Privacy Policy

1. Introduction

Welcome to Postcard.bot ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our postcard delivery service.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Name and email address
• Sender and recipient mailing addresses
• Payment information (processed securely through Stripe)
• Account credentials
• Postcard content (text, images, and photos you upload)

2.2 Information About Recipients

When you send a postcard, you provide us with the recipient's name and mailing address. You are responsible for ensuring you have the right to share this information with us. We use recipient information solely to print and deliver the postcard you have requested and do not use it to market to recipients.

2.3 Automatically Collected Information

When you use our service, we automatically collect:

• Device information (browser type, operating system)
• Usage data (pages visited, features used)
• IP address and location data
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information to:

• Process and deliver your postcards
• Process payments and maintain transaction records
• Communicate with you about your orders and account
• Improve our service and develop new features
• Prevent fraud and ensure security
• Comply with legal obligations
• Send promotional communications (with your consent)

4. Information Sharing and Disclosure

We may share your information with:

4.1 Service Providers

• Printing and Delivery Partners: We share recipient addresses and postcard content with our printing and delivery partners to fulfill your orders, which may be located outside your country of residence. These partners may process recipient addresses against postal change-of-address databases (such as USPS NCOALink) to improve deliverability.
• Payment Processors: Stripe processes all payment information
• Cloud Services: We use Firebase and other cloud services for data storage
• Analytics Providers: We use analytics services to improve our platform

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments
• Limited access to personal information

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Order records and postcard content are typically retained for accounting and customer service purposes.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Objection: Object to certain processing of your information
• Portability: Request a copy of your data in a portable format
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at the information provided below.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. You can control cookies through your browser settings.

9. Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

10. Children's Privacy

Our service is intended only for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• Email: mail@postcard.bot
• Address: Sunnyvale, CA