Postra is a layer on top of your mailbox. We do not host your email, change your MX records, or operate an outbound mail relay. Your provider stays your provider.
Our approach
Postra connects to your existing email account — Gmail, Google Workspace, Outlook, Microsoft 365, Fastmail, iCloud, or any IMAP/SMTP mailbox — and adds an intelligence layer on top. We access your mailbox only to provide the features you turn on, and only for as long as your connection is active.
We collect the minimum needed to make Postra useful, and we never sell your data or use the contents of your mailbox to train public AI models.
What we access
- ●Mailbox content. Message metadata and bodies from your connected account, used to generate summaries, drafts, tasks, and search results.
- ●Account credentials. OAuth tokens, or IMAP/SMTP credentials where OAuth is unavailable, to maintain your connection.
- ●Account profile. Your name and email address for your Postra account and to identify connected mailboxes.
- ●Usage data. Basic product analytics and diagnostics to keep Postra reliable and secure.
How we use it
We use the data above to operate Postra's features: summarizing conversations, detecting important messages, drafting replies in your tone, extracting tasks, surfacing follow-ups, and answering natural-language search across your mailbox.
We do not use your mailbox for advertising, and we do not sell or rent your personal data to anyone.
AI processing
When you use an AI feature, the relevant content is processed to generate that result for you. Processing is performed to serve your request — your mailbox content is never used to train public, third-party foundation models.
Where we rely on AI subprocessors, we work to ensure your data is handled under contractual terms that prohibit using it to train their general models.
Sending email
Any email you send happens through your own connected provider — Gmail, Outlook, your SMTP server, and so on. Postra does not run its own mail servers, does not act as an outbound relay, and never sends mail without your explicit action.
Storage & security
Credentials and tokens are encrypted at rest and in transit. We retain indexed mailbox data only as needed to provide the service, and we apply access controls and monitoring to protect it.
When you disconnect a mailbox or delete your account, we revoke access and delete associated connection data and indexes on a prompt schedule.
Your control
- ●Disconnect any mailbox at any time, which revokes Postra's access.
- ●Request access to, correction of, or deletion of your personal data.
- ●Delete your Postra account and associated data entirely.
Contact
Questions about privacy or a data request? Reach us at privacy@postra.app or through our contact page.