LoadingLoading
Effective date: May 14, 2026
This Privacy Policy explains how Arqia Inc. ("PostAuth", "we", "us", or "our") collects, uses, shares, and protects personal information when you use PostAuth, including our website, applications, integrations, APIs, demos, trials, and related services (collectively, the "Service").
This Policy applies to information we process for our own business purposes, such as website visitors, account users, prospects, and customers. When a customer uses PostAuth to sync, store, classify, message, or otherwise process data about its own users or contacts ("Customer Data"), we generally process that Customer Data as a processor or service provider on behalf of that customer. In that case, the customer's own privacy policy and instructions govern how the Customer Data is collected and used.
If you are an end user of one of our customers and have questions about your data, please contact that customer first.
The information we collect depends on how you interact with PostAuth and which features are used.
We may collect your name, email address, organization, role, team size, product stage, authentication provider, demo requests, onboarding responses, feedback, support requests, and any information you submit through forms, onboarding, demos, or direct communications.
If you or your organization uses the Service, we may process Customer Data that you provide or authorize us to receive from Connected Services. This may include:
If email or messaging features are used, we may process mailbox identifiers, connected account metadata, OAuth grants or access tokens, message content, drafts, recipients, subject lines, headers, attachments, delivery status, bounce or complaint events, replies, unsubscribe status, opens, clicks, and other message interaction metadata.
We may collect information about how you access and use the Service, including IP address or hashed IP address, user agent, browser, device, operating system, pages viewed, buttons clicked, referrers, UTM parameters, ad identifiers such as gclid or fbclid, approximate location, feature usage, error logs, session activity, and similar analytics events.
We use cookies, local storage, session storage, pixels, and similar technologies to support attribution, analytics, user preferences, security, and product improvement. Our website and app may use services such as PostHog, Google Analytics, Google Tag Manager, and Crisp.
If paid features are offered, we or our payment processor or merchant of record may collect billing contact information, plan details, tax information, transaction history, and payment status. We do not intend to store full payment card numbers on our own systems.
We may receive information from service providers, business partners, analytics providers, advertising platforms, payment providers, support tools, and Connected Services you authorize.
We use information to:
If you are located in the EEA, United Kingdom, Switzerland, or another region that requires a legal basis for processing, we may process personal information based on:
Where we process Customer Data as a processor or service provider, our customer's legal basis and instructions usually control that processing.
We do not sell personal information in the traditional sense of exchanging it for money. We may share information as described below:
We use cookies and similar technologies to operate the Service, remember preferences, measure traffic, understand campaign performance, attribute signups, detect abuse, improve the product, and support chat or help experiences.
You can control cookies through your browser settings. Blocking cookies or storage may affect some features. Marketing emails may include pixels or links that help us understand whether messages were opened or clicked.
We may use email addresses collected through account registration, onboarding, forms, demos, support, newsletters, or other interactions to send product news, educational content, offers, and other marketing communications.
You can opt out of marketing emails at any time by using the unsubscribe link in the email or contacting team@postauth.app. We may still send transactional, service, security, legal, unsubscribe, or account-related messages.
For Customer Data that customers submit to or sync with PostAuth, the customer is generally the controller or business and PostAuth is generally the processor or service provider. We process Customer Data to provide the Service, follow customer instructions, support and secure the Service, comply with law, and as described in the applicable agreement.
If a data processing addendum ("DPA") is required, it must be separately executed or incorporated by an order form or other written agreement before it applies.
We retain personal information for as long as needed to provide the Service, maintain your account, run demos, trials, onboarding, product research, comply with legal obligations, resolve disputes, enforce agreements, preserve security, and support legitimate business needs.
Examples:
When we delete information, it may remain in backups or logs for a limited time before being overwritten or deleted under normal retention cycles.
We use reasonable administrative, technical, and organizational measures designed to protect information, including access controls, encryption in transit, encryption at rest where appropriate, and operational safeguards. Sensitive credentials such as OAuth grants should be encrypted or protected in our systems.
No method of transmission or storage is completely secure. We cannot guarantee absolute security.
We and our service providers may process information in the United States, South Korea, and other countries where we or our providers operate. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers.
Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also have rights to withdraw consent, opt out of certain marketing, or appeal a denied request.
To exercise rights relating to information PostAuth controls, contact team@postauth.app. We may need to verify your identity before fulfilling a request.
If your request concerns Customer Data processed on behalf of a PostAuth customer, we may direct you to that customer or handle the request according to the customer's instructions.
The Service is intended for business use and is not directed to children. We do not knowingly collect personal information from children under 13, or under a higher age where applicable law requires parental consent. If you believe a child has provided personal information to us, contact team@postauth.app.
The Service may link to or integrate with third-party websites, products, APIs, and services. Their privacy practices are governed by their own policies, not this Privacy Policy. You should review those policies before connecting or using third-party services.
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by posting the updated Policy, changing the effective date, emailing you, or using another reasonable method. Your continued use of the Service after the updated Policy takes effect means you accept the updated Policy.
For privacy questions or requests, contact us at team@postauth.app.