Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account and business information — name, email address, password, organization and branch details, and role.
• Customer data you enter — contact details of your mailbox holders and recipients, package and mail records, notes, and similar operational data you add to run your business.
• Payment information — processed by our payment provider. We receive limited details such as the last four digits, card brand, and transaction status, but not full card numbers.
• Usage and device data — log data, IP address, browser and device type, and actions taken in the Service, used for security, troubleshooting, and improvement.
• Cookies and similar technologies — used to keep you signed in and remember preferences, as described below.

2. How We Use Information

We use personal information to:

• provide, operate, secure, and improve the Service;
• authenticate users and protect against fraud and abuse;
• process subscriptions and payments;
• send transactional messages, including the pickup and receipt notifications the Service generates on behalf of a business to its customers;
• respond to support requests and communicate about the Service;
• comply with legal obligations and enforce our terms.

We do not sell personal information, and we do not use the customer data a business entrusts to us for our own marketing.

3. Email Notifications

When a business logs mail or completes a sale, the Service can email the relevant customer on that business’s behalf. These are transactional messages sent from PostalView’s infrastructure and branded for the sending business. Recipients can unsubscribe from notification emails using the link included in them; essential account and security messages cannot be unsubscribed from.

4. How We Share Information

We share personal information only as needed:

• Service providers — such as our cloud hosting, database, payment processing, and email delivery partners, who process data on our behalf under contract. See our list of subprocessors.
• Within your organization — data is visible to the members and branches of the account it belongs to, according to their roles.
• Legal and safety — when required by law, to respond to lawful requests, or to protect the rights, property, and safety of PostalView, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Cookies

We use strictly necessary cookies to keep you signed in and to operate the Service, plus limited functional cookies to remember preferences such as your theme. You can control cookies through your browser settings, but disabling necessary cookies may prevent you from signing in or using core features.

6. Data Retention

We keep personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period afterward to meet legal, accounting, and security obligations. Some records — such as audit and note entries — are kept in an append-only form for integrity and cannot be edited or deleted individually.

7. Security

We use technical and organizational measures — including encryption in transit, access controls, and tenant isolation — to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond promptly to incidents.

8. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. Account holders can manage much of their information directly in the Service. If you are a customer of a business that uses PostalView, please contact that business first, since it controls that data; we will support it in honoring your request. To exercise a right with us, contact us using the details below.

If you are in Mexico, the business you deal with is the responsable for your personal data under the LFPDPPP and is responsible for providing you an aviso de privacidad and honoring your ARCO rights (access, rectification, cancellation, and objection); PostalView acts only as that business’s encargado (processor).

9. International Transfers

PostalView and its providers may process information in countries other than the one where you live, including the United States and Mexico. Where required, we rely on appropriate safeguards for such transfers. By using the Service, you understand your information may be processed in these locations.

10. Children's Privacy

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

11. Changes to This Policy

We may update this Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect means you accept the updated Policy.

12. Contact

Questions or requests about privacy? Contact us at privacy@postalview.com.