1. Scope
This Privacy Policy explains how Mainstay System LLC handles information through this business website, campaign inquiry forms, checkout, Mainstay Visibility accounts, and related communications.
2. Inquiry form
When you submit an inquiry, we collect the contact name, business name, phone number, email address, industry, target city or area, ZIP codes or neighborhood if provided, the service or offer you want to promote, desired timing if provided, and any optional message.
3. Mainstay Visibility accounts
For each account we store only: the owner's email address, business name, the Google place ID of the selected business, account status and access end date, owner checklist completions (task and date), monthly scan counts, daily scan counts for any postcard QR code, the date the Terms were accepted, and Stripe customer and checkout session IDs.
When a business owner electronically signs a final ad proof, we store the campaign, the approving account, the approval timestamp, and the owner's IP address as an immutable production-authorization record.
4. Payments
Online payments are processed by Stripe on its hosted checkout page. Card data is held only by Stripe; Mainstay System LLC never receives or stores it. Stripe's handling of payment data is governed by Stripe's own privacy policy.
5. Google Places data
Mainstay Visibility uses the Google Places API to show business details such as hours, phone, website, category, photo count, rating, and review information. This information is requested live when you view it and is not stored by Mainstay System LLC; only the place ID is kept. By using these features you are also bound by the Google Terms of Service (https://policies.google.com/terms) and the Google Privacy Policy (https://policies.google.com/privacy).
6. Technical and anti-abuse data
Our hosting and security systems process technical request information needed to deliver and protect the site. For rate limiting of the inquiry form and checkout, the server reads the network address reported by our hosting edge, converts it into a one-way hash, and stores the hash with a count and time window. Postcard QR scans record only a daily count per code: no IP address or device data.
7. Purposes of processing
- Respond to inquiries and discuss campaign options.
- Process purchases, verify businesses, and administer accounts and campaigns.
- Protect the site and services from spam, fraud, misuse, and technical failure.
- Maintain ordinary business, financial, and legal records.
- Comply with lawful requests and protect legal rights.
8. Service providers and disclosures
We use website hosting, managed database, authentication, payment (Stripe), business-data (Google), newsletter (Beehiiv), and email providers to operate the services. The site requests font files from Google Fonts. The hosting environment provides runtime error reporting that may receive technical error details and the page path when a failure occurs.
We may disclose information when required by law, to protect rights and safety, in connection with a business transaction, or to providers assisting us. We do not sell personal information or share it for cross-context behavioral advertising.
10A. No AI-generated content
The site does not use AI to generate content for visitors or advertisers.
11. Retention and deletion
Inquiry and account records are kept for as long as reasonably needed to provide services, maintain records, resolve disputes, and meet legal obligations. Proof-approval records are kept as production evidence. You may request deletion through the contact form, subject to legal, security, and recordkeeping exceptions.
12. Security
We use reasonable administrative and technical measures, including database access rules that limit each account holder to their own records. No transmission or storage method can be promised to be completely secure.
13. California privacy requests
California privacy rights depend on the law that applies to the business and the request. Where applicable, a California resident may request access, correction, deletion, or information about certain disclosures, subject to verification and legal exceptions. To submit a request, use the contact form. This section does not represent that any particular statute applies or does not apply.
14. Children and international processing
This business website is not directed to children under 13, and we do not knowingly collect information from them. Providers may process information in the United States or other locations where they operate.
15. Policy updates and contact
We may update this policy as our practices, providers, or legal obligations change. The date above identifies the current version. Questions and privacy requests may be sent through the contact form.