Privacy policy

Our approach in one line: we use your letter once to print and post it, then delete it.

What we collect

Your letter: the text, and your signature if you add one.
Your details: name, email, and postal address (printed on the letter so the recipient can reply).
Recipient details: for letters to politicians, their public office address. For letters to anyone else, the name and address you enter.
Payment: handled entirely by Stripe. We never see or store your card details.

How we protect it

Everything travels over an encrypted connection (HTTPS).
Your letter, signature and street addresses are encrypted in our database (AES-256).
24 hours after your letter is posted, we permanently delete the letter content, signature, and your and your recipient's street addresses. No archive or backup copy is kept. Unpaid checkouts are cleared after 48 hours.
After deletion we keep only what we need for campaign totals and receipts: your first name and suburb, and a one-way scrambled form of your email that can't be turned back into your address.

Who we share it with

Only the services needed to deliver your letter: our print-and-post partner (PostGrid), which prints the letter and lodges it with Australia Post, and Stripe for payment. PostGrid receives the letter and both addresses (yours is the return address, so undeliverable mail comes back to you). We delete the address records we create with PostGrid a week after posting; PostGrid keeps its own copy of printed letters under its privacy policy. We never sell your details or add you to a mailing list without asking.

If you tick the box to hear about campaign results, we keep your email (and name and postcode if you give them) until you unsubscribe. Every email has an unsubscribe link.

Letters you download

If you choose to download your letter and post it yourself, the PDF is created on the spot and sent to your browser. We don't keep a copy. We only record how many letters were downloaded, and to which politicians, for campaign totals.

Your rights