Privacy Policy

1. Information We Collect

We collect information in three main categories:

• 1.1. Information You Provide
  • 1.1.1. User Content: The media (photos and videos) you create using the Postpoint native camera.
  • 1.1.2. Communications: Information you provide when contacting us for support or other inquiries.
• 1.2. Information We Collect Automatically (The Data Receipt)

  When you create and post content, our system automatically generates a non-modifiable Data Receipt for verification. This receipt includes:

  • 1.2.1. High-Precision Geolocation Data: The exact latitude, longitude, altitude, and positional accuracy (up to centimeter-level precision) at the moment of capture.
  • 1.2.2. Time and Device Metadata: The precise timestamp from the device's clock and server clock synchronization data.
  • 1.2.3. Camera, Sensor, and Hardware Identifier Data: Information regarding the device's camera state, lens characteristics, ambient light readings, device orientation (accelerometer/gyroscope data), and a persistent, unique device or installation identifier at the moment of capture.
  • 1.2.4. Network/IP Information: The IP address and network data used to upload the content, used to assess location consistency.
  • 1.2.5. Ephemeral Atlas Metadata: Decay timers and visibility logs associated with media published to the internal Atlas map.
  • 1.2.6. Usage Data: Information about how you use the Service, such as features you interact with, API call metrics, and operational activity logs.
• 1.3. Information from Third Parties
  • 1.3.1. Infrastructure & Payment Processors: We receive transaction confirmation statuses, subscription events, and credit balance update signals from our payment processor (Stripe). Postpoint does not collect, store, or process raw credit card numbers or financial credentials. All billing details are collected and processed directly by Stripe.
  • 1.3.2. Analytics & Systems Providers: We may receive system telemetry from our cloud infrastructure and analytics providers to ensure network stability.
• 1.4. Biometric Data Waiver
  • 1.4.1. No Biometric Processing: Postpoint does not collect, extract, scan, analyze, sell, or process biometric identifiers, facial geometry, voiceprints, or facial recognition templates from any photos or videos submitted through the Service. Any human faces, voices, or physical features appearing within User Content are stored and transmitted strictly as passive, unanalyzed raw visual pixels and audio waveforms alongside associated sensor metadata. Postpoint does not utilize software or algorithms to identify individuals captured in media, and such media shall not be construed as biometric data under applicable law (including BIPA).

2. How We Use Your Information

We use the collected information for the following primary purposes:

• 2.1. Service Verification and Integrity (Core Function)
  • 2.1.1. To validate the Data Receipt and ensure all content complies with the Postpoint Protocol.
  • 2.1.2. To detect and prevent manipulation, virtual camera injection, GPS spoofing, or system fraud.
  • 2.1.3. To power the real-time insights and verification status displayed on captured media and Data Receipts.
• 2.2. Providing and Improving the Service
  • 2.2.1. To enable you to display ephemeral verification captures on the native, in-app public map (the Atlas) for proof-of-concept demonstration, or route Data Receipts directly into enterprise CRMs, ERPs, or Field Service Management (FSM) software via Postpoint API integrations.
  • 2.2.2. To track API credit balances, monitor threshold triggers, and dispatch automated recharge requests to Stripe.
  • 2.2.3. To analyze trends, network performance, and usage patterns to improve the Service's functionality and infrastructure reliability.
• 2.3. Communication and Security
  • 2.3.1. To deploy system-wide service updates, network status changes, and critical security alerts directly via in-app notices or device-level push notifications, and to respond to support messages initiated directly by the user.
  • 2.3.2. To enforce our Terms of Service and protect the security of our users and the platform.
• 2.4. Research and Analytics
  • 2.4.1. We use anonymized, aggregated, and de-identified Data Receipt information for internal research, intelligence reporting, and to create generalized insights about global events and trends. This aggregated data is processed strictly at scale and is completely dissociated from any individual device or installation identifier.

3. How We Share Your Information

Postpoint does not require user registration or account creation, and we do not sell your data. While we collect device identifiers and telemetry strictly for network integrity, we only distribute platform data in the following explicit operational circumstances:

• 3.1. In-App Atlas Map: Unedited media assets and their associated verification Data Receipts published to the Atlas are viewable internally by other Postpoint app users until the designated decay timer expires. Atlas content is self-contained within Postpoint and is not indexable by web crawlers or shared off-platform.
• 3.2. Enterprise API Pipes: Data Receipts generated for enterprise accounts are routed strictly to the designated customer's CRM, ERP, or FSM endpoints.
• 3.3. Service Providers: We share necessary system telemetry with third-party vendors, consultants, and service providers who perform core technical operations on our behalf (e.g., Stripe for payment processing, encrypted cloud hosting, system security).
• 3.4. For Legal Reasons: We may disclose platform data if required to do so by law or in good faith belief that such action is necessary to comply with legal obligations, protect the rights and safety of Postpoint or our users, or investigate fraud.
• 3.5. Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company, the platform's historical ledger and data repositories may be transferred.

4. Data Retention and Deletion

• 4.1. Ephemeral Atlas Content: Photos/videos published to the public Atlas map expire and are removed from the active map view according to their designated Decay Timer.
• 4.2. Device Disassociation and Content Removal: Requests regarding device-linked metadata or localized media removal are processed exclusively via verification of the unique device or installation identifier associated with the original upload. Anonymized ledger data severed from the device identifier will be retained for platform integrity and audit purposes.
• 4.3. Immutable Verification Ledger: While visual media assets may decay or be removed, underlying cryptographic Data Receipts (hashes, timestamps, location metadata, verification states, and tamper-evident signatures) are retained indefinitely for protocol auditability, historical integrity, and anti-fraud verification.

5. Your Data Protection Rights

Depending on your jurisdiction (e.g., GDPR or CCPA), your rights regarding the unique device or installation identifier data collected automatically by the platform include:

• 5.1. Access: Request copies of your processed device identifier logs.
• 5.2. Rectification: Request correction of inaccurate metadata records linked to your device.
• 5.3. Erasure: Request deletion of your device identifier logs, subject to our Data Receipt retention policy outlined in Section 4.
• 5.4. Object to Processing: Object to our processing of device telemetry under certain conditions.
• To exercise these rights, please contact us at the email address provided in Section 7.

6. Children's Privacy

• 6.1. Age Restrictions and Thresholds: The Service is not intended for use by anyone under the age of 13 years old in accordance with our Terms of Service. We do not knowingly collect personal information from children under this age. In addition to our absolute 13+ minimum floor, users must adhere to the marketplace-specific age ratings required to download the application:
  • Google Play Store: Rated 13+ (Teens).
  • Apple App Store: Rated 17+ (Adults Only), mandated due to the real-time, unmoderated distribution of media captures published to the public Atlas verification map feed.
• 6.2. Data Removal and Compliance: We do not knowingly collect personal data or precise location data from children under age 13. If we become aware that a child under the respective age threshold has accessed the service or submitted content/location metadata, we will execute immediate administrative procedures to completely purge and overwrite the associated installation token references, media files, IP logs, and metadata references from our active systems to ensure complete compliance (including COPPA).

7. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• 7.1. Email: hello@postpoint.ai
• 7.2. Address: 1209 Mountain RD PL NE, STE N, Albuquerque, NM 87110