Privacy notice

Postwire is a Verituscore product. Verituscore is a technology brand owned and operated by Fazza Holdings Limited, which is responsible for the processing described here.

When you register we store your name, email address, a salted hash of your password (never the password itself) and, if you provide them, your company and website. Sign-ins and security events record the time and the IP address they came from, to protect your account.

Each Postwire account has its own mailboxes, AI connections, drafts, settings and activity history. Every request is checked against the account that owns the data; other users can never see or use your mailboxes.

The password (or app password) you give Postwire for your mailbox is encrypted before it is stored and is used only to connect to your provider on your behalf. It is never displayed again, never sent to your AI app, and never visible to Postwire administrators.

Postwire does not keep copies of your inbox. When an AI connection you authorized asks for something, Postwire fetches it live from your mail provider and returns it to that AI app. Depending on the permissions you granted and what you ask, this can include:

• the mailboxes and folders the connection may access, and your sending identities (From addresses);
• message details — sender and recipients (From, To, Cc), subject, date, flags and size;
• message bodies and whole conversations;
• the extracted text of attachments (PDF, DOCX and plain text), processed temporarily for that request;
• drafts the AI created or updated, and their send status.

Drafts are stored by Postwire, encrypted, until they are sent or deleted. After sending, the draft content is erased within 7 days and only the send record remains. A copy of sent mail is saved in your mailbox’s Sent folder. Once your AI app receives content, its provider’s privacy policy applies.

To run the service and show you your usage, Postwire records metadata about each request: time, which AI connection, which tool, which mailbox, how long it took and whether it succeeded. It does not record message bodies, attachments or search results. Security events (sign-ins, password changes, new connections) are also logged.

• Request activity history: 90 days. Daily usage totals: 400 days.
• Security events (sign-ins, password changes, new connections): 365 days. Sign-in attempt records: 1 day.
• Account email delivery log (masked address only): 90 days.
• Deleted drafts: restorable for 30 days, then purged. Sent draft content: erased within 7 days.
• Web server logs (IP address, time, page, browser): 14 days. Encrypted database backups: 7 days.

If you contact us through the support form, we receive your name, email address, topic and message, and use them only to reply. The message is delivered to our team by email through Resend.

Postwire sends account emails — address verification, password reset and security notices — through Resend, an email delivery service. Resend receives your email address and the content of those account emails only. Email you send through your AI is delivered by your own mail provider, not by Resend.

Postwire administrators can see account details (name, email, company), masked mailbox addresses, connection health and usage metadata in order to operate and protect the service. They cannot read your email, see your mailbox passwords, or act as you in your AI app.

You can remove a mailbox or revoke an AI connection at any time; access stops immediately and the stored mailbox credentials are deleted. You can deactivate your account under Account & Security, which signs you out everywhere, revokes all AI connections and deletes your mailbox credentials.

Postwire runs on a server operated for us by Contabo, our hosting provider. Account emails and support messages are delivered by Resend. We do not sell personal data or use it for advertising, and we do not use your email to train AI models.

Postwire’s database is backed up daily and encrypted so the service can recover from failures. Backups are kept for 7 days and then deleted, so removed data disappears from backups as they expire.

Depending on where you live, you may have rights to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to a data protection authority. Most changes can be made in your dashboard. For anything else, send a privacy request.