Privacy & security
What happens to my letter and my data after I send? How long do you keep it?
Your letter content, your conversation with Genie, and any text extracted from uploaded files are encrypted in transit and at rest, and retained for safety and security — to detect and prevent fraud and abuse, and to protect you and us if there's ever a dispute. How long: generally up to 6 years from the date of the transaction (the date you pay and submit the letter for mailing), after which it's deleted. Where the law requires it — an active investigation, subpoena, or legal hold — specific records may be kept longer, until the matter is resolved. We also keep an order receipt (order number, addresses, tracking, payment summary) so you have a record of what was sent. A few protections worth knowing: - Sensitive numbers are masked. Where we detect things like a full card number or Social Security number in a letter, we mask them (keeping only the last four digits) in the copy we retain. This is automated and best-effort — please avoid putting sensitive numbers in a letter unless they're necessary. - Access is limited and logged. Only a small number of authorized people can decrypt letter content, only when necessary (fraud, abuse, safety, legal compliance, or your own requests), and each access is logged. - We never sell your data, and we don't use advertising or cross-site tracking cookies. Want your data deleted? You can ask us what personal information we hold about you, correct it, or delete it. Email support@postalgenie.app with the subject "Personal Data Deletion Request." We verify requests against your account email and aim to respond within 45 days. Some records we're required to keep — for example, for legal claims or security — may be retained as the law allows.
Is my conversation with Genie private?
Yes. To draft your letter, your chat and draft are processed by U.S.-based third-party AI providers, reached through an AI gateway. Those providers do not use your inputs or outputs to train AI models, and we pin zero-data-retention routing — so the underlying provider doesn't keep your prompts or the model's output. Our own copy of the conversation and draft is encrypted and retained for safety and abuse prevention, with access limited — see "What happens to my letter and my data after I send?" for how long. If you upload an image for context, it's sent to our AI provider only to extract its text; the file itself is not stored.
What happens to my voice when I dictate a letter?
Nothing reaches us as audio. If you dictate instead of typing, the speech-to-text conversion happens on your device or in your browser's built-in speech feature — not on PostalGenie's servers. We do not record, collect, store, or transmit your voice. Only the resulting text you choose to submit reaches us, and it's treated like any other text you type. One note: your browser, device, or operating system may process the audio under its own privacy policy, which we don't control. If you'd rather avoid that entirely, just type instead.