PennyPost What PennyPost stores
- Your users' emails and names, from PostHog, Segment, the snippet or the API.
- The paths of the pages they open (never the query string) and the events you send.
- The emails it sends and what happened to them (delivered, bounced, clicked if you turned tracking on).
Page views and events are deleted after 180 days. Email records are kept for 180 days by default and then folded into totals. Addresses that bounced or were marked as spam are kept, so they're never emailed again.
How it's kept safe
- Everything goes over HTTPS.
- API keys, OAuth tokens and Segment tokens are stored as hashes, so a database leak doesn't leak working keys.
- Your sending key and webhook secret are encrypted (AES-256-GCM).
- The snippet only accepts page views signed with your identity secret, so nobody can send views in someone else's name.
- The PostHog connection can only read, and only the one project you picked.
PennyPost doesn't have a SOC 2 report. If there's a security incident that affects your data, we tell you within 48 hours.
Deleting data
To have a person's data removed, email hello@usepennypost.com and it's done within 14 days. Deleting your account removes your workspaces, people and emails.
The legal pages
- Security: hosting, encryption and how we handle incidents
- Privacy policy
- Data processing agreement, with the EU SCCs and the UK addendum
- Subprocessors: we give 14 days' notice before adding one
- Terms and Acceptable use
Questions: hello@usepennypost.com