Privacy Notice
Effective 17 July 2026
Postual collects the information needed to run your account, deliver lead searches, protect the service, support your purchases, and—with your permission—measure advertising performance. We do not sell your personal information.
1. Who is responsible
Postual is responsible for personal information processed through the Postual lead service. Contact us at agency@postual.com.
2. Information we process
- Account details such as your email address, encrypted password record, verification status, and communication preferences.
- Search choices, saved lead lists, outreach statuses, follow-up dates, notes, quality reports, and exports you request.
- Support-chat information you choose to provide, such as your name, email address, messages, and conversation history.
- Purchase metadata such as PayPal order and capture references, purchased pack, credit balance, and fulfillment records. PayPal handles payment-card details; Postual does not store full card numbers.
- Security and technical data such as session identifiers, request timing, IP-derived abuse signals, operational logs, page views, and interactions with important product controls. Product analytics does not collect passwords, payment-card data, lead contents, notes, or text typed into forms.
3. Why we use it
We process information to perform our contract with you, deliver and support the service, maintain accurate credit balances, prevent fraud and abuse, comply with legal obligations, and improve reliability. We send marketing only when you opt in, and you may withdraw that consent at any time.
4. Service providers
We share limited information with providers that host the website, run business-data searches, deliver account emails, process payments, provide customer support, measure product usage and advertising performance, deliver private operational alerts, and help secure the service. These providers process information for those purposes under their own terms or our instructions. PayPal separately processes checkout and payment information under its privacy statement. Tawk.to provides the support-chat widget under its privacy policy. PostHog provides product analytics under its privacy notice. When you allow optional advertising measurement, Meta processes Pixel and Conversions API event data under its privacy policy. Telegram may deliver limited private owner alerts, such as a masked account address and purchased pack, under its privacy policy.
5. Cookies, local storage, and advertising measurement
Postual uses an essential secure session cookie to keep you logged in and browser storage for necessary interface, account-workflow, campaign-attribution, and anonymous analytics-visitor state. The Tawk.to support widget may use cookies or browser storage to maintain chat conversations and show support availability. Meta Pixel is optional and is loaded only after you select Allow in the advertising-measurement notice. If allowed, browser and server events may measure page visits, account registration, checkout initiation, and completed purchases, including purchase value and currency. Select Cookie settings in the website footer to review or change this choice.
6. Retention
We keep account and workspace information while your account is active and for a reasonable period afterward for security, support, financial records, dispute handling, and legal compliance. We delete or anonymise information when it is no longer needed, subject to required retention periods.
7. International processing
Our providers may process information in countries different from yours. Where required, we use recognised safeguards for international transfers.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, and to complain to a data-protection authority. Email agency@postual.com to make a request. We may need to verify your identity first.
9. Security
We use access controls, encrypted transport, one-way password protection, signed sessions, and restricted server-side credentials. No system is completely secure, so please use a strong unique password and contact us if you suspect unauthorised access.
10. Updates
We may update this notice when our service or legal obligations change. The effective date above shows the latest revision.