PostSig, Inc. (“PostSig,” “we,” “us,” or “our”) takes your privacy seriously. This Privacy Policy (“Policy”) outlines how we collect, use, share, and protect your personal information when you visit or interact with our website located at https://www.postsig.local (“Website”).

This Privacy Policy (“Policy”) describes how PostSig, Inc. (“PostSig,” “we”, “us,” or “our”) collects, uses and discloses information from or about you or your device collected through our websites (including https://postsig.com/) and related services (including the PostSig Platform) (“Services”), as well as our marketing and other activities described in this Policy. It also describes the choices available to you regarding our use of such information. By using our Services, you agree to the collection, use, disclosure, and procedures this Privacy Policy describes.

If you apply for a job with us, you may submit your contact information and your resume online. We will collect the information you choose to provide on your resume, such as your education and employment experience.

This Policy does not apply to data that is not subject to applicable data protection laws (such as deidentified or publicly available information in certain jurisdictions). This Policy is also not a contract and does not create any legal rights or obligations not otherwise provided by law.

This Policy contains the following sections:

The Information We Collect
How We Use Your Information
Cookies and Similar Technologies
How We Disclose Your Information
Your Rights and Choices
How We Secure Your Information
Data Retention
Notification of Policy Changes
Children’s Privacy
Privacy Information for International Users
Privacy Information for California Residents
Your Choices Regarding “Sharing” and “Selling”
Contact PostSig

The Information We Collect

This section discusses the types of information we collect from and about you as you use the Services.

Information You Provide to Us

When you use our Services, you may provide certain information directly to us. For example, we collect information directly from you when you register to create an account for the Services, purchase our subscription services, subscribe to our mailing lists, interact with us through online forms or customer service, make a purchase, participate in a sales call or demo, engage with us at a conference or event, participate in surveys or research, or otherwise interact with us through the Services. This information includes:

First and last name
Contact information, including email, phone number, and postal address
Company name, industry, and job title, professional background, as well as business contact information
Photos, video, and audio (from recorded sales/customer service calls, if applicable)
Account username and password or other credentials
Payment information, such as your credit card number, expiration date, and verification code or bank account information (collected by our third-party payment processor) and related transaction information (including information about products purchased)
Demographic data, such as your ZIP code and gender
Your interests, preferences, and feedback or other information provided to or inferred by us
Any outputs generated through your use of the Service’s tools or features, such as any analysis reports or other output of the PostSig platform

Information we Automatically Collect as you Use the Services

There is certain information that we collect automatically from your use of the Services and from your device(s) used to access the Services. This information includes your IP address, device identifiers, page view statistics, browsing history, usage data, clickstream data, general geolocation information (derived from your IP address), session duration, diagnostic data, and information about your device (e.g., operating system, unique device identification numbers and browser type/version). We may collect this information using the types of technologies discussed in the “Online Analytics” section below.

Information obtained from other sources

We (or third parties acting on our behalf) may collect additional information about you from public databases and websites, business partners, social media platforms, conference hosts, event companies, and other third-parties to supplement the information we collect directly from you.

Combined Information

For the purposes discussed in this Privacy Policy, we may combine the information that we collect through the various methods discussed in this Privacy Policy, and use such combined information in accordance with this Policy.

De-identified Information

We may de-identify information we collect so the information cannot reasonably identify you or your device, or we may collect information that is already in de-identified form. Our use and disclosure of such de-identified information is not subject to any restrictions under this Policy, and we may use and disclose it to others for any purpose.

How we Use Your Information

We use your information for the following purposes:

To operate and provide the Services and respond to your requests, including account setup and management, authentication, and customer management
To maintain, analyze and improve the Services, such as by reviewing usage, monitoring performance, troubleshooting, data analysis, testing, system maintenance, repair and support, reporting and hosting of data, and enhancing the user experience
For customer service purposes (please note that customer service calls may be recorded and stored by us and our vendors for quality and training purposes)
To communicate with you with transactional information related to the Services (e.g., sending purchase confirmations) or about updates to our legal terms
In accordance with applicable legal requirements, for marketing purposes, including to provide you with special offers and promotions both with respect to our products and services and the products and services of third parties that we believe will be of interest to you
For our business operations, including maintaining your account, security, fraud prevention, legal compliance, and detecting security incidents and protecting against malicious, deceptive, fraudulent, or illegal activity
For other purposes where we have your consent

Cookies and Similar Technologies

Our Services use various technologies such as cookies, beacons, tags and scripts (collectively referred to herein as “cookies”) for online analytics purposes. These technologies are used in analyzing trends, administering the Services, tracking users’ movements around the Services and in gathering demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual as well as aggregated basis. PostSig’s cookie policy can be found here.

Please note that you can change your settings to notify you when a cookie is being set or updated, or to block cookies altogether. Please consult the “Help” section of your browser for more information (e.g., Microsoft Edge; Google Chrome; Mozilla Firefox; or Apple Safari). Please note that by blocking, disabling, or managing any or all cookies, you may not have access to certain features or offerings of the Services.

We may use third-party web analytics services (such as those of Google Analytics) on our Services to collect and analyze usage information through cookies and similar tools; engage in auditing, research, or reporting; assist with fraud prevention; and provide certain features to you. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on by clicking here.

Depending on your jurisdiction, our use of these analytics tools may be considered a 'sale' or 'sharing' of your information with our analytics partners, as described in the “Privacy Information for California Residents”' section below; you can review the specific cookies involved below and manage your choices as described in the 'Your Choices Regarding ‘Sharing’ and ‘Selling’”' section.

How We Disclose Your Information

We may disclose your information to third parties in the following ways:

Affiliates. We may disclose information to our affiliates for the purposes outlined in this Policy.
Service Providers. We may disclose information to our third-party service providers, vendors, or others who provide services for PostSig’s business operations and on our behalf such as hosting, information technology, customer support, email delivery, marketing, generative artificial intelligence, customer research, analytics.
Professional Advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.
Third-Party App Integrations. If you connect a third-party application to our Services, we may share information such as code with that third-party.
Legal and Safety Disclosures. We may disclose your information as necessary or appropriate under applicable laws (including laws outside your country of residence) to: comply with legal process or requirements, including applicable notification obligations; respond in good faith as necessary to requests from public and government authorities (including public and government authorities outside your country of residence); enforce our terms and conditions; and protect our operations or those of any of our affiliates and our rights, privacy, safety, or property, and/or that of our affiliates, you or others.
Business Transactions. We may disclose your information in the event of a proposed or actual reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of PostSig’s business, assets or stock (including in connection with any bankruptcy or similar proceedings).

Your Rights and Choices

Your Rights

Some users may have additional rights under applicable privacy laws, as described in the relevant region-specific sections below. Your local laws (including applicable laws in the EU, UK, and the United States (including California, Connecticut, Colorado, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Montana, Minnesota, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Virginia, Tennessee, and Texas, as well as similar U.S. state laws)) may permit you to request that we:

provide access to and/or a copy of certain information we hold about you
update information which is out of date or incorrect
delete certain information that we process about you
restrict the way that we process and disclose certain of your information
prevent the processing of your information for direct-marketing purposes (including any direct marketing processing based on profiling)
opt out of the processing of your personal information for automated processing that results in legal or similarly significant effects (if relevant)

Your local laws may also permit you to revoke your consent to the processing of your information for certain purposes.

In addition:

California and Oregon residents can request information about the categories of personal information we collect, disclose or “sell” or “share” (as defined in California law) about you; California residents can request the sources of such information, the business or commercial purpose for collecting or “selling” or “sharing” your information; and the categories of third parties to whom we disclose information. Such information is also set forth in this Privacy Policy.

Oregon, Connecticut, and Minnesota residents can request a list of the specific third parties, other than natural persons, to which we have disclosed personal information.
Nevada law permits certain Nevada consumers to opt out of the sale of "personally identifiable information" (as defined under Nevada law) for monetary consideration. We do not currently engage in such sales; if this changes, Nevada residents may submit a request to opt out at privacy@postsig.com.

How to exercise your rights

If you wish to exercise your data subject rights, please contact us using the contact information set out below. We will consider all requests and provide our response within the time period stated by applicable law and as otherwise required by applicable law. Please note, however, that certain information may be exempt from such requests in some circumstances, which may include if we need to keep processing your information for our legitimate interests or to comply with a legal obligation. We may request you provide us with information necessary to confirm your identity before responding to your request. We cannot respond to your request or provide you with the information you seek if we cannot verify your identity or authority to make the request and confirm the request relates to you and your information.

If you are a resident of Virginia, Minnesota, Montana, Oregon, Tennessee, Texas, Iowa, Indiana, Kentucky, Maryland, Nebraska, New Hampshire, New Jersey, Rhode Island, Delaware, Colorado, or Connecticut, and we deny your information request, you have the right to appeal our denial. You can exercise this right by contacting us at the contact information provided below. Your description must include your full name and the email address used for your account with us, along with a copy of the denial notice you received from us.

If you would like to submit your request through an authorized agent, we will ask the agent to provide written permission from you and we may need to separately verify your identity as discussed above.

Please note that if you are a PostSig Platform user, and we are acting as a data processor to your organization, we will direct you to the organization as a controller to make your request.

Your Marketing Choices

You can opt-out of email marketing using the unsubscribe link in our email communications. You may also contact us at the contact information provided below and request that we no longer use your information for marketing purposes. We will process such requests in accordance with applicable law, and it may take up to 10 days to process these requests.

Please note that even if you opt out of receiving marketing communications from us, you may still receive transactional communications about the Services or legal notifications.

Sale/Targeted Advertising Opt Out Rights

Under the laws in certain US jurisdictions (as indicated in the list above), you have the right to opt out of our processing or sharing of your information for online targeted advertising purposes.

Note that certain state laws also allow you to opt out of the “sale” of your information to third parties in exchange for valuable consideration. We use limited analytics tools that result in the disclosure of your information to our third-party partners and that are subject to the “sale” opt out right. You can opt out of these activities by using the “Customize” link on our website footer. We do not currently disclose information for online targeted advertising purposes.

Please note that we will also honor browser-based opt out signals (such as the global privacy control) in accordance with our legal obligations.

How We Secure Your Information

We employ a variety of technical, organizational, and physical measures to protect the information submitted to us, both during transmission and once we receive it. No method of transmission over the internet, or method of electronic storage, is 100% secure, however.

Therefore, we cannot guarantee its absolute security. If you have any questions about the security of the Services, or reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please notify us immediately through the contact information provided below.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Policy. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, whether we can achieve those purposes through other means, and applicable legal, regulatory, tax, accounting, or reporting requirements.

When we no longer require your personal information, we will either delete it, anonymize it, or, if deletion is not immediately possible (for example, because the data has been stored in backup archives), securely store it and isolate it from further processing until deletion is possible.

Notification of Policy Changes

We may change this Policy from time to time. If we make changes, we will post an updated Policy on the Services, and it will become effective as of the date of posting. We will also comply with applicable legal requirements regarding Policy updates and any notice or consent requirements. We encourage you to periodically review this page for the latest information on our privacy practices. Your use of the Services following these changes means that you accept the revised Policy.

Children’s Privacy

Our Services are designed for adults and business professionals, and we do not knowingly collect or solicit personal information from children under the age of 16. If we learn that we have inadvertently collected personal information from a child under the age of 16 (or the applicable legal age in your jurisdiction) without verifiable parental consent, we will take steps to delete that information from our records as quickly as possible. If you believe that a child under 16 has provided us with personal information, please contact us immediately at privacy@postsig.com.

Privacy Information for International Users

Please note that information covered by this Policy will be hosted and stored by us and our service providers in the United States of America and other global jurisdictions where data protection laws may differ from the laws in your local jurisdiction. Therefore, your information submitted to us will be stored, transferred to and processed in the United States, and we may transfer your personal information to recipients outside of the European Economic Area and/or the UK. Some of these recipients are located in countries which have been formally recognized as providing an adequate level of protection for personal information by the European Commission and Secretary of State in the UK, in which case, we rely on the relevant “adequacy decisions”.

Customers on an Enterprise plan may request information about the specific storage region applicable to their account by contacting privacy@postsig.com.

Where we transfer personal information from the EEA, UK, or Switzerland to countries not deemed to provide an adequate level of data protection, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum. A copy of the relevant transfer mechanism is available on request at privacy@postsig.com.

Legal Bases for Processing

The laws in some jurisdictions (e.g., EEA, UK and Switzerland) require companies to explain the legal grounds they rely on to process your information. Our legal bases for processing your information as described in this Policy are as follows and in the table below:

Where use of your information is Contractually Necessary to perform our obligations under a contract or commitment to you. For example, to provide the Services you’ve requested from us, or to comply with our applicable agreements.
Where use of your information furthers our Legitimate Interests or the Legitimate Interests of others. For example, to provide security for our Services, operate our business and our Services, make and receive payments, defend our legal rights, and prevent fraud.
Where we use your information to comply with applicable Legal Obligations. For example, keeping track of purchases for tax and auditing purposes.
Where you have provided Consented to our processing of your information for a particular purpose.

Category of Personal Information	Purpose of Processing	Legal Basis
Contact/account data	Account setup, authentication, customer management	Contractual Necessity
Billing/payment data	Processing subscriptions and payments	Contractual Necessity
Usage/device/analytics data	Improving the Services, security monitoring	Legitimate Interests
Marketing preferences	Sending offers/promotions	Legitimate Interests / Consent, where required
User generated content/service output	Provide the Services, facilitate third-party connections, and personalization	Contractual Necessity / Consent
Cookie data	Operating and ensuring the security of our website; understanding our customer base and improving your experience on our website; identifying errors and improvements to the website; serving and measuring the effectiveness of online advertising	Legitimate Interests, Consent
All categories	Legal compliance, fraud prevention	Legal Obligations (compliance with law) / Legitimate Interests

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), you also have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal information infringes upon applicable data protection laws. For EU/EEA residents, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement. Contact details for EU supervisory authorities are available on official EU websites. For UK residents, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK data protection supervisory authority (see https://ico.org.uk/make-a-complaint/).

Privacy Information for California Residents

If you are a California resident, the California Consumer Privacy Act (“CCPA”) requires us, in our capacity as a “business” under the CCPA, to provide you with the following additional information about:

the purpose for which we use each category of “personal information” (as defined in the CCPA) we collect; and
the categories of third parties to which we (a) disclose such personal information for a business purpose, (b) “share” personal information for “cross-context behavioral advertising,” and/or (c) “sell” such personal information.

Under the CCPA, “sharing” is defined as the targeting of advertising to a consumer based on that consumer’s personal information obtained from the consumer’s activity across distinct online services, and “selling” is defined as the disclosure of personal information to third parties in exchange for monetary or other valuable consideration. Our use of third-party analytics services and online advertising services may result in the sharing of online identifiers (e.g., cookie data, IP addresses, device identifiers, and usage information) in a way that may be considered a “sale” under the CCPA.

The chart below summarizes how we collect, use and share personal information by reference to the statutory categories specified in the CCPA. Categories in the chart refer to the categories described above in the general section of this Policy.

Statutory Category of Personal Information (PI)	Purpose of Collection	Categories of third parties to whom we "disclose" the PI for a business purpose	Categories of third parties to whom we "sell" or "share" PI
Identifiers (i.e., name and business contact information)	Operate the Service; research & development; marketing and promotional communications; legal compliance; fraud prevention & safety	Affiliates; Service Providers; governmental authorities and others	Online Analytics Partners
Commercial information (i.e., records of services purchased)	Operate the Service; research & development; marketing and promotional communications; legal compliance; fraud prevention & safety	Affiliates; Service Providers; governmental authorities and others	None
Financial Information (e.g., payment information)	Collected by our payment processors on our behalf	Collected by our payment processors on our behalf	None
Online Identifiers, Internet or Network Information, and General Geolocation Data	Operate the Service; research & development; marketing and promotional communications; legal compliance; fraud prevention & safety	Affiliates; Service Providers; governmental authorities and others	Online Analytics Partners
Inferences (i.e., information we derive about your preferences based on your activity on the Services and interactions with us)	Operate the Service; research & development; marketing and promotional communications; legal compliance; fraud prevention & safety	Affiliates; Service Providers; governmental authorities and others	Online Analytics Partners

Your California privacy rights. Please see the “Your Rights and Choices” section above for the rights you have under applicable law.

Your Choices Regarding “Sharing” and “Selling”

You have the right to opt out of our sale of your personal information for purposes of online analytics by clicking the “Customize” link on our website footer. Your opt out choice will apply only to the particular device and browser on which you are making the choice, so please repeat your opt out choice on other browsers and devices if you would like. Please note that we will also honor browser-based opt out signals (such as the global privacy control) in accordance with our legal obligations.

Other CCPA rights

Right to Limit. The CCPA allows you to limit the use or disclosure of your “sensitive personal information” (as defined in the CCPA) if your sensitive personal information is used for certain purposes. Please note that we do not use or disclose sensitive personal information other than for business purposes for which you cannot opt out under the CCPA.

For clarity, while we collect account credentials (usernames and passwords) , which are technically classified as "sensitive personal information" under the CCPA, we strictly use and disclose these identifiers to authenticate your account, maintain security, and prevent fraud. We do not use or disclose sensitive personal information for any purpose that would trigger a consumer's right to limit under California law.

Notice Concerning Do Not Track. Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. We are committed to providing you with meaningful choices about the information collected on our website for third-party purposes, which is why we describe a variety of opt-out mechanisms above. However, we do not currently recognize or respond to browser-initiated DNT signals. Please note that DNT is different from the browser-based privacy signal (the global privacy control) referred to above, which we do honor.

Shine the Light. The California “Shine the Light” law gives residents of California the right under certain circumstances to opt out of the disclosure of certain categories of “personal information” (as defined in the Shine the Light law) to third parties for their “direct marketing purposes” (as such term is defined in the Shine the Light law, or in the alternative, that we maintain a policy of providing a cost-free means for consumers to opt out of any such disclosure. We do not currently disclose personal information to third parties for their own direct marketing purposes. To opt out of “sales” as defined under the CCPA, see the “Your Choices Regarding “Sharing” and “Selling” section above.

Contact Us

If you have any questions or comments about this Policy, the information practices of the Services, or if you would like to exercise any applicable data rights, you can make a data privacy request at any time using this form or contact our Privacy Team and Data Privacy Officer at any time by emailing our Privacy Team and Data Privacy Officer at privacy@postsig.com, or by post to:

PostSig, Inc.

100 Pine St.

Suite 300

San Francisco, CA 94111
USA