Privacy policy

Account information. When you create an account we collect your name, email address, and a password (stored only as a cryptographic hash — we cannot read it).

Billing information. Payments are processed by Stripe. We store your subscription status and plan; your full card details go to Stripe and are never stored on our systems.

Your content. The files you upload, together with data we derive from them to operate the service: transformed variants (for example resized images), technical metadata (such as image dimensions), and malware-scan verdicts.

Usage data. We meter storage, bandwidth, requests, and image transformations per account to enforce plan limits and show you your usage. Server logs include IP addresses and request details, which we use for security, rate limiting, and abuse prevention.

Cookies. We set a single essential session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

• To provide and operate the service, including storing and delivering your files.
• To meter usage, enforce plan limits, and bill subscriptions.
• To keep the platform safe: files uploaded to Postila storage, up to 100 MB, are automatically scanned for malware on a best-effort basis, and files detected as infected are quarantined and not served. Larger files, and files stored in your own bucket on a BYO plan, are not scanned.
• To send transactional email — account verification, password resets, billing notices, and usage warnings. We do not send marketing email without your consent.
• To diagnose errors and improve reliability.

You retain all rights to the files you upload. We store, process, and deliver them only to provide the service, according to the delivery settings you choose (public, hotlink-protected, or signed). We do not sell your content or your personal data, and we do not use your content for advertising or to train machine-learning models.

We rely on a small set of infrastructure providers to run Postila:

• Cloudflare — content delivery, edge compute, and object storage.
• DigitalOcean — application hosting and database.
• Stripe — payment processing.
• Resend — transactional email delivery.
• Sentry — error monitoring.

Each provider receives only the data needed for its function. We may also disclose information where required by law.

When you delete a file it stops being served immediately, and the underlying object is permanently removed from storage by a background cleanup process. Cached copies at the edge are purged. If you close your account, we delete your account data and content, subject to residual copies in backups that age out on a fixed schedule. To request account deletion, contact support@postila.app.

Legal preservation. When the law requires it — for example a valid request from law enforcement, or content we must report such as child sexual abuse material — we may preserve the relevant files and account records for as long as required, even after you delete them. Preserved material is not served.

All traffic is encrypted in transit with TLS. API keys are stored only as hashes, and signing secrets are encrypted at rest. Access to production systems is restricted, and uploads to Postila storage up to 100 MB are scanned for malware on a best-effort basis before delivery.

You can access and update your account information from your settings at any time. You may request a copy of your personal data, correction of inaccurate data, or deletion of your data by emailing support@postila.app. Depending on where you live, local law may give you additional rights, which we will honour.

The service is not directed at children under 16, and we do not knowingly collect personal information from them.

We may update this policy as the service evolves. Material changes will be announced on this page with an updated “Last updated” date, and by email where the change significantly affects how we handle your data.

Questions about this policy or your data: support@postila.app.