Privacy policy

1. Operator and privacy contact

Erich Fritz operates Postino and is the controller for the processing carried out for Postino's own purposes described below. Please contact him directly about your personal data:

Erich Fritz, sole trader trading as Fritz Prosolution
Ruta 6 KM 22, Picada Boca, 6860 Trinidad, Itapúa, Paraguay
E-Mail: hello@postino.cards
Phone: +595 994 855 356

2. Data used to provide Postino

This policy covers the website and Postino functions provided through it, including access through the iOS app. Apple processes App Store data under its own privacy information. Distribution through Apple does not make Apple the controller of Postino accounts or cards.

Connections and security: Technical data includes IP addresses, times, requested resources, device and browser information and errors. We use it to deliver the service, resolve faults and prevent abuse, based on our legitimate interest in a reliable and secure service (Article 6(1)(f) GDPR).
Accounts: Email address, authentication and account data and optional profile information support login and the functions you request (Article 6(1)(b)). Required fields are shown in the relevant forms; the corresponding function cannot be provided without them.
Cards: We store text, images, design settings and sharing links so you can create, edit and share cards. We process your contractual data under Article 6(1)(b). For information about other people in your content, our legitimate interest is enabling the requested private communication, subject to their rights (Article 6(1)(f)). Only upload content you are entitled to use. Anyone receiving a sharing link may view the shared content and forward that link.
Contacts, family and birthdays: Depending on the functions used, we store names, birthdays, relationships, invitations and account connections. Profile details may be displayed to connected people in contact and calendar functions. Your contractual data is processed under Article 6(1)(b); information about others is subject to the balancing of legitimate interests in contact and reminder functions under Article 6(1)(f). Do not enter information you are not entitled to use.
Card views: View counts and the last viewing time may be stored to show whether a card has been viewed, based on our legitimate interest in this feature (Article 6(1)(f)). Infrastructure providers may separately process technical connection data.
Abuse reports: Reported content, reasons, optional comments and evidence such as IP address, user agent and time support investigation and protection of affected people (Article 6(1)(f)). Disclosure to authorities may be required by law (Article 6(1)(c)).

3. Messages, newsletters and reminders

We use email addresses and necessary message content for login confirmations, invitations, card notifications and other requested service messages (Article 6(1)(b)). General enquiries are handled based on our legitimate interest in responding (Article 6(1)(f)).

Newsletters require a confirmed subscription. We retain the email address and subscription/confirmation evidence. Sending relies on consent (Article 6(1)(a)), which you can withdraw using the unsubscribe link or by email. Evidence of consent or withdrawal may remain necessary for legal obligations or defending claims.

If you enable offered push reminders, we store your browser's or device's push endpoint and associated keys. Delivery uses the browser/device provider's push service and relies on your consent. You can revoke permission in browser/device settings.

4. Payments and contracts

For purchases through Paddle, Paddle handles sales and payment as a separate provider. We receive customer, transaction and subscription details needed to activate and administer your entitlement. Our grounds are contract performance and applicable legal obligations (Article 6(1)(b) and (c)). Information entered in Paddle's checkout is also covered by Paddle's policy. Cancellation and withdrawal requests are used to identify the contract, process the request and provide confirmation.

5. Providers and processing outside the EU

We use Supabase for authentication, databases and image storage; Vercel for the web application; Cloudflare for infrastructure; and Resend for email delivery. According to their task, providers receive connection or account data, stored content or necessary message data. Provider information: Supabase, Vercel, Cloudflare and Resend.

The operator works in Paraguay and can access personal data there. Providers may also process data in countries including the US and UK. EU hosting does not automatically exclude access from other countries. The published data processing agreements of Supabase and Vercel provide for European Commission Standard Contractual Clauses for relevant international transfers. Supabase also identifies Singapore as a processing country. Cloudflare and Resend describe the EU-US Data Privacy Framework and additional transfer mechanisms in their agreements. Those agreements explain the applicable conditions and safeguards; they are not an adequacy finding for Paraguay. You can request information and copies of the safeguards applicable to a particular data flow at hello@postino.cards.

6. Storage technologies, consent and analytics

Necessary storage supports login, security and settings. Non-essential device access requires appropriate consent (section 25 TDDDG); associated personal data processing relies on Article 6(1)(a) GDPR. You can change your choice through cookie settings. Necessary personal data processing relies on Article 6(1)(b), (c) or (f), depending on its purpose.

We manage your cookie choices ourselves, without an external consent provider. The necessary postino_consent_v1 cookie stores your separate advertising and analytics choices, the choice version and decision and expiry timestamps for up to 180 days. A local storage signal synchronizes changes between open tabs. This storage is used only to manage your choices. You can change or withdraw consent at any time through “Cookie settings” in the footer.

Where enabled on the website, Meta Pixel runs only after consent to measure advertising performance and build audiences. Meta may receive device and connection data and page/registration events and associate them with a Meta account. See Meta's policy.

Where configured and separately permitted by you, PostHog uses its EU region to measure selected usage events. The integration does not provide session recording. See PostHog's policy. These Meta and PostHog web integrations are technically excluded in the native Postino app. Consent to one service does not grant consent to the other.

7. Business card campaigns

For companies sending cards to their customers, the company named in the message is responsible for selecting recipients and establishing lawful grounds for sending. Postino processes email addresses, optional names, offer codes and viewing information on its behalf. Each campaign offers an unsubscribe link. We maintain a cross-campaign suppression list to respect objections (Article 6(1)(c) and (f)).

8. Retention and deletion

We store accounts, cards and related content to provide the functions you use. Use the available deletion functions or contact Erich Fritz. Account deletion does not automatically cancel subscriptions. Limited data may remain where necessary for statutory retention, abuse investigations or specific legal claims. Necessity depends on the purpose, legal deadlines and progress of the case. Backups and technical logs may follow different infrastructure retention cycles. Deletion from Postino cannot recall copies already made by recipients.

9. Your rights

Subject to applicable conditions, you may request access, correction, erasure, restriction and portability (Articles 15–20 GDPR). You may withdraw consent prospectively without affecting earlier lawful processing.

You may object to processing based on legitimate interests for reasons relating to your particular situation. You may object to direct marketing at any time without giving a reason (Article 21 GDPR).

Contact hello@postino.cards. If there are reasonable doubts about identity, we may request necessary verification information. You may complain to a supervisory authority, particularly in the EU member state of your habitual residence, workplace or the alleged infringement (Article 77 GDPR).

Last updated: 2 November 2026

Privacy policy

1. Operator and privacy contact

Erich Fritz operates Postino and is the controller for the processing carried out for Postino's own purposes described below. Please contact him directly about your personal data:

Erich Fritz, sole trader trading as Fritz Prosolution
Ruta 6 KM 22, Picada Boca, 6860 Trinidad, Itapúa, Paraguay
E-Mail: hello@postino.cards
Phone: +595 994 855 356

2. Data used to provide Postino

Connections and security: Technical data includes IP addresses, times, requested resources, device and browser information and errors. We use it to deliver the service, resolve faults and prevent abuse, based on our legitimate interest in a reliable and secure service (Article 6(1)(f) GDPR).
Accounts: Email address, authentication and account data and optional profile information support login and the functions you request (Article 6(1)(b)). Required fields are shown in the relevant forms; the corresponding function cannot be provided without them.
Cards: We store text, images, design settings and sharing links so you can create, edit and share cards. We process your contractual data under Article 6(1)(b). For information about other people in your content, our legitimate interest is enabling the requested private communication, subject to their rights (Article 6(1)(f)). Only upload content you are entitled to use. Anyone receiving a sharing link may view the shared content and forward that link.
Contacts, family and birthdays: Depending on the functions used, we store names, birthdays, relationships, invitations and account connections. Profile details may be displayed to connected people in contact and calendar functions. Your contractual data is processed under Article 6(1)(b); information about others is subject to the balancing of legitimate interests in contact and reminder functions under Article 6(1)(f). Do not enter information you are not entitled to use.
Card views: View counts and the last viewing time may be stored to show whether a card has been viewed, based on our legitimate interest in this feature (Article 6(1)(f)). Infrastructure providers may separately process technical connection data.
Abuse reports: Reported content, reasons, optional comments and evidence such as IP address, user agent and time support investigation and protection of affected people (Article 6(1)(f)). Disclosure to authorities may be required by law (Article 6(1)(c)).