Privacy Policy

Last updated: April 1, 2026 · Effective: April 1, 2026

Zeropost ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Zeropost mobile application and website (collectively, the "Service").

1. Information We Collect

• Account information: Email address and full name when you create an account.
• Mailing address: Street address, city, state, and ZIP code that you provide. This is used exclusively to include in opt-out requests filed on your behalf.
• Mail images: Photos of mail pieces you scan. These are sent to Google Cloud Vision for text recognition and are not stored by Zeropost after processing.
• Removal requests: Records of opt-out requests filed on your behalf, including sender names, submission dates, and status.
• Usage data: Basic app analytics including features used and scan counts.
• Device information: Device type and OS version for support and compatibility purposes.
• Subscription information: Subscription status managed through RevenueCat. We do not store payment card details.

2. How We Use Your Information

• File formal CAN-SPAM opt-out requests with senders on your behalf, including your name and mailing address
• Track the status of your removal requests in your dashboard
• Send notifications about removal status updates
• Provide customer support
• Improve sender identification accuracy
• Process and manage subscription payments via Apple App Store and RevenueCat
• Maintain the security and integrity of the Service

3. Information We Do Not Collect

• Financial information or payment card details (handled entirely by Apple App Store)
• Location data or GPS coordinates
• Contacts, photos, or other data from your device beyond what you explicitly submit
• Social media profiles or third-party account data

4. How We Share Your Information

• Mailers and senders: We send your name and mailing address to senders as part of formal opt-out requests filed on your behalf. This is the core function of the Service.
• Google Cloud Vision: Mail images are sent to Google's Vision API for text recognition. Google does not retain images after processing. Subject to Google's Privacy Policy.
• Supabase: We use Supabase for secure data storage. Your data is encrypted at rest and in transit. Subject to Supabase's Privacy Policy.
• Resend: We use Resend to send opt-out emails on your behalf. Subject to Resend's Privacy Policy.
• RevenueCat: We use RevenueCat to manage subscriptions. Subject to RevenueCat's Privacy Policy.
• Apple App Store: Subscription payments are processed by Apple. Subject to Apple's Privacy Policy.

We do not sell, rent, or share your personal information with advertisers or third parties for marketing purposes. We do not share your data with data brokers.

5. Data Retention

We retain your account information and removal history for as long as your account is active. You may delete your account and all associated data at any time from the Account screen in the app — deletion is immediate and permanent. Mail images are deleted immediately after processing and are never stored on our servers.

6. Security

We implement industry-standard security measures including encrypted data transmission (TLS 1.2+), encrypted data storage, and row-level security policies that ensure your data is only accessible to you. We regularly review our security practices.

7. Children's Privacy (COPPA)

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@zeropost.app and we will delete it immediately.

8. Your Rights — Texas Residents (TDPSA)

Under the Texas Data Privacy and Security Act (TDPSA), Texas residents have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your personal data
• Obtain a portable copy of your personal data
• Opt out of the sale of personal data (we do not sell personal data)
• Non-discrimination for exercising your rights

To exercise these rights, contact us at privacy@zeropost.app.

9. Your Rights — California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information we have collected
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights
• Right to correct inaccurate personal information
• Right to limit use of sensitive personal information

To exercise these rights, contact us at privacy@zeropost.app. We will respond within 45 days.

10. Do Not Track

Our Service does not respond to Do Not Track signals. We do not track users across third-party websites.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification at least 30 days before they take effect. The date at the top of this policy reflects the most recent update.

12. Contact Us

For privacy-related questions or to exercise your rights:

Zeropost · Texas, United States · privacy@zeropost.app