Privacy Policy

Note.This is a starter template and not legal advice — have it reviewed by counsel before launch.

What we collect

We collect your email address (used to sign you in with a one-time code), the return address you save, the letters you draft and their recipients, the text and details we extract from any files you upload for context (the files themselves are not stored), and payment receipt details (card brand, last four digits, billing address) from our payment processor.

How we use it

We use your information to draft, verify addresses for, print, and mail your letters, to take payment, to keep a receipt of your orders, and — only if you opt in — to send occasional product updates. You can change your newsletter preference any time on your account page. We also process your letters and account activity to screen for prohibited content and to detect tampering, fraud, and abuse, which lets us refuse or cancel anything that violates our Terms.

Letter content retention

We keep the text of your letters only as long as needed. Content is automatically deleted 24 hours after a letter is mailed; after that we retain only a receipt (order number, addresses, tracking, and payment summary) so you have a record of what was sent. Files you upload for context are not stored — they are read in memory to extract text and then discarded; the extracted text becomes part of your letter’s content and is deleted on the same 24-hour schedule.

AI processing of your conversation and draft

To understand what you want to send and to draft your letter, your conversation with Genie and the draft are processed by a third-party AI model provider. The provider does not use your chat inputs or outputs to train its models, and retains them only briefly for safety and abuse-prevention purposes before deleting them. We do not enable any optional prompt-logging or model-training features. The copy we hold ourselves is deleted 24 hours after your letter is mailed, as described above.

Voice input (dictation)

If you dictate text instead of typing, the speech-to-text conversion is handled by your device or browser’s built-in speech-recognition feature — not by PostalGenie. We do not record, collect, store, or transmit your voice or audio; only the resulting text you choose to submit reaches us. Your browser, device, or operating system (and its provider, such as the maker of your browser) may process the audio under its own privacy policy, over which we have no control. To avoid this, simply type your text instead.

Service providers

We share data with providers strictly to run the service: an LLM provider to draft and review letters, address lookup and verification providers to find and validate mailing addresses, a print-and-mail provider to post your mail, a payment processor, an email provider to send sign-in codes, an error-monitoring provider that receives technical diagnostics (scrubbed of letter content and personal information), and a customer-support chat provider (used only if you start a support conversation). They may only use the data to perform their service for us.

Analytics. We use a privacy-friendly, cookieless web analytics service to understand aggregate, anonymous usage (such as page views and referrers). It does not use cookies, does not track you across other sites, and does not collect personally identifying information.

Data security

We use reasonable administrative, technical, and organizational measures to protect your information — including encryption in transit, access controls, and automatic deletion of letter content 24 hours after mailing. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we work to safeguard your data and to limit how long we keep it.

We don’t sell your data

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. We share data only with the service providers described above, strictly to operate the Service. If you are a California resident, you have the right to know what personal information we hold, to request its deletion, and to not be discriminated against for exercising these rights; email us to make a request.

Your choices

You can update your email and return address, opt out of product updates, and request deletion of your account at any time. Audit records contain metadata only (never letter body text).

Children’s privacy

The Service is intended only for adults aged 18 and older located in the United States. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it. If you believe a child has provided us information, please contact us.

Where your data is handled

The Service is operated in, and intended for users located in, the United States. We do not offer the Service to users outside the United States.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “last updated” date above and, where appropriate, provide additional notice. Continued use of the Service after a change means you accept the updated policy.

Contact

Privacy questions? Email admin@sensingapparatus.com.