Your letter content, your conversation with Genie, and any text extracted from uploaded files are encrypted in transit and at rest, and retained for safety and security — to detect and prevent fraud and abuse, and to protect you and us if there's ever a dispute.
How long: generally up to 6 years from the date of the transaction (the date you pay and submit the letter for mailing), after which it's deleted. Where the law requires it — an active investigation, subpoena, or legal hold — specific records may be kept longer, until the matter is resolved. We also keep an order receipt (order number, addresses, tracking, payment summary) so you have a record of what was sent.
A few protections worth knowing:
-
Sensitive numbers are masked. Where we detect things like a full card number or Social Security number in a letter, we mask them (keeping only the last four digits) in the copy we retain. This is automated and best-effort — please avoid putting sensitive numbers in a letter unless they're necessary.
-
Access is limited and logged. Only a small number of authorized people can decrypt letter content, only when necessary (fraud, abuse, safety, legal compliance, or your own requests), and each access is logged.
-
We never sell your data, and we don't use advertising or cross-site tracking cookies.
Want your data deleted? You can ask us what personal information we hold about you, correct it, or delete it. Email support@postalgenie.app with the subject "Personal Data Deletion Request." We verify requests against your account email and aim to respond within 45 days. Some records we're required to keep — for example, for legal claims or security — may be retained as the law allows.