Your inbox is
not our business.

What we collect

Posty processes the information you enter to make and send a postcard: an image, message, caption, link, location, sender name, and recipient email address. To provide Your Posties, Posty stores the postcard image, postcard content, delivery status, private web-view token, and the basic account identity used to send it. If you submit feedback or a support request, we store the message, reply email if you provide one, and submission time so we can respond. We also collect basic technical and aggregate usage information through Google Analytics, such as pages visited and feature interactions.

If you choose “Use my location,” your browser asks for permission. Posty sends coordinates to a geocoding service only to return a place name for the postcard. Posty does not store your precise coordinates.

Google and Microsoft user data

For Gmail sending, Posty requests gmail.send and basic account identity information. For Microsoft sending, Posty requests send permission and basic profile information. These permissions let Posty send the postcard you create and associate Your Posties with your account. Posty does not request or use permission to read, search, scan, organize, index, modify, or delete email messages, contacts, labels, or settings.

Posty uses information received from Google APIs only to provide the visible Gmail-sending feature you request. We do not sell Google user data, use it for advertising, transfer it to data brokers or information resellers, or use it to develop, improve, or train generalized AI or machine-learning models. Posty’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use and share information

We use postcard information solely to render, send, display, and support the postcard you approve, troubleshoot the service, and improve clearly visible Posty features. We share recipient information with the email provider you choose only as needed to send the message. We do not sell postcard data or recipient lists. We do not share Google user data with third parties except as needed to provide the user-requested sending function, comply with law, or protect against fraud and abuse.

Storage, retention, and security

Posty keeps the minimum postcard record needed for Your Posties and its private web view. It does not keep Gmail or Microsoft access tokens, does not store your mailbox, and does not retain a raw copy of the provider’s outbound email. Your connected email provider may retain a copy in its Sent folder under its own policies. Basic analytics information is retained by Google Analytics under its configured retention controls.

We use reasonable administrative and technical safeguards appropriate to the service. No internet service can promise absolute security.

Your choices and deletion

You can decline Google, Microsoft, or location permission and still use the parts of Posty that do not need them. You can revoke Google or Microsoft access from your account settings at any time. To ask about or request deletion of information we hold, email sendposty@gmail.com. We will respond to verified requests and delete applicable information unless we need to retain it for legal, security, or fraud-prevention reasons.

Changes and contact

We may update this policy as Posty develops. If we make a material change to how we handle Google user data, we will update this page before applying it. Questions? Email sendposty@gmail.com.