tinypostcard

Privacy Policy

Straightforward details on what we collect, why we collect it, and which providers help us run tinypostcard.

Last updated: April 4, 2026

What this policy covers

This policy explains what data tinypostcard collects, how we use it, and what services we share it with to run the product.

If you do not agree with this policy, do not use tinypostcard.

Data we collect

We collect information needed to provide the service, including:

  • Account data: email, name, username, auth provider IDs, and session records.
  • Address book data: sender and recipient names, addresses, phone numbers, emails, notes, and CSV imports.
  • Postcard content data: templates, HTML/text content, uploaded images/audio, Canva imports, and QR page content.
  • Billing data: token balance, transaction records, Stripe customer/payment IDs, and checkout metadata. We do not store full card numbers.
  • Integration data: API key metadata (keys are stored hashed) and Canva OAuth tokens for connected Canva accounts.
  • Usage data: logs, events, and technical metadata used for reliability, analytics, abuse prevention, and support.

How we use data

We use collected information to:

  • Create, process, and deliver postcards through our print-and-mail providers.
  • Process payments, track balances, issue credits/refunds when needed, and provide billing support.
  • Power features like AI generation, background removal, Canva import, contact intake, and send tracking.
  • Operate, secure, and improve the product.
  • Send service emails such as sign-in links, send confirmations, and preference updates.
  • Send marketing emails when subscribed, with unsubscribe controls.

Services we share data with

We only share data needed to run each feature. Depending on what you use, data may be shared with these processors/services:

  • Stripe for payments and billing portals.
  • Lob and/or PostGrid for postcard print-mail fulfillment and status updates.
  • Resend for transactional and marketing email delivery.
  • UploadThing for media file storage and delivery.
  • OpenAI for AI image generation and text expansion features.
  • remove.bg for background-removal requests.
  • Canva for connected Canva import/edit flows.
  • Mixpanel and Vercel Analytics for usage analytics.
  • OpenStreetMap Nominatim for address/location search lookups.
  • Google, Discord, and other configured auth providers for sign-in.
  • Featurebase (if enabled) for authenticated feedback portal access.
  • Google Fonts for font delivery in supported UI/render flows.

Cookies and tracking

We use cookies and similar identifiers for core app behavior and analytics.

  • A first-party visitor cookie (`tpc_visitor_id`) is set for landing-page experiment and visitor tracking support.
  • Canva OAuth/guest connection cookies are used to complete Canva auth/import flows.
  • When analytics is enabled, Mixpanel and Vercel Analytics may set additional identifiers and collect usage events.
  • Client analytics are enabled in production by default. You can control some cookie behavior through browser settings.

Email preferences

Marketing subscriptions are created as opted-in on signup and include unsubscribe/resubscribe links.

Postcard status notification subscriptions are also default-on by email, with separate unsubscribe/resubscribe links.

You can manage marketing preferences in your profile and by email link pages.

Data retention

We keep account, send, billing, and support-related records as needed to operate the service, prevent fraud, and meet legal obligations.

Connected service tokens (such as Canva tokens) are stored while needed for active integrations.

If you request deletion, we will remove or anonymize personal data where practical, except where retention is required by law or legitimate business needs.

Your choices and rights

In-product today, you can manage items like username and marketing preferences, and can disconnect Canva integrations.

For access, correction, deletion, or account-closure requests, contact support@tinypostcard.com.

Policy changes

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.

Contact

For privacy questions, contact support@tinypostcard.com.