Privacy Policy

PostoMe ("we," "us," or "our") values your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information. By using the Platform, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

• Account information: username, email address, phone number, password (stored encrypted)
• Letter content: titles, body text, and images in your letters
• Recipient information: recipient name, email, phone number
• Payment information: order numbers, payment amounts (we do not directly store your bank card or payment account details; payments are processed through third-party providers)

1.2 Information Collected Automatically

• Device information: browser type, operating system, device identifiers
• Usage data: access times, pages viewed, IP address
• Cookies: used to maintain login sessions and improve your experience

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing, maintaining, and improving our services
• Delivering letters at your scheduled times
• Sending service-related notifications (delivery confirmations, security alerts, etc.)
• Processing payments and refunds
• Preventing abuse and ensuring platform security
• Complying with applicable legal requirements

3. Information Sharing

We do not sell your personal information to third parties. We may share certain information in the following circumstances:

• Letter delivery: displaying sender information you have chosen to share with recipients
• Public letters: content you choose to make public will be displayed on the Platform
• Payment processing: sharing necessary transaction data with third-party payment providers (WeChat Pay, Alipay)
• Legal requirements: in response to lawful requests from law enforcement, or to protect user safety and the public interest
• Service providers: sharing with providers who help us operate the Platform (such as cloud hosting and SMS services), who are contractually bound to protect your information

4. Data Security

4.1 We employ industry-standard security measures to protect your data, including:

• HTTPS encrypted transmission
• Salted and hashed password storage
• Database access controls and encryption
• Regular security audits and data backups

4.2 While we take reasonable precautions, no method of internet transmission or electronic storage is completely secure. In the event of a data breach, we will promptly notify affected users.

5. Data Storage and Retention

5.1 Your data is stored on servers located in mainland China (Alibaba Cloud).

5.2 We retain your data for as long as your account is active and for a reasonable period thereafter to fulfill our delivery obligations.

5.3 After account deletion, we will remove your personally identifiable information within 30 days. Delivered public letters may continue to be displayed in anonymized form.

6. Cookie Policy

We use the following types of cookies:

• Essential cookies: maintaining login sessions, CSRF protection — required for the Platform to function
• Functional cookies: remembering language preferences and theme settings

We do not use third-party advertising or tracking cookies. You can manage cookies in your browser settings, but disabling essential cookies may impair Platform functionality.

7. Your Rights

Subject to applicable data protection laws, you have the following rights:

• Access: view the personal information we hold about you
• Correction: update or correct inaccurate personal information
• Deletion: request deletion of your personal information (subject to legal obligations and paid service commitments)
• Data export: request an export of your letter data
• Withdraw consent: withdraw consent for non-essential data processing

8. Children's Privacy

The Platform is not intended for children under the age of 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will promptly delete it.

9. International Users

If you access the Platform from outside mainland China, please be aware that your data will be transferred to and stored on servers in mainland China. By using the Platform, you consent to this transfer. We protect all users' data in accordance with this Privacy Policy regardless of location.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via Platform announcements or email. The date at the top of this policy indicates when it was last revised.