Your inbox is
not our business.

What we collect

Posty processes the information you enter to make and send a postcard: an image, message, caption, link, location, sender name, and recipient email address. We also collect basic technical and aggregate usage information through Google Analytics, such as pages visited and feature interactions.

If you choose “Use my location,” your browser asks for permission. Posty sends coordinates to a geocoding service only to return a place name for the postcard. Posty does not store your precise coordinates.

Google user data

For Gmail sending, Posty requests only the gmail.send permission. This lets Posty send the postcard you create and approve from your Gmail account. Posty does not request or use permission to read, search, scan, organize, index, modify, or delete Gmail messages, contacts, labels, or settings.

Posty uses information received from Google APIs only to provide the visible Gmail-sending feature you request. We do not sell Google user data, use it for advertising, transfer it to data brokers or information resellers, or use it to develop, improve, or train generalized AI or machine-learning models. Posty’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use and share information

We use postcard information solely to render and send the postcard you approve, troubleshoot the service, and improve clearly visible Posty features. We share recipient information with the email provider you choose only as needed to send the message. We do not sell postcard data or recipient lists. We do not share Google user data with third parties except as needed to provide the user-requested sending function, comply with law, or protect against fraud and abuse.

Storage, retention, and security

Posty is designed to send in the browser. It does not keep a copy of Gmail access tokens, your Gmail mailbox, or the email content it sends on Posty servers. Your connected email provider may retain a copy in its Sent folder under its own policies. Basic analytics information is retained by Google Analytics under its configured retention controls.

We use reasonable administrative and technical safeguards appropriate to the service. No internet service can promise absolute security.

Your choices and deletion

You can decline Google, Microsoft, or location permission and still use the parts of Posty that do not need them. You can revoke Google or Microsoft access from your account settings at any time. To ask about or request deletion of information we hold, email sendposty@gmail.com. We will respond to verified requests and delete applicable information unless we need to retain it for legal, security, or fraud-prevention reasons.

Changes and contact

We may update this policy as Posty develops. If we make a material change to how we handle Google user data, we will update this page before applying it. Questions? Email sendposty@gmail.com.