Your files stay private.

Uploads and proofs are stored in a private Cloudflare R2 bucket. Access requires an account token or an expiring signed link.

Retention

Unpurchased file content expires after seven days. Purchased content is retained up to 90 days, with holds for unresolved fulfillment or refunds. Minimal transaction and duplicate-prevention records persist separately.

Traffic measurement

When enabled, Cloudflare Web Analytics measures visits, referral sources, and page performance on public marketing pages and guides. We do not embed this analytics script in mailing forms, accounts, checkout, proofs, or developer sandbox pages. We do not send document contents, addresses, or account tokens as analytics events. Cloudflare Web Analytics does not use analytics cookies or log URL query strings.

Address suggestions

When enabled, the street address you type is sent to Geoapify to suggest US addresses. The separate name and apartment fields and document contents are not included. Suggestions do not establish postal deliverability; you can always enter an address manually.

Spreadsheet imports

You can import an address list from a file or authorize access to a selected Google Sheet. We keep a mailing snapshot and read changes only when you recheck. Corrections in PostalMuse do not change your source spreadsheet. Mailing addresses are checked with Lob before proof approval.

Third parties

Cloudflare hosts this service. Mailing uses Lob for printing and mailing, Stripe for payments, and Resend for sign-in email.