomailbox.org and provides mailbox rental and related services at 5062 Lankershim Blvd, North Hollywood, CA 91601. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our website, services, and customer dashboard. By using our services, you agree to the practices described in this policy.

Information We Collect

Personal Information

When you sign up for a mailbox or use our services, we collect:

• Full legal name, mailing address, email address, and phone number
• Two valid government-issued photo IDs (required by USPS CMRA regulations)
• Completed and notarized USPS Form 1583
• Business name and entity information (for business accounts)
• Signature specimens for notary and account verification

Payment Information

Payment processing is handled by Square. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. Square collects and processes your payment information in accordance with PCI-DSS standards. We retain transaction records including amounts, dates, and the last four digits of your payment method.

Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and approximate geolocation
• Browser type, operating system, and device information
• Pages visited, time spent, and referring URLs
• Dashboard usage patterns and feature interactions

Mail and Package Data

We photograph the exterior of incoming mail and packages for your dashboard notifications. When you request a scan of mail contents, those images are stored securely in your account. Package tracking information, delivery timestamps, and forwarding records are maintained as part of our service.

How We Use Your Information

We use the information we collect to:

• Provide and manage your mailbox rental, mail scanning, forwarding, and package services
• Process payments and manage your account billing
• Verify your identity as required by USPS CMRA regulations
• Send you notifications about incoming mail, packages, and account updates
• Provide same-day delivery and notary services you request
• Facilitate business formation services
• Improve our website, services, and customer experience
• Comply with legal obligations and respond to law enforcement requests
• Prevent fraud and protect the security of our services

Third-Party Sharing

We do not sell your personal information. We share your data only with the following third parties as necessary to provide our services:

• Square — Payment processing. Square handles all credit card transactions and stores payment credentials under their own privacy policy.
• Vercel — Website hosting and infrastructure. Vercel may process server logs containing IP addresses and request metadata.
• Turso— Database hosting. Your account data and mail records are stored in Turso's managed database infrastructure.
• USPS — We submit USPS Form 1583 data as required by federal regulation for Commercial Mail Receiving Agencies (CMRAs).
• Shipping carriers — When forwarding mail or packages, we share necessary address information with USPS, UPS, FedEx, or DHL.
• Delivery couriers — For same-day delivery service, we share your delivery address with our local courier partners.
• Law enforcement — We may disclose information when required by law, subpoena, or court order.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Maintain your login session and authentication state
• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Improve website performance and functionality

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of our website and dashboard.

Security Measures

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Encrypted database storage for sensitive personal information
• Role-based access controls limiting staff access to customer data
• 24/7 security surveillance at our physical location
• Secure, locked mailbox storage accessible only by authorized staff
• Regular security audits and monitoring

While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active and as needed to provide our services. Under USPS CMRA regulations, we are required to retain copies of USPS Form 1583 and associated identification documents for a minimum of two (2) years after the termination of your mailbox agreement. Payment records are retained for seven (7) years for tax and accounting purposes. Mail scan images are retained for 90 days after processing unless you request earlier deletion. After the applicable retention period, data is securely deleted or anonymized.

Your Rights

You have the right to:

• Access — Request a copy of the personal information we hold about you.
• Correction — Request that we correct inaccurate or incomplete personal information.
• Deletion — Request that we delete your personal information, subject to legal retention requirements (such as the CMRA two-year retention rule).
• Data portability — Request your data in a structured, commonly used format.
• Opt out — Opt out of marketing communications at any time.

To exercise any of these rights, contact us at nohomailbox@gmail.com or call (818) 506-7744. We will respond to your request within 30 days.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. USPS Form 1583 requires valid government-issued photo identification, which inherently limits our services to adults. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know — You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the third parties with whom we share it.
• Right to delete — You may request deletion of your personal information, subject to exceptions required by law (including CMRA retention requirements).
• Right to opt out of sale— We do not sell your personal information. If this practice ever changes, we will provide a "Do Not Sell My Personal Information" link.
• Right to non-discrimination — We will not discriminate against you for exercising any of your CCPA rights.
• Right to correct — You may request correction of inaccurate personal information.
• Right to limit use of sensitive personal information — You may request that we limit our use of sensitive personal information to what is necessary to provide the services you requested.

To submit a CCPA request, email us at nohomailbox@gmail.com with the subject line "CCPA Request." We may need to verify your identity before processing your request.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: