Privacy Policy
Effective [effective date]
PostBuy watches the deadlines people lose money by missing: return windows, warranty ends, free-trial conversions. To do that for purchases, it reads the order emails in your Gmail, but only if you allow it. This page says exactly what that means.
The short version
- We look for order, shipping, delivery, return and refund emails from shops. We are not interested in anything else in your mailbox.
- We keep the facts we need, such as the shop, the item, the price and the dates. We do not keep the email itself, its body or its attachments.
- We do not sell your data, show ads, or let anyone read your email.
- Our access is read-only. We cannot send, delete or change anything in your Gmail.
- You can disconnect Gmail and delete everything whenever you like.
1. Who we are
PostBuy is operated by Nikhil Suthar, based in Banswara, Rajasthan, India (“we”, “us”). You can reach us at support@postbuyapp.com.
2. What we access in your Google account
Sign-in
When you sign in with Google we receive your email address. We use it to identify your account and to send you reminders.
Gmail
If you connect Gmail we ask for one permission:
https://www.googleapis.com/auth/gmail.readonly, which Google describes as “View your email messages and settings”.
Why we need it. The dates a return window is counted from, such as the delivery date, are written inside the order email, not in the information about it. Google offers no narrower permission that lets an app read them.
What we do with it. We search your mailbox for messages that look like orders, shipping notices, delivery notices, returns or refunds from shops. We read each one once, pick out the facts listed in the next section, and discard the rest. Emails that do not look like order mail are not stored and not looked at further.
What we never do. We do not read your personal conversations or other mail, we do not store email bodies or attachments, and we cannot send, delete or modify any email.
3. What we store
| What | Details | Why |
|---|---|---|
| Your account | Your Google email address | To identify you and send reminders |
| Order facts from emails | Shop name, order number, item name, price, order, shipping and delivery dates, delivery status, and the tracking link if the shop provides one | To work out the deadline and show it to you |
| Email references | The email’s subject line, its date, and Gmail’s message ID | To avoid counting the same email twice and to link the emails of one order together |
| What you tell us | Arrival dates you set, and whether you returned or kept an item, with the date | To correct a deadline and to show your “money back” total |
| Google access token | The token Google gives us so we can keep checking for new order emails | To read new order emails without asking you to sign in again. It is stored encrypted and is deleted when you disconnect. |
| Notification details | An identifier for your phone from Apple or Google, so reminders can reach it [confirm when push notifications are built] | To send reminders |
| Basic technical logs | Time of requests and error messages, kept for 30 days | To keep the service running and fix faults |
We do not collect your contacts, location, payment or bank details, or any other email.
4. How we use it
- To compute the deadlines and show them in the app.
- To send you a reminder before a deadline passes, by push notification or email.
- To show the money you got back, from the returns you tell us about.
- To keep the service secure and working.
We do not use your data for advertising, we do not build advertising profiles, and we do not use it to train general-purpose AI models. [confirm: true at the time of writing]
5. Google API Services User Data Policy
PostBuy’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice, that means:
- We use information from your Gmail only to provide and improve the features you can see in PostBuy.
- We do not transfer it to anyone else except as needed to provide those features, to keep the service secure, to comply with the law, or as part of a business transfer with notice to you.
- We do not use it to show advertising.
- Nobody at PostBuy reads your email content. The only exceptions are the ones Google allows: you ask us to look at a specific message, it is needed to investigate abuse or a security problem, or the law requires it.
6. Who we share it with
We do not sell or rent your data. We use a small number of service providers who handle data only on our instructions:
- Google: sign-in and the Gmail connection.
- [hosting provider]: stores our servers and database, in [region].
- [email delivery provider]: sends reminder emails to your address.
- Apple and Google push services: carry reminder notifications to your phone. A reminder contains the item and the deadline. [confirm when push notifications are built]
The PostBuy app and this website contain no advertising or analytics tools. [confirm: true at the time of writing] We may disclose data if the law requires it.
7. Where it is kept and how it is protected
Your data is kept on servers in [region]. It travels over encrypted connections (HTTPS). Google access tokens are stored encrypted, and your data is encrypted at rest [confirm]. Only the operator of PostBuy has access to the systems that hold it. If a breach affects your data, we will tell you and the relevant authorities as the law requires.
8. How long we keep it, and how to delete it
We keep your order facts for as long as you use PostBuy. You can stop and delete at any time:
- Disconnect Gmail. Open your Google account’s third-party access page, choose PostBuy and remove access. We lose access immediately and stop reading your mail. You can also disconnect in the app [confirm when built].
- Delete your data. Delete your account in the app [confirm when built], or email support@postbuyapp.com from the address you signed in with. We delete your account, your order facts and your access token within 30 days. Copies in backups are removed when those backups expire, within 35 days.
If you stop using PostBuy without deleting your account, we will delete your data after 12 months of inactivity.
9. Your rights
Whatever the law where you live, you can ask us to tell you what we hold about you, correct it, or delete it, and you can withdraw your consent to our access to Gmail at any time. You can fix a wrong date yourself in the app. If you are in India, these include your rights under the Digital Personal Data Protection Act, 2023.
To use any of them, or to make a complaint, write to Nikhil Suthar at support@postbuyapp.com. We will reply within 30 days. If we do not resolve it, you can also complain to the data protection authority that applies to you.
10. Children
PostBuy is not for anyone under 18, and we do not knowingly collect data from children. If you believe a child has used it, contact us and we will delete the account.
11. This website
This website sets no cookies and loads no scripts, fonts or images from other companies. [confirm: true of the hosted version] Your hosting provider may keep ordinary server logs.
12. Changes
If we change this policy in a way that matters to you, we will tell you in the app or by email before it takes effect. The date at the top shows when it last changed.
13. Contact
Nikhil Suthar, Banswara, Rajasthan, India
support@postbuyapp.com