Your letter content, your conversation with Genie, and any text extracted from uploaded files are **encrypted in transit and at rest**, and retained for safety and security — to detect and prevent fraud and abuse, and to protect you and us if there's ever a dispute.

How long: generally **up to 6 years from the date of the transaction** (the date you pay and submit the letter for mailing), after which it's deleted. Where the law requires it — an active investigation, subpoena, or legal hold — specific records may be kept longer, until the matter is resolved. We also keep an order receipt (order number, addresses, tracking, payment summary) so you have a record of what was sent.

A few protections worth knowing:

* **Sensitive numbers are masked.** Where we detect things like a full card number or Social Security number in a letter, we mask them (keeping only the last four digits) in the copy we retain. This is automated and best-effort — please avoid putting sensitive numbers in a letter unless they're necessary.

* **Access is limited and logged.** Only a small number of authorized people can decrypt letter content, only when necessary (fraud, abuse, safety, legal compliance, or your own requests), and each access is logged.

* **We never sell your data**, and we don't use advertising or cross-site tracking cookies.

**Want your data deleted?** You can ask us what personal information we hold about you, correct it, or delete it. Email [**support@postalgenie.app**](mailto:support@postalgenie.app) with the subject "Personal Data Deletion Request." We verify requests against your account email and aim to respond within 45 days. Some records we're required to keep — for example, for legal claims or security — may be retained as the law allows.