Privacy Policy

Last updated: February 1, 2026

1. Overview

This Privacy Policy explains how Posthouse collects, uses, and protects personal data when you use our service.

We collect only what's needed to run mail clubs correctly.

In short: We only collect what we need. No more.

2. Data Controllers

Posthouse is the data controller for platform data — account information, login credentials, and how you use Posthouse.

Artists are independent data controllers for subscriber data they receive through Posthouse. When you subscribe to a mail club, the artist receives your name, email, and mailing address. The artist is responsible for how they use and store this data.

This means both Posthouse and the artist have responsibilities for your data, but we operate independently. If you have questions about how an artist uses your data, contact them directly.

In short: Posthouse manages platform data. Artists manage subscriber data they receive.

3. Information We Collect

From Artists:

Name and email address
Club information (name, description, pricing)
Stripe account connection details

From Subscribers:

Name and email address
Mailing address
Subscription status and history

Payment Information:

Payments are processed by Stripe. Stripe acts as an independent processor and is governed by its own privacy policy. Posthouse does not store or access full payment credentials.

In short: We collect names, emails, and addresses. Stripe handles payment info.

4. Data Shared with Artists

When you subscribe to a mail club, the following data is shared with the artist:

Your name
Your email address
Your mailing address
Your subscription status (active, canceled, payment failed, etc.)

Mailing addresses are shared with the artist running the club for the sole purpose of sending physical mail.

Artists need this information to send you mail and manage their club. By subscribing, you are directing us to share this information with the artist.

Artists are responsible for how they use your data. Posthouse cannot control what artists do with subscriber information outside our platform. If you have concerns, contact the artist directly.

In short: When you subscribe, the artist gets your name, email, and mailing address — for the sole purpose of sending mail.

5. How We Use Information

We use personal data to:

Manage subscriptions and batch assignments
Generate mailing lists and address views for artists
Send transactional emails (confirmations, status updates)
Process payments through Stripe
Maintain platform security and prevent fraud

We do not use mailing addresses for marketing unrelated to your subscription.

In short: We use your data to run the service. Not for unrelated marketing.

6. Data Sharing

We share personal data only as necessary:

With Artists — subscriber data as described above
With Stripe — payment processing
With service providers — hosting, email delivery (only as needed to operate the service)
When required by law — legal obligations, court orders, etc.

We do not sell or rent personal data.

In short: We share with artists, Stripe, and essential service providers. We never sell your data.

7. Cookies

Posthouse uses essential cookies to maintain your session and keep you logged in. We do not use advertising or tracking cookies.

In short: Only essential cookies. No tracking.

8. Data Retention

We retain data as follows:

Active accounts: Data is retained while the account is active
Financial records: 7 years after the transaction (for legal/accounting requirements)
Inactive accounts: Deleted 2 years after the account becomes inactive

You may request deletion of your data at any time, subject to legal retention requirements.

In short: We keep data while you're active. Financial records for 7 years. Inactive accounts deleted after 2 years.

9. Security

We use reasonable technical and organizational measures to protect personal data, including encryption in transit and at rest. No system is 100% secure, but we take care to minimize risk.

In short: We take reasonable steps to protect your data.

10. Your Rights

You have the right to:

Access — Request a copy of your personal data
Rectification — Correct inaccurate or incomplete data
Deletion — Request deletion of your data
Portability — Receive your data in a portable format
Object — Object to certain types of processing
Withdraw consent — Where processing is based on consent

To exercise these rights, email us at posthouse@shinyobject.co. We will respond within 30 days.

In short: You can access, correct, or delete your data. Just email us.

11. International Transfers

Posthouse is based in the United States. If you are located outside the US, your data may be transferred to and processed in the US. By using Posthouse, you consent to this transfer.

In short: Data may be processed in the US.

12. Children's Privacy

Posthouse is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, please contact us.

In short: Not for kids under 13.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes. Continued use of Posthouse means you accept the updated policy.

In short: Policy may change. We'll let you know about big updates.

14. Contact

Privacy questions? Email us at posthouse@shinyobject.co