What we know, and what we don't.

1What we collect

• Your email address. It's the name your mailbox lives at, so we have to keep it.
• Your encrypted mail. Stored as ciphertext. We hold no key that can open it.
• Billing reference. Subscriptions are handled by a PCI-compliant payment processor. We see that you've paid and when it renews — we never see or store your card number.
• Minimal operational logs. Short-lived records needed to deliver mail, stop abuse, and keep the service up. They are kept only as long as they're useful and are not used to profile you.

2What we deliberately don't collect

• No real name.
• No phone number.
• No advertising or behavioural profile.
• No log of who you correspond with.
• No third-party analytics or tracking pixels — on this website or in the product.

3Encryption

Mail is encrypted with OpenPGP — sealed on your device and opened on the recipient's. Your keys are generated and kept on your device. Because we store only ciphertext, there is nothing readable for us to scan, sell, or hand over. Even under a valid legal request, we can only provide what we actually hold, which is not the contents of your mail.

4How we use what little we keep

To run your mailbox, deliver your mail, take your payment, prevent abuse, and reply when you contact support. That's the whole list. We don't use your data to advertise to you, and we don't enrich it with data bought from anyone else.

5Who we share it with

We don't sell your data, and we never will — there's nothing to sell. We rely on a small number of infrastructure providers (hosting and payment processing) strictly to operate the service. They act on our instructions, handle only what's necessary, and never receive readable copies of your mail. We will only disclose information in response to a valid, specific legal order — and even then, only what we actually have.

6Your rights

• Export. Download all your mail as a standard .mbox file, any time.
• Delete. Close your account and your data is removed from active systems, then purged from backups on our normal rotation.
• Access & correction. Ask us what we hold about you and have it corrected.

To exercise any of these, write to privacy@posthush.com.

7Changes to this policy

If we change anything material, we'll update the date above and tell account holders by email before it takes effect. We won't quietly broaden what we collect.