Privacy Policy

Last updated: July 6, 2026

Postari (“we,” “us,” “our”) operates the email management service at postari.email. This Privacy Policy explains what information we collect, how we use it, and your choices.

Information we collect

• Account information — email address and authentication credentials you use to sign in.
• Email content — messages received at your monitored addresses (headers, body, attachments metadata and content), drafts, sent mail, and routing configuration you set up.
• Integration credentials — third-party API keys and OAuth tokens (for example Resend, Microsoft Outlook Calendar, or Google Calendar) stored encrypted on our servers.
• Calendar data — when you connect Outlook or Google Calendar, we access calendar events and availability only as needed to display your agenda, create events, and respond to invites you approve. We do not sell calendar data.
• Usage and security logs — audit events, delivery status, and diagnostic logs needed to operate and secure the service.
• Contact form submissions — name, email, and message if you reach out via our contact page.
• Technical data — device and browser information, and approximate location (city-level, derived from your IP address) collected automatically through privacy-friendly analytics when you visit our website. We do not store your IP address with analytics data.

How we use information

We use your information to provide and improve Postari: deliver email to your inbox, apply routing rules and AI triage, send notifications, sync calendar actions you request, troubleshoot issues, and protect against abuse.

If you enable AI features, message content may be processed by our AI provider to generate summaries or suggested replies. We do not use your email content to train public models.

Microsoft and Google calendar connections

When you choose to connect Outlook or Google Calendar, you authorize Postari through OAuth to read and write calendar events on your behalf. You can disconnect at any time in Settings → Integrations → Calendar. Disconnecting revokes our access to your calendar through that provider’s controls and removes stored tokens from our database.

Microsoft’s use of data obtained through Postari is also subject to the Microsoft Privacy Statement. Google’s use of data is subject to the Google Privacy Policy.

Third-party service providers

We use trusted infrastructure and service providers to run Postari, including hosting, database, email delivery (Resend), authentication, and optional AI processing. These providers process data only to perform services on our behalf and under contractual confidentiality obligations.

Data retention and security

We retain your data while your account is active and as needed to provide the service. API keys and OAuth refresh tokens are encrypted at rest. Access to sensitive integration data from the browser is denied by design; only server-side processes with appropriate authorization can use them.

You may delete messages, disconnect integrations, or close your account subject to our Terms of Service and applicable law.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export personal data we hold about you. Contact us using the details below and we will respond within a reasonable time.

Children

Postari is not directed at children under 13. We do not knowingly collect personal information from children.

Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of Postari after changes means you accept the updated policy.

Contact

Questions about this Privacy Policy: contact us or email privacy@postari.email.