Privacy Policy

The Service is operated by Postface ("Postface", "we", "us"). We are the data controller for the personal information described in this policy. You can reach us at any time at support@postface.io.

• Account details. Your name and mobile phone number, which you provide when you sign in. We use your phone number to send you sign-in codes and your curated messages.
• Connected-app data. When you connect an integration (such as Gmail or Google Calendar), Postface reads the content needed to summarize and curate for you. The Google data we access is listed precisely in the next section. You choose what to connect, and you can disconnect at any time.
• Usage and preferences. Your delivery schedule, and what you save or skip, which teaches the curation engine. We store these signals to sharpen your digests and never use them to profile you for advertising.
• Technical data. Basic logs such as IP address, browser type, and timestamps, used only for security, debugging, and keeping the Service reliable.

If you connect Gmail or Google Calendar, Postface requests limited, read-only access to your Google account. Specifically, we access:

• Gmail messages and metadata (read-only). The sender, recipients, subject, date, labels, and the body text of messages in your inbox, so we can summarize what arrived and what needs a reply. We cannot send, delete, move, or modify your mail.
• Google Calendar events (read-only). Event titles, times, locations, descriptions, and attendee names, so digests can mention what is coming up. We cannot create, change, or delete events.
• Your Google account email address and basic profile (name), so we can show you which account is connected and keep it tied to your Postface account.

We do not request access to Google Contacts, Google Drive, or any other Google service, and we never ask for permission to send email or write to your calendar.

We use Google user data for exactly one purpose: to generate your digests and deliver them to you. That means reading new email and upcoming events, having our AI provider write a short summary, and sending that summary to your phone by SMS. Nothing else.

In particular, we do not:

• Sell Google user data, or share it with data brokers or advertisers.
• Use Google user data to serve advertising or to build advertising profiles.
• Use Google user data to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models. Your data is processed only to produce your own digests.
• Transfer Google user data to any third party except the service providers named below, as strictly necessary to provide Postface to you, for security, or to comply with law.

Postface is automated. Our staff do not read your email or calendar events, except in these limited cases: (1) you give us explicit consent, for example when you ask us to help troubleshoot a specific message; (2) it is necessary for security purposes, such as investigating abuse or a suspected security incident; (3) it is required to comply with applicable law or a valid legal process; or (4) the data has been aggregated and anonymized and is used only for internal operations, such as measuring how well the Service works.

• Encryption in transit. All connections between your browser, our servers, Google, and our service providers use TLS (HTTPS).
• Encryption at rest. Our database and storage are encrypted at rest. The credentials that let Postface read your Google account are additionally encrypted with a separate application key (AES-256-GCM) before they are stored, and can only be decrypted by our server processes — never by the browser or by other users.
• Access controls. Each person's data is isolated to their own account by database access rules. Only a small number of authorized Postface operators can access production systems, and that access is logged.
• How long we keep it. Email and calendar content is retrieved when a digest is generated, processed in memory, and discarded once the digest is written — we do not keep copies of your messages or events, and any temporary working data is deleted within 24 hours. We keep the digests we sent you and minimal identifiers (such as message IDs, to avoid repeating items) for as long as your account is active. Your Google access credentials are kept only until you disconnect the integration or close your account.

We do not sell your data, and we do not share it for advertising. We share information only with service providers that process it on our behalf, under contracts that limit what they can do with it, in these categories:

• AI / large-language-model provider — receives the content of the email and events being summarized in order to write your digest. The provider processes this data only to return the summary to us.
• SMS delivery provider — receives your phone number and the text of each message so it can deliver sign-in codes and digests to your phone.
• Hosting, database, and infrastructure providers — run the servers and databases that store your account, preferences, digests, and encrypted connection credentials, including the secure connector service that holds your Google authorization on our behalf.

We may also disclose information if required by law, subpoena, or court order; to protect the rights, safety, or property of Postface, our users, or the public; or as part of a merger or acquisition, in which case this policy will continue to apply to your data.

We use the information received from Google APIs only to provide and improve Postface's user-facing features for you.

This means we do not transfer Google user data to any third party for advertising, we do not use it to build profiles for advertising, we do not use it to train generalized AI models, and we only share it with a third party as strictly necessary to provide Postface's features to you. You can review Google's policy at the Google API Services User Data Policy.

• Phone number collection. We collect your mobile phone number when you sign in. It is used to verify it is you (one-time sign-in codes) and to deliver your digests.
• Message frequency. Frequency depends on the preference you choose in the app — real time, daily, a few times a week, or weekly — plus a sign-in code each time you log in. Most people receive between 1 and 7 digests per week.
• Opting out. Reply STOP to any Postface message to stop receiving texts, or reply HELP for help. Message and data rates may apply.
• No marketing sharing. Your phone number and text-messaging consent are never shared with or sold to third parties for their marketing purposes. Our SMS delivery provider handles your number only to deliver Postface messages.

When you connect other services we support, such as Microsoft Outlook, you grant Postface the access those platforms allow. We read only what's needed to summarize and curate for you, follow each platform's developer terms, and disconnect the moment you ask us to.

You are in control of your data. You can:

• Disconnect an integration in the app. Open your Postface home, tap Integrations, and choose Disconnect next to Gmail or Calendar. We revoke our access with Google and delete the stored connection credentials immediately; any temporary working data from that account is deleted within 24 hours.
• Revoke access from Google. Visit myaccount.google.com/permissions, select Postface, and remove access. Postface will stop reading your account right away.
• Delete your account. Email support@postface.io from the phone number or email tied to your account, or text us from your registered number, and ask us to delete your account. We will delete your profile, phone number, preferences, digests, and all connection credentials within 30 days, and purge them from backups within 90 days. We keep information only where the law requires it (for example, records of your text-message opt-out).

We keep your data only for as long as your account is active and for as long as needed to provide Postface to you. When you disconnect an integration, we stop reading it and remove the connection. When you close your account, we delete your data on the timeline above, except where we're required to keep it for legal reasons.

You can access, correct, or delete your account information at any time, and you can disconnect any integration whenever you like. Depending on where you live, you may also have the right to receive a copy of your data, to object to or restrict certain processing, and to complain to a data-protection authority. To exercise any of these rights, email support@postface.io. We will respond within 30 days.

Postface is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. We will post the new version at postface.io/privacy and update the "Last updated" date at the top. If a change materially affects how we use Google user data, we will notify you by text before it takes effect.

Questions about this policy or your data? Reach the Postface team at support@postface.io.