#Privacy Policy

Last updated: November 9, 2026

Postra LLC (“Postra”, “we”, “us”) is a Wyoming limited liability company. We run hosted email under US law. This policy explains what we collect, why, how we handle it, and what you can ask us to do. We never sell your data. Paid plans pay for the product.

Who we are

  • Postra LLC
  • Wyoming Filing ID 2026-002122423
  • 30 N Gould St, STE R, Sheridan, WY 82801, United States
  • privacy@postra.so

#What this policy covers

This policy covers people who use Postra for themselves: visitors to our sites, people who create a Postra account, and people with a mailbox on a domain we operate (including @postra.so).

It also covers Account Data we hold as a business for everyone: sign-in, billing, security, support, and product analytics we run.

It does not cover mail and related content on a custom domain that an organization runs through Postra. For that content, the organization is the business and we are a service provider under our Terms and Data Processing Addendum. If you get mail through an employer’s custom domain, ask that organization how they handle your data.

Your own primary mailbox on @postra.so (or another domain we operate) stays under this policy even if you also administer a custom domain.

#What we collect and why

We try to collect only what we need to run email.

#Account and identity

When you sign up we collect things like your name or display name, the mailbox address you claim (for example you@postra.so), and sign-in details. If you use Google or Apple Sign In, we get the identifiers and email those providers share with us (including Apple Hide My Email relays when you choose that).

We use this so you can sign in, we can reach you about the product, and you can run your mailbox.

#Mail and mailbox state

We store the mail you send and receive, attachments, folders, labels, read state, delivery and bounce metadata, search indexes built from that mail, and category labels we generate on our own systems. We also cache remote images through our media proxy so senders do not see your IP when images load.

We keep that so the product works as email. We do not use mailbox content for ads. We do not sell it. We do not hand it to third parties to train foundation models.

#Domains

If you connect a custom domain, we store the domain name, DNS checks, and mail-auth settings needed to deliver mail.

#Billing

If you pay, Stripe processes the card. We see billing name, address, tax IDs when required, plan, invoices, and payment status. We do not store full card numbers.

#Security and abuse prevention

We log IP addresses, approximate location from IP, user agents, and related request metadata. We may run proof-of-work challenges and collect short-lived browser or device signal hashes on signup and other sensitive actions to catch bots. Those hashes are not used for advertising and are not used to permanently ban a device.

#Product analytics (signed-in app only)

In the signed-in product we may send product events, errors, and session replay to PostHog Cloud in the United States. Replay is set up to mask inputs and skip mail content regions. The marketing site does not load PostHog.

You can turn analytics off in Privacy settings. Where the law requires a clear ask before non-essential analytics, we ask first.

#Support and voluntary notes

If you write to support or privacy, we keep that thread so we can help you later.

#Avatars

Profile images you upload, and favicons or logos we fetch for domains you configure.

#How we use it

  • Run the Service: deliver mail, sync clients, search, spam and malware filters, categorisation on our infrastructure
  • Keep accounts secure and fight abuse
  • Bill you and keep accounting records
  • Answer support
  • Understand product reliability (with analytics only when allowed)
  • Meet legal duties and enforce our Terms

We may use aggregated or de-identified information that cannot reasonably identify you.

#When we share it

Vendors that help us run Postra. Hosting, storage, edge, analytics, payments, and optional sign-in. The live list is on Vendors. They get only what they need for their job.

Your organization’s admins. If you are on a team account, admins may manage seats, domains, and mailboxes under that organization’s rules.

At your direction. Exports you run, or integrations you connect. Their policies apply to what they receive.

Law and safety. We may disclose data when US law requires it, to protect people from serious harm, or to defend legal claims. We share the least we can. As a US company, our default for foreign government asks is to push them through proper US legal process (for example mutual legal assistance) unless we are already compelled under US law.

Business transfers. If Postra is sold or merged, data may move with the business. We will give notice when the law requires it.

Sale and sharing for ads are covered under Your Privacy Choices.

#When a human looks at mail

No Postra human reads your mail as a matter of course. Staff access rules (support, abuse, faults, legal compulsion, or your direction) are in the Terms.

#Where data lives

Postra is a US company. Mail and account systems run in the regions listed on Vendors, which may include locations outside the United States. If you use Postra from another country, your information may be processed in the US and those regions. Organization customers whose non-US privacy law requires a transfer tool for custom-domain Customer Content can use the DPA Schedule 3 (signed packs on request).

#How long we keep it

While your account is active, we keep Account Data and mailbox content so the product works.

If you close a Starter or Professional account yourself, we first mark it for deletion and keep mailboxes readable for a short grace period (default 7 days) so you can restore. After grace ends, or after other closure paths finish, we delete or irreversibly anonymise Account Data and mailbox content from active systems within 60 days, except for legal holds, abuse cases, accounting, or open disputes.

Backups rotate on a limited schedule. Security logs stay as long as we need them for security. The remote-image proxy cache is short-lived. Analytics follow our PostHog project settings and deletion requests.

For custom-domain organization content we process as a service provider, deletion and return follow the DPA and that organization’s instructions.

#Security

We encrypt data in transit on public networks and encrypt data stores at rest on encrypted volumes. Hosted webmail does not use per-message OpenPGP encryption inside the mail store; details are on Security. We also use access controls, abuse prevention, HTML sanitization for untrusted mail, and a remote-image proxy.

No system is perfect. Use a strong unique password and tell us if you suspect someone got into your account.

#Your rights and choices

We aim to give the same practical controls to everyone. US state privacy laws (including California) may give you formal rights to know, access, correct, delete, or opt out of sale or sharing for ads. See Your Privacy Choices and the California notice at collection.

If you live outside the United States, local law may add rights. We will honour requests the law requires for people in your country. You can still use the same product controls and contact path below.

How to exercise rights. Email privacy@postra.so or use in-product Privacy and account controls. We verify by control of the Postra account (signed-in session or mail from the account address). We do not ask for government ID at signup. If we still cannot tell which account you mean without risking someone else’s data, we may decline.

Organization custom-domain mail. Ask that organization. We will point you there for that content. Requests about Account Data or your @postra.so vault still come to us.

Analytics. Reject in the banner where we show it, or change Privacy settings anytime. Global Privacy Control is treated as a decline for analytics where that regime applies.

US residents may complain to their state attorney general or, in California, the California Privacy Protection Agency. Residents elsewhere may use their local privacy regulator where that applies.

#California notice at collection

If you are a California resident, this section is our notice at collection under the CCPA / CPRA. It covers personal information we collect as a business (Account Data and mailboxes on domains we operate, including @postra.so). For mail on an organization’s custom domain, that organization is the business; see the DPA.

Category (CPRA) Examples Sources Business purpose Shared with Retention
Identifiers Name, email, account ID, IP address You; Google or Apple if you choose those sign-in methods; your device Run accounts, deliver mail, security, billing Service providers and independent providers on Vendors; your organization’s admins if you are on a team While the account is active; then delete from active systems within 60 days after closure (subject to legal holds, abuse, and accounting)
Customer records Billing name, address, tax ID when required, plan, invoices You; Stripe Billing and tax records Stripe; accountants or counsel when needed Account life plus accounting retention (typically up to 7 years for invoices)
Commercial information Plan, purchase history, payment status You; Stripe Provide paid features and support Stripe; service providers that help run billing ops Same as customer records
Internet / network activity Logs, user agent, product events, session replay (when allowed) Your device and browser; PostHog when analytics is on Security, abuse prevention, product reliability Hosting and analytics providers on Vendors Security logs as needed for security; analytics per PostHog project settings and deletion requests
Approximate geolocation Region inferred from IP Your network Security, fraud, latency routing Hosting and security tooling With related security / request logs
Audio, electronic, visual Profile photo or domain logo you upload or we fetch for domains you configure You; public favicon fetch Show avatars and domain branding Storage and CDN providers While linked to an active account, then with account deletion
Professional / employment Role or company you volunteer; org membership You; your organization’s admins Team seats and admin tools Your organization While the membership lasts, then with account or seat removal
Inferences Mail category labels we generate on our systems Derived from your mail on our infrastructure Inbox features Not sold; stays in the Service With the related mailbox content
Sensitive personal information (limited) Account login credentials; contents of mail/messages you send or receive (may include whatever correspondents put there) You; correspondents Provide email; authenticate you Service providers needed to host and deliver mail; we do not use sensitive PI to infer characteristics about you for advertising Credentials while the account is active; mailbox content while active, then within 60 days after closure (subject to holds above)

We do not sell personal information. We do not share personal information for cross-context behavioural advertising. We do not use or disclose sensitive personal information for purposes that require a right to limit under CPRA beyond providing the Service.

#Your Privacy Choices

We do not sell or share personal information for cross-context behavioural advertising, so there is no “Do Not Sell or Share” toggle to flip for ads. You can still:

  1. Turn off product analytics in signed-in Privacy settings (or reject analytics where we ask first)
  2. Send a Global Privacy Control signal; we treat it as a decline for non-essential analytics where that regime applies
  3. Access, correct, or delete Account Data through the product or privacy@postra.so
  4. Close your account (for example /me/goodbye) and export mail before you leave

California residents may also use an authorized agent. Email privacy@postra.so with enough detail for us to verify the agent and the account. We will not discriminate against you for exercising privacy rights.

#Cookies

Necessary cookies keep you signed in, protect forms, remember locale and theme, and keep the product working. Product analytics cookies (PostHog) run only in the signed-in app when allowed. Full inventory: Cookies and storage.

#Children

Postra is for people 18 and older. We do not knowingly collect data from children under 18. If you think a child signed up, email privacy@postra.so.

#Changes

We may update this policy. We will change the date at the top. For material changes we will give extra notice when the law requires it.

#Contact

privacy@postra.so
Postra LLC, 30 N Gould St, STE R, Sheridan, WY 82801, United States

Legal | Terms | Vendors | Security