Postal | The better way to manage music

Privacy Policy

Last Updated: July 14, 2026

Personal Information We Collect

Personal information you may provide to us through the Service or otherwise includes:

Contact data: Your first and last name, email address, billing address, and phone number.
Communications data: Information from our interactions with you, including when you contact us via the Service, social media, or other channels.
Profile data: Information you provide when creating an account, such as username, password, profile photo, and any additional details added to your profile.
Marketing data: Your preferences for receiving marketing communications and information about your engagement with them.
Payment data: nformation required to complete transactions. Payment card and bank account details are collected and processed directly by our payment processor, Stripe, and are not stored by Postal. We receive limited transaction metadata such as amount, currency, date, status, and the last four digits of a payment instrument.
Recordings and other user-generated content: Photos, images, videos, music, comments, questions, messages, text, works of authorship, and other content or information generated, transmitted, or made available via the Service, including any associated metadata. Recordings may capture your voice and may be used or shared as described herein or as otherwise disclosed at the time of recording.
Other data: Any additional information not specifically listed above, which will be used in accordance with this Privacy Policy or as otherwise disclosed at the time of collection.

Third-party sources: We may receive personal information from:

Public sources.
Marketing and advertising companies for marketing and advertising purposes.
Service providers.
Business transaction partners (e.g., mergers, acquisitions, sales, insolvency, bankruptcy, receivership).
Third-party services.

Automatic Data Collection

We, our service providers, and our business partners may automatically collect and log information about you, your device, and your interactions over time with the Service, our communications, and other online services. Such information may include, but is not limited to:

Device data: Operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including advertising IDs), language settings, mobile carrier, network information (e.g., Wi-Fi, LTE, 3G), and general location information, including city, state, or geographic area.
Online activity data: Pages or screens viewed, time spent on pages or screens, previously visited websites, navigation paths, interactions on pages or screens, access times and duration, and email interactions (including opens and clicks).
Communication interaction data: Interactions with emails or other communications, tracked through pixel tags (also referred to as clear GIFs).

For more information regarding automatic data collection, please refer to the "Tracking Technologies" section below.

Tracking Technologies

Cookies and other technologies:

Cookies: Small text files stored on your device to record browsing activity, form submissions, preferences, and login status. This includes session cookies (deleted at the end of a session), persistent cookies, first-party cookies, and third-party cookies.
Local storage technologies: Technologies such as HTML5 that provide functionality similar to cookies but allow larger amounts of data to be stored outside the browser in connection with specific applications.
Web beacons (pixel tags/clear GIFs): Tools used to determine whether a webpage or email was accessed, opened, or whether specific content was viewed or clicked.

For information regarding your options and control over tracking technologies, please see the "Your Choices" section below.

How We Use Your Personal Information

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Service delivery and operations:
- Provide the Service.
- Enable security features.
- Establish and maintain your user profile.
- Facilitate social features.
- Communicate Service-related updates, announcements, alerts, and support messages.
- Respond to requests, questions, and feedback.
Service personalization:
- Understand your needs and interests.
- Personalize your experience and communications.
- Remember selections and preferences.
Service improvement and analytics:
- Analyze usage to improve the Service and our business.
- Understand user activity, including page popularity and navigation patterns.
- Develop new products and services.
Marketing and advertising:
- Collect and use personal information for marketing purposes.
- Conduct interest-based advertising through third-party partners using cookies and similar technologies.
- Share information with third-party partners for interest-based advertising on other online platforms.
Compliance and protection:
- Comply with laws, legal requests, and process (e.g., subpoenas, government investigations).
- Protect rights, privacy, safety, or property of Postal, users, or others.
- Audit internal processes for compliance.
- Enforce Service terms and prevent, identify, or investigate fraudulent or illegal activity.
Data sharing in corporate events:
- Share personal information in connection with actual or prospective corporate transactions.
Aggregated, de-identified, or anonymized data:
- Create aggregated or anonymized data from your personal information.
- Share such data with third parties for lawful business purposes, including analyzing and improving the Service.
Further uses:
- In certain cases, we may seek your consent to use personal information for additional purposes not compatible with the initial purpose of collection.

Music Submissions & Communications

When you submit content through a music submission feature on Postal, we may collect personal information such as your name, email address, and any other details you choose to provide. We process this information to facilitate the submission, review, and collaboration between users.

When you submit content, a Postal account or profile is created using your email address to manage your submission and related activity.

Postal acts as a data processor for submission information until it is shared with the recipient, at which point the recipient becomes the independent controller of that information.

We use this information to:

Facilitate the submission and review of your content
Share your submission and contact information with the intended recipient
Enable communication between you and the recipient regarding your submission

Information submitted through a music submission feature is shared with the recipient (campaign creator) you are submitting to. Once shared, the recipient may store, organize, and process your information in accordance with their own practices.

Marketing and Communications Consent

If you choose to opt in to receive updates or communications, you provide your explicit, informed consent for the campaign creator or recipient to:

Contact you using the information you provided
Add your information to their mailing lists or customer relationship management systems
Send you updates, opportunities, marketing communications, and other related messages

This consent serves as the legal basis for processing your personal data for marketing purposes, where required by applicable law.

Separately and with your consent, Postal may send you emails about new campaigns, features, and opportunities. This consent is optional, is not a condition of submitting or downloading content, and may be withdrawn at any time using the unsubscribe link in any Postal email.

Use and Retention of Information by Recipients

You acknowledge and agree that recipients may:

Retain your submission and contact information for their records
Store and manage your information outside of Postal
Use your information for purposes related to reviewing submissions, contacting you, and managing ongoing communications

Postal does not control how recipients use your information once it has been shared. Recipients are solely responsible for complying with applicable data protection, privacy, and marketing laws.

Your Rights Regarding Submission Information

Depending on your location, you may have rights under applicable data protection laws, including the right to:

Access your personal data
Request correction or deletion of your data
Withdraw your consent at any time
Object to or restrict certain processing

To exercise these rights, you should contact the campaign creator or recipient directly, as they control your information once it has been shared.

To exercise these rights with respect to information a campaign creator or recipient holds, contact that creator or recipient directly, as they control your information once it has been shared. For rights regarding information Postal controls, see "Your Choices" and "Your Rights under European Data Protection Laws" below.

Music submissions are also subject to Postal's Terms of Use.

Storefront and Payments

Postal offers a Storefront feature that allows eligible users ("Creators") to list, license, and sell content to other users ("Buyers"). This section describes how personal information is handled in connection with Storefront.

Payment processing: Storefront payments are processed by Stripe, Inc. Postal does not collect or store full payment card numbers, bank account numbers, or government identification documents submitted during Stripe onboarding. Stripe processes that information as an independent controller under its own privacy policy. Postal receives only limited transaction metadata, such as amount, currency, date, status, and the last four digits of a payment instrument.

Information shared with Creators: When you purchase through Storefront, we share limited information with the Creator so they can fulfill your order, provide support, and meet their own legal and tax obligations. This may include your name or username, email address, purchase and license details, and country.

Postal acts as a limited agent for the Creator until purchase information is shared with the Creator, at which point the Creator becomes the independent controller of that information. Once shared, the Creator may store, organize, and process your information in accordance with their own practices.

Restrictions on Creator use of Buyer information: Creators may use Buyer information only to fulfill and support the transaction and to comply with law. Creators may not sell Buyer information, use it for unrelated marketing without a lawful basis and any required consent, or retain it longer than necessary. Postal does not control how Creators use Buyer information once it has been shared, and Creators are solely responsible for complying with applicable data protection, privacy, and marketing laws. Requests concerning information held by a Creator should be directed to that Creator.

Information we collect from Creators: We collect Creator account, payout, tax, and transaction information as necessary to operate Storefront, calculate fees, prevent fraud, and comply with law.

Retention: We retain Storefront transaction records for as long as required for tax, accounting, audit, dispute resolution, and legal compliance purposes, which may extend beyond the closure of your account.

Storefront is also subject to Postal's Terms of Use and the Storefront Terms.

Withdrawal of Consent

You may withdraw your consent to receive marketing communications at any time by:

Using the unsubscribe link included in communications
Contacting the campaign creator or recipient directly

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Retention

We generally retain personal information to fulfill the purposes for which we collected it, including satisfying legal, accounting, or reporting requirements, establishing or defending legal claims, or preventing fraud. To determine the appropriate retention period for personal information, we may consider:

The amount, nature, and sensitivity of the personal information.
The potential risk of harm from unauthorized use or disclosure.
The purposes for which we process the personal information and whether those purposes can be achieved through other means.
Applicable legal requirements.

When we no longer require personal information, we may delete it, anonymize it, or isolate it from further processing.

Community Feed & User-Generated Content

When you post, comment, react, or otherwise share content on Postal's Feed, that content may be visible to other users based on your account settings.

Content shared on the Feed may include:

Text posts, comments, and reactions
Links, images, audio, and other media
Profile information displayed alongside your content (such as your name, username, or avatar)

Please note that any content you choose to share on the Feed is visible to the audience you select, and other users may view, interact with, or reshare that content within Postal.

How Feed Content Is Used

We use Feed content to:

Display posts and interactions to other users
Enable engagement features such as likes, comments, reposts, and notifications
Maintain platform safety, integrity, and moderation
Analyze usage trends and improve Postal's features
Enforce our Terms of Use

Feed activity may be processed and stored even if you later delete your account, where required for legal, security, or operational purposes.

Content Retention & Deletion

You may delete Feed posts at any time, subject to technical limitations
Deleted content may persist in backups, logs, or cached systems for a limited period
Content that others have already interacted with (such as reposts or quotes) may remain visible

Postal does not guarantee immediate or complete removal of content from all systems.

Visibility & Discovery

Depending on your settings:

Feed content may be visible to logged-in users or specific groups
Feed content may appear in internal discovery surfaces, recommendations, or search results within Postal

Feed content may be indexed and surfaced within Postal based on relevance, activity, and user relationships.

Moderation & Safety

Postal may review, monitor, or remove Feed content and may restrict or suspend accounts that violate our Terms of Use. Moderation may involve automated systems and human review.

Your Responsibility

You are responsible for the content you choose to share on the Feed. Do not post content that is confidential, infringes on the rights of others, or includes personal data of others without permission.

Once shared, content may be copied, referenced, or redistributed by other users within Postal.

Feed content is also subject to Postal's Terms of Use.

How We Share Your Personal Information

We may share your personal information with the following parties and as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection. We make commercially reasonable efforts to ensure parties we share information with provide protections consistent with this Privacy Policy, except that parties other than service providers and affiliates may use personal information according to their own privacy policies.

Affiliates: Our corporate parent, subsidiaries, and affiliates.
Service providers: Third parties that provide services on our behalf or help operate the Service or our business (e.g., hosting, IT, customer support, email delivery, marketing, research, and analytics).
Payment processors: Any payment information you provide to make a purchase on the Service is collected and processed directly by our payment processors, such as Stripe (Stripe Privacy Policy) or Apple Pay (Apple Privacy Policy).
Third parties designated by you: Parties you instruct or consent to share your personal information with.
Partners: Third parties with whom we partner or collaborate, including event co-sponsors, joint product or service providers, and marketing or advertising partners.
Creators (Storefront): When you purchase through Storefront, we share limited transaction and contact information with the Creator so they can fulfill and support your order and meet their legal and tax obligations. The Creator acts as an independent controller of that information.
Linked third-party services: If you choose to link your Service account to a social media or other third-party service, we may share personal information with that service. Use of such information will be governed by that service's privacy policy and your account settings.
Professional advisors: Lawyers, auditors, bankers, insurers, and other advisors, to the extent necessary in the course of providing professional services.
Authorities and others: Law enforcement, government authorities, and private parties as necessary or appropriate for compliance with legal obligations or protection purposes.
Business transferees: In connection with actual or prospective business transactions, including investments, financing, public stock offerings, or the sale, transfer, or merger of all or part of our business, assets, or shares. This includes acquirers, successors, or assignees, as well as in cases of insolvency, bankruptcy, or receivership.
Other users and the public: Your profile information and user-generated content (excluding private messages) may be visible to other users or the public, including recordings you create through the Service. Such information may be collected, copied, or stored by others, including search engines, and we disclaim any responsibility for such uses.

Your Choices

Access or update your information: If you maintain an account with us, you may review and update certain personal information by logging into your account.
Opt-out of communications: You may opt-out of receiving marketing emails by following the unsubscribe instructions included in the communication or by contacting us directly. Please note that service-related or non-marketing communications may still be sent.
Cookies and other technologies: Most web browsers permit you to remove or reject cookies. Disabling cookies may affect your ability to use certain features of the Service. For more information, please visit www.allaboutcookies.org.
Blocking images/clear GIFs: Most browsers and devices allow you to prevent images from loading, which may disable certain tracking technologies such as web beacons (pixel tags/clear GIFs).
Privacy settings: Certain privacy settings are available through the Service. For example, Apple Face ID stores facial recognition data locally on your device and is not accessible to us.
Advertising choices: You may limit the use of your information for interest-based advertising through the following mechanisms:
- Browser settings to block third-party cookies.
- Privacy-focused browsers or ad-blocking plug-ins.
- Platform-specific settings, including Google Ads Settings and Facebook Ad Preferences.
- Industry opt-out programs, including the Network Advertising Initiative (link), Digital Advertising Alliance (link), and the AppChoices mobile application (link).
- Mobile device settings to restrict the use of advertising identifiers.

Important Note: Opt-out settings must generally be applied individually to each device or browser. We cannot guarantee that all third parties with whom we share information participate in these programs or honor these settings.

Do Not Track

Some Internet browsers can be set to send "Do Not Track" signals when you visit online services. At this time, we do not respond to these signals. To learn more about "Do Not Track," please visit allaboutdnt.com.

Declining to Provide Information

We require certain personal information to provide specific services. If you do not provide information that we identify as required or mandatory, we may be unable to provide those services.

Linked Third-Party Platforms

If you connect to the Service through a social media account or another third-party platform, you may be able to use your account settings to control what information we receive. Revoking access will not affect information we have already received from that third party.

Delete Your Content or Close Your Account

You can delete certain content directly through your account. If you wish to close your account, please contact us and we'll help you with the process.

Other Sites and Services

The Service may include links to third-party websites, mobile apps, or online services, or our content may appear on third-party platforms. These links and integrations are not endorsements, and we are not responsible for the actions of these third parties. We encourage you to review the privacy policies of any third-party services you use.

Security

We use technical, organizational, and physical safeguards designed to protect the personal information we collect. While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. Therefore, we cannot guarantee the absolute security of your information.

International Data Transfer

We are headquartered in Canada and may use service providers that operate in other countries. Your personal information may be transferred to Canada or other locations where privacy laws may not be as protective as those in your state, province, or country.

Users in Europe should review the information below about the transfer of personal information outside of Europe.

Children

The Service is not intended for use by anyone under 18 years of age. If you are a parent or guardian and believe that we have collected personal information from your child in a manner not permitted by law, please contact us immediately.

If we become aware that we have collected personal information from a child without the consent of their parent or guardian where required by law, we will take steps to delete that information in accordance with applicable legal requirements.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this Privacy Policy and, where appropriate, by other means such as posting a notice on the Service.

Any modifications will be effective upon posting, unless we indicate otherwise. Your continued use of the Service after the effective date of a modified Privacy Policy constitutes your acknowledgment and acceptance of the updated Privacy Policy.

How to Contact Us

If you have questions, requests, or concerns about this Privacy Policy or how we handle your personal information, you may contact us as follows:

Email: legal@postal.music

Notice to European Users

General

This section applies only to individuals located in the United Kingdom and the European Economic Area (EEA, collectively "Europe").

European data protection laws, including the EU General Data Protection Regulation (GDPR) and the UK GDPR, provide you with certain rights regarding your personal information.

Controller: Postal is the controller of your personal information under the GDPR (EU General Data Protection Regulation 2016/679 and UK GDPR). See "How to Contact Us" above for our contact details.

Personal information: References to "personal information" include "personal data" under the GDPR, i.e., information that directly or indirectly identifies you.

Our Legal Bases for Processing Your Personal Information

Our legal bases for processing your personal information described in this Privacy Policy are listed below:

Where we need to perform a contract, we are about to enter into or have entered into with you ("Contractual Necessity").
Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests ("Legitimate Interests"). More detail about the specific legitimate interests pursued in respect of each Purpose we use your personal information for is set out in the table below.
Where we need to comply with a legal or regulatory obligation ("Compliance with Law").
Where we have your specific consent to carry out the processing for the Purpose in question ("Consent").

We have set out below, in a table format, the legal bases we rely on for each relevant purpose, including the categories of personal information involved. For more information on these purposes and the data types involved, see "How we use your personal information."