← PostAi

Privacy Policy

Last updated: July 28, 2026

PostAi ("we", "us", or "our") operates the PostAi mobile and web application (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Information you provide

  • Account information: name, email address, phone number, and business name when you create an account or complete onboarding.
  • Property details: photos, addresses, service selections, and budget information you enter during the capture and quoting flow.
  • Listing information: item descriptions, asking prices, and photos you upload in the sell flow.
  • Messages: notes you add to booking requests, bid descriptions, and buyer inquiry messages.
  • Payment information: payment processing is handled by Stripe, Inc. — we do not store your card details. We receive a payment token and transaction record.

Information collected automatically

  • Location data: GPS coordinates to resolve a property address during a capture session. We do not store your continuous location history — only the coordinates linked to a specific flyer or job at the time of capture. Precise geolocation is treated as sensitive personal information under California and other state laws (see Section 7).
  • Device and usage data: browser type, operating system, pages visited, and crash reports via server logs.
  • Consent records: when you opt in to marketing texts, we record the phone number, the exact disclosure shown, the date and time, and your IP address and device/browser to evidence your consent.
  • Cookies and analytics: essential session authentication cookies, a referral attribution cookie (postai_ref, 7 days), and a theme preference — these are always on. In addition, Google Analytics / Google Tag Manager cookies and identifiers used to measure product usage (with your IP address anonymized): if you are in the EU, EEA, or UK, these stay off until you affirmatively accept via our cookie banner. Elsewhere, they may be on by default as a legitimate business interest in understanding product usage — you can turn them off at any time below, and doing so never loses you any functionality either way.

Analytics cookies are currently off (not yet decided).

Information from third parties

  • Property records: public-record property data (owner name, square footage, lot size, bedroom/bathroom count) from a third-party property-data provider, sourced from county assessor records.
  • Reverse geocoding: GPS coordinates resolved to postal addresses via Google Maps.
  • Address autocomplete: when you type an address or town into an address field, the characters you type are sent to Google Places to suggest matching addresses as you type. This is separate from the GPS reverse-geocoding above — it applies to any address or service-area field with autocomplete suggestions, whether or not you use your device's location.

2. How We Use Your Information

  • To operate the Service and deliver features: quoting, flyer generation, booking notifications, physical mailers, sell-flow listings, and the micro-jobs board.
  • To send you transactional SMS messages (account verification codes, quote summaries, booking confirmations) via our SMS delivery provider. We send marketing texts only after you provide separate, express written consent through a dedicated opt-in checkbox, and we honor STOP requests promptly. See Section 4 below and our SMS Terms.
  • To send physical USPS letters containing your quote to the relevant property owner via PostGrid Print-Mail. These letters are sent at the direction of a scout or contractor using the Service.
  • To process payments through Stripe and disburse earnings to contractors and scouts via Stripe Connect, once payment processing is active.
  • To attribute referrals and apply promotional credits when you sign up via a referral link.
  • To improve the Service through aggregated, de-identified analytics.

3. How We Share Your Information

We do not sell your personal information. We share it only as follows:

  • Service providers: a cloud database/authentication provider, an SMS delivery provider, PostGrid (print-mail), Stripe (payments), an AI image-enhancement provider, an AI text-generation provider, a property-data provider, Google Maps (geocoding), Mapbox (map rendering), Google Analytics and Google Tag Manager (product-usage analytics, including Google Analytics for Firebase in the mobile app), Vercel Web Analytics (cookieless, aggregate traffic analytics that set no cookies and collect no personal information), and a cloud hosting provider. Each is bound by a data-processing agreement.
  • Other users — limited: a homeowner who books a contractor receives the contractor's business name and (if provided) phone number. Scouts and contractors see property addresses and owner names from public records only after creating a flyer.
  • Legal requirements: we may disclose information if required by law, regulation, or valid legal process.

Business transfers. If PostAi is involved in a merger, acquisition, financing, reorganization, bankruptcy, or a sale of all or a portion of its assets, your information may be transferred to the party involved in that transaction, and will remain subject to the commitments in this Privacy Policy (or a policy that provides materially similar protections) unless and until you are notified of and agree to a different policy.

4. SMS / Text Messaging Program

We use the mobile phone number you provide to send you text messages related to your PostAi account and activity, including:

  • Account verification: one-time passcodes to confirm your phone number and sign in.
  • Transactional messages: quote summaries, booking confirmations and reminders, and job alerts tied to your activity on the Service.
  • Marketing and promotional messages — sent only if you separately opt in with express written consent through a dedicated opt-in checkbox. Consent to marketing texts is never a condition of purchase or of receiving any service.

Message frequency varies based on your activity. Message and data rates may apply according to your mobile carrier plan. Reply STOP to any message to cancel — we will send one confirmation and then stop sending marketing messages to that number. Reply HELP for help, or contact us at privacy@postai.llc. Carriers are not liable for delayed or undelivered messages.

We do not share your mobile number or SMS opt-in consent with third parties for their own marketing or promotional purposes. Text-messaging originator opt-in data and consent — your phone number and the fact that you agreed to receive texts — is excluded from the service-provider sharing described in Section 3 above and is never sold, shared, or disclosed to any third party for marketing. This consent is given directly to PostAi, whether you opt in on the PostAi website (postai.llc/auth) or in the PostAi mobile app — never to any third party or affiliate. Full program details are in our SMS Terms.

5. Property Owner Data and Opt-Out

Property owner names and addresses used in this Service are sourced from publicly available county-assessor records via a third-party property-data provider. If you are a property owner and wish to opt out of receiving PostAi mailers or having your property data used in the Service, please contact us at privacy@postai.llc. We will blacklist the address and suppress future outreach within 10 business days.

6. Data Retention

  • Flyer records expire 90 days after creation and are subsequently archived.
  • Sell listings expire 90 days after creation.
  • Account data is retained until you delete your account (see below) or request deletion.
  • Images in our cloud storage are retained until the associated record is deleted.
  • After deletion, we retain a limited set of records that law requires us to keep — payment/payout records and marketing-consent records — in anonymized form (de-linked from your identity), only for as long as the relevant obligation requires.

Deleting your account

You can delete your PostAi account and personal data at any time, yourself: open Account → Delete account in the app (or go to postai.llc/account/delete), or email us at privacy@postai.llc. Our Delete Your Account page explains exactly what is deleted, what is retained and why, and how to request deletion.

7. Your Privacy Rights

Everyone

Depending on your location, you may have the right to access, correct, or delete the personal data we hold about you, to object to certain processing, or to request a portable copy of your data. You can delete your account and data yourself at any time via Account → Delete account in the app (see our Delete Your Account page). To exercise any other right, contact us at privacy@postai.llc. We will verify your request and respond within the time required by applicable law. You may use an authorized agent, and we will not discriminate against you for exercising your rights.

California residents (CCPA / CPRA)

If you are a California resident, you have the following rights regarding your personal information:

  • Right to know / access the categories and specific pieces of personal information we have collected (Cal. Civ. Code § 1798.110).
  • Right to delete personal information we collected from you (§ 1798.105).
  • Right to correct inaccurate personal information (§ 1798.106).
  • Right to know what information is disclosed or shared (§ 1798.115).
  • Right to limit the use and disclosure of sensitive personal information, including precise geolocation (§ 1798.121).
  • Right to opt out of any "sale" or "sharing" of personal information (§ 1798.135).

Do Not Sell or Share My Personal Information. PostAi does not sell your personal information for money and does not share it for cross-context behavioral advertising. Because we do not sell or share, there is no opt-out to process; if this ever changes we will provide a clear opt-out mechanism here first.

Sensitive personal information. The precise geolocation we collect to resolve a property address is treated as sensitive personal information. We use it only to provide the Service (generating estimates and locating properties) and not to infer characteristics about you. You may request that we limit its use as described above (Cal. Civ. Code § 1798.140(ae)).

EU / UK residents (GDPR)

If you are in the European Economic Area or the United Kingdom, you have the rights of access, rectification, erasure, restriction, portability, and objection. Our legal bases for processing are: performance of a contract (providing the Service), your consent (marketing texts, which you may withdraw at any time), and our legitimate interests in operating and securing the Service. You may lodge a complaint with your local supervisory authority.

8. Children

The Service is not directed to children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Security

We use industry-standard security measures including HTTPS, encrypted databases, row-level security policies on all tables, and service-role-key isolation for server-side operations. No method of transmission over the internet is 100% secure.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be announced in the app. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact

PostAi
privacy@postai.llc