Privacy Policy

Last updated: October 9, 2026

This page explains what information Knockless collects, why, who we share it with, and what choices you have. Knockless is run by York Computer Repair Inc., a Pennsylvania company at 2069 Carlisle Rd, York, PA 17408 (“Knockless,” “we,” “us”). It covers two groups of people: contractors who use the app, and homeowners who get a postcard.

1. What we collect from contractors

• Account details: your email address, so we can email you a sign-in code and receipts, and the company you belong to (as owner or crew).
• Company details: your company name, logo, phone number, website, return address, license or registration number, and anything else you put on your card. If you give us your website address to fill these in faster, we read your public web pages to suggest details. You review every field before anything is saved.
• Pins and addresses: the spots you drop pins on, the addresses we find for them, and any notes you add.
• Roof photos: photos you take in the app to remember a house. They stay on your phone unless a feature clearly says it will upload them.
• Mailing history: which cards you sent, to which addresses, when, what they cost, whether they were mailed or rejected, and the Postal Service tracking updates for each card.
• QR code scans: each card has its own code. When it’s scanned, we record that it happened and when (the number of scans, and the first and last time). We don’t record who scanned it.
• Payment information: payments are handled by Stripe. You type your card into Stripe’s secure form. We never see or store your full card number. We only get things like the card brand, the last 4 digits and the expiration date, so we can show you which card is on file.
• Basic technical information: like any website, our hosting provider records things such as your IP address, browser type and the pages you load, to keep the service running and stop abuse.

2. How we use it

• To find addresses for your pins and show them on the map.
• To build your postcard and have it printed and mailed.
• To find the homes near a pin (the closest ones, or the whole mail route) when you send a neighborhood mailing.
• To show where your cards are in the mail, and to tell you when one is scanned.
• To stop your company from mailing the same home more than once in 30 days.
• To charge your card, send receipts and handle refunds.
• To block addresses on our do-not-mail list.
• To answer your questions and fix problems.
• To catch fraud, harassment and other abuse.
• To follow the law, for example keeping tax and payment records.

3. Who we share it with

We only share what each partner needs to do its job:

• Lob (print and mail): gets the recipient address, “Current Resident,” your return address, and the card design with your company details, so it can print and mail the card. Lob also checks addresses against Postal Service data and tells us where each card is in the mail.
• Stripe (payments): handles your card and charges. Stripe has its own privacy policy.
• Address lookup (Geocodio, with OpenStreetMap’s Nominatim service as a backup): gets the map location of a pin so it can tell us the street address. We don’t send them your name or company.
• Maps (MapTiler and OpenStreetMap): provide the map pictures in the app. Like any website, they see your device’s internet address when the map loads.
• Melissa (mailing lists): for a neighborhood mailing, gets the address of your pin and sends back the addresses of nearby homes on the same mail route. We don’t ask Melissa for names.
• Supabase (database and sign-in): stores your account, company details, pins and mailing history.
• Resend (email): sends your sign-in codes.
• Cloudflare (Turnstile): runs the “I’m not a robot” check when you ask for a sign-in code. It sees your device’s network address and browser details for that check only.
• Formspree (contact form): delivers the messages you send through our contact form to us by email, with the email address and details you type in.
• Hosting (Netlify): runs our website and servers.
• Microsoft Clarity (website analytics): on our public web pages only (the home page, contact page and these policy pages), not inside the app. It records how visitors use those pages (taps, scrolling, how far people read) so we can make them clearer. It masks anything you type. See Microsoft’s privacy statement.
• Your crew: people on your company’s account see the company’s pins, mailing history and scan alerts.
• The law: if a court order or law requires it, or to protect people from harm or fraud.
• A new owner: if Knockless is ever sold or merged, this information would move to the new owner, who would have to follow this policy.

4. What we don’t do

• We don’t sell your data, or homeowners’ data, to anyone.
• We don’t share your pins or leads with other contractors.
• We don’t use your information for other companies’ ads.
• We don’t look up homeowners’ names, phone numbers or emails. Cards go to “Current Resident.”
• We don’t track who scans a QR code. The scan page has no ads or tracking cookies.

5. For homeowners

Why did I get a postcard?

A local contractor used Knockless to send a postcard to your address. They may have driven past your home, or sent cards to every home in your neighborhood. The card is from that contractor, not from us. Their contact details are on the card.

Where did you get my address?

If the contractor dropped a pin on your home, your address came from an address-lookup service based on that spot on the map. If they sent a neighborhood mailing, your address came from a list of nearby home addresses we get from Melissa, a licensed mailing-list company that uses Postal Service data. We don’t collect your name. The only information we keep about you is your address, which cards were sent to it, their mail tracking, and whether a card’s QR code was scanned.

What happens if I scan the QR code?

You see a page with the contractor’s phone number and website. We count the scan and tell the contractor that a card sent to your address was scanned. We don’t learn your name, phone number or email, and we don’t share anything else about you.

How do I stop these postcards?

Use knockless.app/stop or our contact form. We’ll add your address to our do-not-mail list, and no Knockless contractor will be able to mail it again. We keep your address on that list so the block keeps working. This stops Knockless mail only. It can’t stop mail a contractor sends some other way, but our terms require contractors to honor your request.

Want less advertising mail from everyone? Register for free at DMAchoice.org. Most mailing-list companies, including Melissa, remove registered homes from their lists every month.

Want to know what we have, or have it deleted?

Send us a message through our contact form. We’ll tell you which cards were sent to your address and, if you ask, delete our mailing records for it. We’ll still keep your address on the do-not-mail list unless you ask us not to.

6. Cookies and storage on your phone

We don’t use advertising cookies. Our public web pages use Microsoft Clarity, which sets a cookie to tell one visit from the next so we can see how the pages are used; it is not used inside the app and it does not follow you to other websites. The app saves a few things on your phone or computer:

• To keep you signed in, so you don’t have to log in every time.
• To save pins offline. When you’re out of signal, your pins, notes and roof photos are saved on your phone (in your browser’s local storage), and addresses are looked up once you’re back online.
• To remember the map, like the last spot you looked at.
• To load faster and work offline, the app keeps a copy of itself and the map pictures you’ve already seen.

Clearing your browser’s data for Knockless removes these. Anything that was only on your phone, like roof photos, will be gone.

7. How long we keep things

• Account and company details, pins and card designs: while your account is open. After you close your account, we delete them within 90 days.
• Mailing and payment records (including mail tracking and QR scan counts): up to 7 years, for taxes, refunds, chargebacks and complaints.
• Neighborhood mailing lists: we use each list once, for the mailing it was bought for. We keep only the addresses that were actually mailed, in your mailing history.
• The do-not-mail list: as long as Knockless runs, so the block keeps working.
• Server logs: a short time, usually no more than 30 days.
• Data on your phone: until you delete it or clear your browser data.

8. Keeping it safe

Everything travels over encrypted connections (HTTPS). Card numbers go straight to Stripe. Our secret keys stay on our servers, never in the app. No system is perfect, but if something goes wrong that affects your information, we’ll tell you as the law requires.

9. Your choices

• You can view and change your company details in the app.
• You can remove your saved card at any time.
• You can ask for a copy of your data, or ask us to delete your account, through our contact form.
• Some states give you extra privacy rights. Send us a message through our contact form and we’ll help, whatever state you live in.

10. Children

Knockless is for businesses and people 18 and older. We don’t knowingly collect information from children.

11. Changes to this policy

If we change this policy in a way that matters, we’ll let you know in the app or by email before it takes effect. The date at the top shows the latest version.

12. Contact us

Questions, a copy of your data, or a do-not-mail request:
knockless.app/contact
York Computer Repair Inc.
2069 Carlisle Rd, York, PA 17408

See also our Terms of Service.