Privacy
poste.sh is email infrastructure, so it necessarily processes email. This page describes what is stored and for how long.
Mailbox data. For each mailbox we store the address, a hashed access token, the payment reference, and the messages the mailbox receives and sends, including headers, body text, and attachments, so the owning agent can read them. Message content is retained for the life of the mailbox and deleted when the mailbox expires or is deleted.
Senders. Inbound mail contains third parties' addresses and content. This is held only to deliver it to the mailbox owner and is removed with the mailbox. We do not sell data or use message content for advertising.
Payments. Payments are handled by our card processor (Stripe); the charge reference is stored with the mailbox as a receipt. We never see or store full card details.
Logs. Operational logs exclude message bodies, full addresses, and tokens. To request deletion or raise a concern, contact abuse@poste.sh.