Legal centre
Everything that applies when you use PostaraMail: our agreements, how we handle data, and the rules for each region. Current version 2026-10-05 · what changed.
Agreements
Terms of Service
PostaraMail is business software. You may only email people who agreed to hear from you, you stay responsible for your content and contacts, and we provide the service as it is, with limited liability.
Privacy Policy
We collect what we need to run your account, we process your contacts only on your instructions, we do not sell data, and you can access, export or delete your data. Your contacts' data is covered by our Data Processing Addendum.
Acceptable Use Policy
Use PostaraMail honestly and lawfully. No spam, no illegal or harmful content, no deception, no abuse of the platform.
Anti-Spam Policy
Permission only. Every contact must have agreed, every email has a one-click unsubscribe and your address, and we automatically suppress bounces and complaints and suspend senders who attract complaints.
Data Processing Addendum
You (the customer) decide why and how your contacts' data is used; PostaraMail processes it only on your instructions, protects it, uses listed sub-processors, helps with data subject requests, tells you about breaches, and deletes it when you leave.
AI Use Terms
AI drafts are suggestions you must review. Your text goes to the AI provider you choose, never your contact lists. DeepSeek (processed in China) is optional and off by default in the EU, UK and Switzerland.
Refund Policy
Your first payment can be refunded if you ask within 14 days and have used fewer than 100 emails, 5 templates and 3 AI creations after paying. Renewals are never refunded.
Cookie Policy
We use one session cookie to keep you logged in. No advertising, tracking or analytics cookies.
Copyright and Intellectual Property Policy
Tell us if your copyright or trademark is misused through PostaraMail and we will act. Customers keep their own content.
Regional terms
Rules differ by country. The regional terms for your country apply on top of the agreements above, and you also agree to the ones for the places you email.
EU, EEA and Switzerland
Marketing email needs a clear opt-in in most EU countries. You are the controller of your contacts' data and we are your processor under the DPA.
United Kingdom
UK GDPR and PECR need a clear opt-in for marketing email to individuals (including most sole traders). PECR fines now match UK GDPR levels.
United States
CAN-SPAM allows email without prior opt-in if you follow its rules: honest headers, your address, a working unsubscribe honoured within 10 business days. Several states add privacy and subscription rules.
Canada
CASL is an opt-in law with large fines: you need express (or narrowly defined implied) consent, clear identification, and an unsubscribe honoured within 10 business days.
Australia and New Zealand
Both countries require consent, accurate sender identification and a working unsubscribe. Australia requires unsubscribes to be actioned within 5 working days.
UAE, Saudi Arabia, Qatar, Bahrain, Oman and Kuwait
Across the Gulf, marketing email needs prior opt-in consent and an easy opt-out. Qatar requires the message to say it is direct marketing. Data protection laws are in force or developing in every state.
India
India's DPDP Act requires clear, specific, informed consent with an itemised notice. Its main duties apply from 13 May 2027; follow them now.
Brazil and Latin America
Brazil's LGPD and similar laws need a lawful basis (usually consent) for marketing and give people the right to object. Keep proof of consent.
Singapore, Japan, Korea and other Asia-Pacific countries
These countries generally require prior consent for marketing email, with extra labelling or time rules in some (for example Korea). We apply the strict opt-in rule.
all other countries
Where your country has no specific rules here, you must follow the stricter of your local law and these Terms.
Trust and your rights
- Trust and security: security measures and the list of sub-processors.
- Privacy request: if you received an email sent through PostaraMail, unsubscribe from all senders, find out who sent it, or ask for your data to be erased.
- Delete your account and your data.
These documents give general information about the rules for sending email and handling personal data. They are not legal advice.