Your photos are personal.

Postal uses your account details, photos, messages, and recipient information to create and deliver postcards, save your work, and run the service. Order confirmation emails include the front of your postcard.

If you share an address through a Postal request link, we keep it in the requesting sender’s account for their review and future postcards. The link shows the sender’s chosen name; other people using it cannot see submitted addresses. We also remember your last shared address in this browser on your device, so you can confirm it for future requests without an account. Use Forget address on a request or confirmation page to remove that device copy. Contact us below to request correction or deletion of an address already shared.

Reimagine shares your selected photo with OpenAI to create illustrated artwork, after you explicitly allow it. We remember that choice for your account, so future selected photos are reimagined automatically. You can turn this off in Account; existing artwork remains saved.

We work with providers for sign-in, hosting, payments, address services, email, and printing and mailing. They receive the information needed for those services. We use cookies and similar storage to remember your session and drafts, keep an invite offer for up to 30 days, and measure referral visits, signups, and later sending. We also measure search and campaign sources with first-party cookies (up to 30 days), without recording search queries, postcard content, or session replays. Anonymous visit records expire after 90 days; signup attribution stays with your account.

If you connect Google Photos, Postal accesses only the photo you select to create your postcard, including Reimagine and printing as described above. We use a temporary connection, not ongoing library access. You can cancel before import or revoke Postal’s Google access in your Google account. This does not delete photos already imported; contact us below to request deletion. Postal’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Photos data to train general-purpose AI models.

HTTPS protects data sent between your browser and Postal. We store photos, including Google Photos imports, in private storage and check account access before displaying saved content. Temporary Google Photos connection credentials are encrypted and kept for no longer than ten minutes.

Resend delivers email sign-in codes, and Cloudflare Turnstile checks for bots using network and browser signals, including IP addresses. See Cloudflare’s Turnstile privacy notice. We retain protected request counters and mailbox identities to limit abuse and repeated promotional claims.

We keep saved postcards and account information to support your use of Postal. Unused uploads and artwork may be removed. To request access, correction, or other privacy help, email ncteisen@gmail.com. Some records may need to be retained to resolve payments or mailed postcards.

To delete your account, open Account in the iPhone app or on the web. You’re signed out immediately. We remove your account, saved photos, drafts, postcards, and addresses within 30 days. Postcards already being mailed continue; they cannot be recalled. Limited payment records and a protected record of introductory offers remain for reconciliation and abuse prevention. Payment and mailing providers may retain records needed to complete orders or meet legal obligations. Deleted information may remain in restricted backups until those backups expire.

Updated October 22, 2026.