Privacy policy

Postocracy is built to collect as little about you as possible. You don't need an account.

What we collect, and why

• Your name, return address, message and any custom front text. These are printed on the postcard. Your address is also used to look up your city council and legislative districts.
• Your email address, collected by Stripe at checkout. We use it once to send a confirmation with your tracking link. We only store it if you opt in to delivery updates.
• Payment details are entered directly with Stripe. We never see or store your card number.
• Order records: amount paid, date, Stripe payment reference, which officials were mailed and delivery status. Kept for bookkeeping and tax purposes. They contain no personal details after purge.

We do not use analytics, advertising trackers or third-party cookies. The only cookies are for administrator sign-in.

How long we keep it

• Unpaid checkouts are deleted after 24 hours.
• Your name, address, message, front text and email are permanently deleted from our database a few days after all your postcards are delivered, and no later than 30 days after they are mailed.
• If a message is declined in review, its details are deleted 30 days after the decision.

Who we share it with

Only the service providers needed to deliver your postcards, each under their own privacy terms:

• Lob prints and mails the postcards (receives your name, return address, message and the recipients).
• Stripe processes payment.
• OpenAI screens the text you write (your name, front text and message) for threats, intimidation and harassment, using its moderation service and an AI review model. OpenAI doesn't use this data to train its models and may keep it for up to 30 days for abuse monitoring.
• Resend delivers our emails.
• Supabase hosts our database; Vercel hosts the website.
• U.S. Census Bureau and City of Portland public mapping services receive your street address to look up districts. They don't receive your name.

We never sell or rent personal information, and we don't share it with campaigns, parties or advocacy groups.

Share links

If you use “Share this message,” the link itself contains the design, front text and message. It never includes your name, address or email, and we don't store it. Before a link is created, the text is screened by OpenAI the same way. Anyone with the link can read the message in it.

The postcard itself

A postcard is not private: anyone who handles it can read it. Once delivered, your card belongs to the recipient, and messages to public officials may be subject to Oregon public records law.

Your choices

To request deletion of your data before the automatic purge (for example, before your cards are mailed), email privacy@postocracy.org with your tracking link.