Postyai
Log inSign up
☰
FeaturesHow it worksPricingSolutionsSecurityBlog
Log inSign up
Legal

Privacy Policy

Last updated: 2026-07-16

Postyai is an AI email-marketing platform you run on your own accounts and data. We process two things: the details you give us to run your account, and the contact data you upload to send campaigns. The contacts you upload are yours — we act as a data processor on your instructions, and you remain the controller of that data. This policy explains exactly what we collect, why, and the rights you have over it.

In one line: Postyai is the platform and processor; you are the data controller of the contacts you upload. Your data, your sending accounts, and your model API keys stay yours — we never sell them, and we never reuse them to train models or market to your contacts.

What data does Postyai process?

We keep collection to the minimum needed to run the service. There are two clearly separate buckets:

1. Account & login data (we are the controller)

  • Your name, work email, and password hash used to sign in.
  • Organisation name and billing details needed to invoice you in INR (₹).
  • Product usage and diagnostic logs (which features you use, error traces) so we can keep the platform reliable and secure.

2. Campaign data you upload (you are the controller)

  • The contact CSVs you import — names, email addresses, and any fields you choose to add for personalisation.
  • The emails Postyai drafts for each contact, plus replies and engagement signals it learns from.
  • Your own sending inboxes, Gmail/SMTP credentials, LLM API keys, and optional proxies — stored encrypted and used only to run your campaigns.

Who is the controller and who is the processor?

For the contacts you upload, you are the data controller and Postyai is the data processor. That means you decide who to email and why; we only process that data on your documented instructions to draft, send, and follow up. You are responsible for having a lawful basis to contact the people in your list. For your own account and billing data, Postyai is the controller.

What about my sending accounts and API keys?

Postyai is a bring-your-own-everything platform. Your email/Gmail/SMTP accounts, your LLM API key, and any proxies belong to you and stay under your control. We store these credentials encrypted at rest and use them solely to operate the campaigns you configure. We do not use your API key for any workload other than yours, and we do not read or repurpose the content of your contacts’ inboxes.

Do you use cookies?

Essential cookies only. We use a small number of strictly necessary cookies to keep you signed in and to secure the app. We do not run third-party advertising or cross-site tracking cookies, so there is no ad profile built from your visit.

How long do you keep my data?

We retain account data for as long as your account is active. Campaign data — uploaded contacts, drafts, and engagement history — is kept while you need it to run and improve your campaigns, and you can delete any list at any time from inside the app. When you close your account, we delete or irreversibly anonymise your personal data within 90 days, except where a limited retention is required by law (for example, tax and invoice records).

What are my rights?

You can access, correct, export, or delete your personal data at any time. Most of this is self-service in the app; for anything else, email us and we will action verified requests promptly. Because you control the contacts you upload, you can also delete that data yourself whenever you choose.

  • Access & portability: get a copy of your data in a structured format.
  • Correction: fix anything inaccurate in your account.
  • Erasure: delete your lists, or close your account and have your personal data removed.

Is Postyai aligned with DPDP and GDPR?

Yes. Our approach is built around India’s Digital Personal Data Protection Act (DPDP) and the EU/UK GDPR: data minimisation, purpose limitation, a clear controller/processor split, encryption of credentials, and honouring data-subject rights. When we process contacts on your behalf, we do so only on your instructions as your processor.

Contact us

For any privacy question or to exercise your rights, email hello@postyai.tech. You can also read our Terms of Service or review how we protect your data on the Security page.