1. Overview
Cheddagram (“Cheddagram,” “we,” “us”) is a subscription software service operated by Lewis Properties (the “Company”) that helps subscribers send personalized offer letters through the mail to property owners and asset holders they have identified. This Privacy Policy explains what we collect, how we use it, and the choices you have.
By creating a Cheddagram account or using the service, you agree to the practices described here. If you do not agree, please do not use Cheddagram.
Information you give us
- Account data: your name, email address, phone number, mailing/return address, and password.
- Billing data: subscription plan, payment card details (processed and stored by Stripe, not us), and billing history.
- Letter content: the templates, merge fields, signature, and personalized message body you configure.
- Recipient data: the names, addresses, and any notes you enter or capture for the people and assets you want to contact.
- Support communications: messages you send us via email, chat, or SMS.
Information we collect automatically
- Device & usage data: IP address, browser type, operating system, referral URLs, pages viewed, features used, and timestamps.
- Cookies & similar tech: session cookies for authentication and (with your consent) analytics cookies to understand product usage.
- Location data: if you use the mobile app's pin-drop or photo feature, we collect the geographic coordinates you capture so we can identify the parcel. This is only collected when you actively use those features.
Information from third parties
- Parcel data providers (such as Regrid or ATTOM) return public assessor records including owner name, mailing address, and parcel attributes when you look up a property.
- Skip-tracing providers return additional contact information sourced from public records when you request enrichment. See Section 4 below.
- Direct-mail vendor (Lob) returns tracking events (delivered, returned, forwarded) after your letters are dispatched.
3. How We Use Information
We use the information we collect to:
- Provide the Cheddagram service — look up parcels, generate personalized letters, print and mail them via our print partner, track responses, and store your CRM.
- Process payments and manage subscriptions through Stripe.
- Send transactional messages (letter status, billing receipts, account notifications) to you.
- Improve the product — understand usage patterns, debug issues, and prioritize features.
- Communicate about product updates, offers, and educational content. You can opt out of marketing messages at any time; you cannot opt out of transactional messages while your account is active.
- Detect and prevent abuse, fraud, and violations of our Terms of Service.
- Comply with legal obligations and enforce our agreements.
4. Public Records & Skip Tracing
Cheddagram uses third-party data providers to enrich the recipient information you look up. Contact information returned by these providers is sourced from public records and may not always be current. You are solely responsible for how you use this data. In particular, you agree:
- To use recipient information only to send legitimate offers, inquiries, or communications about real property or assets you are interested in acquiring.
- Never to use Cheddagram data for stalking, harassment, discriminatory practices, employment screening, tenant screening, credit decisions, or any use regulated by the Fair Credit Reporting Act (FCRA). Cheddagram is not a consumer reporting agency, and skip-trace data is not an FCRA-compliant “consumer report.”
- To comply with all applicable federal, state, and local laws including the CAN-SPAM Act, TCPA, state Do-Not-Mail and Do-Not-Call registries, and any state-specific real-estate-solicitation rules.
- To honor any opt-out or removal request from a recipient promptly.
5. How We Share Information
We share information with:
- Service providers that process data on our behalf: Stripe (payments), Lob (direct mail printing and delivery), Handwrite.io (optional handwritten letters), Twilio (SMS/voice), our cloud infrastructure providers (DigitalOcean, AWS), and analytics tools.
- Legal & safety recipients: if required by law, subpoena, or court order, or if we believe in good faith that disclosure is necessary to protect our rights, users, or the public.
- Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of the transaction.
We do not sell your personal information. We do not share your data with third parties for their own marketing purposes.
6. Data Retention
We keep your account data for as long as your account is active. If you close your account, we retain your data for up to 12 months in case you reactivate, then delete or de-identify it, except where longer retention is required by law (e.g., financial records for tax purposes) or for legitimate business purposes such as fraud prevention. Letter delivery records are retained for at least seven years for USPS and IRS compliance.
7. Your Rights & Choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your information (subject to legal retention obligations).
- Object to or restrict certain processing.
- Receive a copy of your data in a portable format.
- Opt out of marketing communications by clicking the unsubscribe link in any email or replying
STOP to any SMS.
To exercise any of these rights, email privacy@cheddagram.com. We will respond within 30 days.
California Residents
Under the CCPA/CPRA, California residents have the right to know what personal information we collect, request deletion, correct inaccurate information, and opt out of any “sale” or “sharing” (we do not sell or share your data for cross-context behavioral advertising). We do not offer financial incentives for personal information.
8. Security
We use industry-standard technical and organizational measures to protect your data, including TLS encryption in transit, encryption at rest for sensitive fields, hashed passwords (bcrypt), scoped API tokens, audit logging, and least-privilege access controls for our team. No system is perfectly secure — if you believe your account has been compromised, contact us immediately at security@cheddagram.com.
9. Children's Privacy
Cheddagram is intended for use by adults 18 and older in the course of business. We do not knowingly collect information from children under 13. If we learn that we have, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or in-product notice at least 30 days before the change takes effect. The “Last updated” date at the top of this page reflects the most recent revision.