Privacy Policy

Last updated: November 11, 2025

1. Who We Are and Scope

This Privacy Policy explains how PostCanary, Inc. ("PostCanary," "we," "us") collects, uses, and discloses personal information. It applies to information we process (a) as a "controller" for our website, app, marketing, support, and billing; and (b) as a "processor/service provider" when we handle Customer Data that business clients upload to the PostCanary platform. This Policy does not replace any data processing addendum (DPA) with our customers; if there is a conflict, the DPA controls for Customer Data.

2. Our Roles

  • Controller (website/app/billing/marketing): we decide what information we collect from site visitors, trial users, and account owners (e.g., contact, billing, usage, device/analytics).
  • Processor/Service Provider (Customer Data): for files and records you upload (e.g., CRM conversions, addresses, mail records), we process them only per your written instructions to provide the Service; we do not "sell" or "share" such data, and we impose the same commitments on our subprocessors. See your DPA for details.

3. Personal Information We Collect (Controller Context)

  • Account & Contact: name, work email, company, password, role.
  • Billing: pay-as-you-go quotes, invoices, payment status, and legacy subscription records (payment details handled by our payment provider).
  • Support & Communications: messages, tickets, feedback, and call/meeting recordings if you opt in.
  • Device/Usage: IP address, device identifiers, browser/OS, pages viewed, product events (e.g., logins, feature use), diagnostics, crash logs.
  • Cookies/Tags: essential cookies for login and security; analytics. We do not use cross-context behavioral advertising cookies. You can manage preferences via our cookie banner or browser settings.

4. Customer Data We Process (Processor Context)

"Customer Data" means any data you or your authorized users upload to the Service (e.g., CRM conversions, addresses, mail records). As between you and PostCanary, Inc., you own Customer Data and any Output we generate for you; we process Customer Data only to provide and support the Service, per your instructions and our DPA. We do not use Customer Data to build advertising profiles or train models for third parties.

5. Sources of Information

  • You provide it directly (forms, uploads, emails, support).
  • Automatically from your device when you use the Service (see Cookies/Tags).
  • From service providers (e.g., payments, auth) that act on our behalf.
  • From our business customers (if your employer or a vendor adds you as a user).

6. How We Use Information (Controller Context)

  • Provide, secure, and troubleshoot the Service; authenticate users; prevent abuse.
  • Billing and account administration.
  • Product research and analytics to improve performance and reliability (aggregated/de-identified where possible).
  • Communicate with you about features, security, and updates. You can opt out of non-essential marketing emails at any time.

7. "Sell," "Share," and Targeted Advertising

We do not "sell" or "share" personal information as those terms are defined under certain U.S. state privacy laws, and we do not engage in cross-context behavioral/targeted advertising. If this changes, we will update this Policy and provide opt-out options, including honoring Global Privacy Control (GPC) signals.

8. Disclosures of Information

We disclose personal information only to:

  • Service providers/subprocessors under contract (e.g., hosting, authentication, payments, email).
  • Professional advisors and auditors under confidentiality.
  • Law enforcement or regulators where required by law.
  • A successor entity in a merger, acquisition, or reorganization (subject to this Policy).

We do not permit subprocessors to use Customer Data for their own purposes.

9. Global Privacy Control (GPC) and Universal Opt-Out Signals

Where required by law, we honor a user-enabled GPC/Universal Opt-Out signal as a valid opt-out of "sale," "share," or targeted advertising. You can also use our in-product privacy preferences at any time.

10. Your Privacy Rights (U.S. State Laws)

Depending on your state (e.g., CA, CO, CT, VA, UT, TX, OR, MT, TN), you may have rights to: (a) access; (b) correct; (c) delete; (d) obtain a portable copy; (e) opt out of sale/share/targeted advertising; and (f) limit use and disclosure of sensitive personal information (where applicable).

Requests & Identity Verification: email support@postcanary.com with "Privacy Request" in the subject or use in-product controls. We may verify your identity and will respond within the timelines required by law.

Appeals: if we deny your request, you may appeal by replying to our decision or emailing support@postcanary.com with "Appeal" in the subject. We will respond with our final decision and your right to contact your state AG if applicable.

Authorized Agents (CA): you may designate an authorized agent to submit requests on your behalf; we may require proof of authorization.

11. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and logging. No method of transmission or storage is 100% secure; please safeguard your account credentials.

12. Data Retention

We retain personal information for as long as necessary for the purposes described in this Policy, to comply with legal obligations, resolve disputes, and enforce agreements. For Customer Data, retention and deletion follow your instructions and our DPA; typically, we delete Customer Data within 30–60 days after account closure or written request, subject to backup cycles.

13. Children's Privacy

PostCanary is for business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us at support@postcanary.com and we will take appropriate steps.

14. International Transfers

If we transfer personal information internationally, we will use lawful transfer mechanisms (e.g., Standard Contractual Clauses) and implement appropriate safeguards. Where we act as a processor, we will follow the customer's transfer instructions in the DPA.

15. Cookies and Analytics

We use essential cookies for login, security, and load balancing, and limited first-party analytics to understand feature adoption and performance. You can control cookies via your browser settings and our cookie banner. If your browser sends a GPC/Universal Opt-Out signal, we will honor it where required by law.

16. Non-Discrimination

We will not discriminate against you for exercising your privacy rights, except as permitted by law (for example, different prices or service levels reasonably related to your data choices).

17. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide advance notice (e.g., in-app or email). Continued use of the Service after the effective date constitutes acceptance.

18. Contact Us

Email: support@postcanary.com

Postal: PostCanary, Inc., 30 N Gould St, Ste R, Sheridan, WY 82801 US

Controller: PostCanary, Inc.
Website: https://postcanary.com