Attorney review required. This is a draft for UI design purposes. All legal documents must be reviewed and approved by a licensed US attorney before platform launch.
Legal

Privacy Policy

Effective date: 1 June 2025 · Postscript Society, letters.postscriptsociety.com · CCPA compliant
Contents
1. Information we collect
2. How we use your information
3. Data sharing and disclosure
4. Your rights under CCPA
5. Cookies
6. Contact us
1. Information we collect

When you create an account or subscribe to Postscript Society, we collect the following information: your email address (used for authentication and correspondence), your name and postal address (required for physical letter delivery), payment information (processed and stored by Shopify — we do not store card numbers), your reading activity within the portal (letters opened, pages read, bookmarks set), and subscription status and history.

We do not collect sensitive personal information as defined under the CCPA.

2. How we use your information
  • To authenticate you and maintain your session
  • To deliver physical letters to your postal address
  • To unlock digital letters according to your subscription schedule
  • To track your reading progress and restore your bookmark
  • To send transactional emails (new letter unlocked, payment confirmed, subscription reminders)
  • To administer the referral programme and apply credits to your account
  • To improve the platform using aggregated, anonymised usage data
3. Data sharing and disclosure

We do not sell your personal information. We share your data only with the following service providers, each bound by appropriate data processing agreements:

  • Shopify — payment processing and order management
  • Appstle — subscription management
  • Resend — transactional email delivery
  • Our fulfilment partner — physical letter dispatch (name and postal address only)

We do not share your data with advertisers or data brokers under any circumstances.

4. Your rights under CCPA

As a California resident, you have the right to: know what personal information we have collected about you; request deletion of your personal information; opt out of the sale of your personal information (we do not sell data); and non-discrimination for exercising your rights.

To exercise any of these rights, email us at privacy@postscriptsociety.com. We will respond within 45 days.

5. Cookies

We use essential cookies to maintain your login session and reading preferences. We may use privacy-first analytics cookies (no personal data shared with third parties) if you consent. You can manage cookie preferences at any time from the cookie consent banner.

6. Contact us

Questions about this policy? Email privacy@postscriptsociety.com. We aim to respond within 5 business days.