Privacy policy

• Account details: your name and email address, and the workspace you create.
• Business details you give us: your company website, the audiences you choose, your goals, writing samples and instructions.
• Your Google account, if you connect Gmail: your email address, OAuth access and refresh tokens, the emails Postlet sends for you, the replies to them, and your sent mail (the most recent threads) so Postlet can learn how you write.
• Your LinkedIn account, if you connect it: your profile, connection count and pending requests, the messages you wrote in the last year (to learn your LinkedIn voice), and conversations with the people Postlet contacts for you.
• Prospect data: business contact details of the people Postlet contacts for you (name, title, work email, LinkedIn profile, company) from public sources and data providers.
• Usage and technical data: actions in the app, logs, and a session cookie that keeps you signed in. We do not use advertising cookies.

Only to provide and secure the service you set up: to find people who fit the audiences you chose, write emails and LinkedIn messages in your voice, send them from your accounts at a safe pace, notice replies and stop sequences, run experiments on what gets replies, and show you what happened.

We also use data to keep the service secure, to answer you when you contact us, and where the law requires it. We do not sell personal data and we do not use it for advertising.

Postlet's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Postlet requests these Google permissions, and uses each only as described:

• gmail.send: to send the emails in your sequences from your own Gmail address.
• gmail.readonly: to detect replies (so a sequence stops as soon as someone answers), to check a thread before each follow-up, and to read your sent mail to learn your writing style.
• userinfo.email: to know which Gmail address you connected.

Google user data is used only to provide and improve these user-facing features. It is not used for advertising, not sold, and not used to develop, improve or train generalized artificial intelligence or machine learning models. It is not transferred to others except as needed to provide these features (to the service providers listed below, under contract), for security, to comply with the law, or as part of a merger or acquisition with notice to you.

No person at Postlet reads your Google user data unless you ask us to (for example for support), it is needed for security, or the law requires it.

You can disconnect Gmail at any time in Settings, or revoke access at myaccount.google.com/permissions.

Postlet uses AI models from Anthropic, through its commercial API, to research companies and write and check messages. The content needed for a task (for example your writing samples and a prospect’s public company details) is sent to the model for that task. Anthropic does not use data sent through its commercial API to train its models.

Service providers that process data on our behalf, under contract:

• Supabase: database and authentication.
• Vercel: hosting.
• Anthropic: AI models.
• Google: Gmail sending and reading, for accounts you connect.
• Unipile: LinkedIn connection, if you connect LinkedIn.
• Hunter, Apollo, Crustdata and Exa: finding companies and business contact details, and public web research.
• Resend: service notifications to you.

We may also disclose data to comply with the law or to protect the rights and safety of our users and others.

Data is encrypted in transit (TLS). OAuth tokens and other credentials are encrypted at rest (AES-GCM). Each workspace’s data is isolated by row-level security, and access to production systems is limited to the people who need it.

We keep your data while your account is active. If you delete your account or ask us to, we delete your workspace data, including Google and LinkedIn data, within 30 days, except where the law requires us to keep it. Disconnecting Gmail or LinkedIn stops all access immediately.

If you received an email or LinkedIn message sent through Postlet and do not want more, reply to say so or use the unsubscribe link. The sender’s workspace will not contact you again. You can also ask us to delete your details at the address below.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. Contact us and we will respond within 30 days.

We will post changes here and update the date above; for material changes we will tell you by email or in the app.

Questions or requests: sid@trypostlet.com. Stratify AI, Inc.