Privacy Policy

PostoBox is operated by sudo127 (“we”, “us”). For anything in this policy, contact us at support@postobox.app.

PostoBox has two kinds of users. Organisers create an account and an organisation, then run events, polls and questionnaires. Attendees take part in those events from their phones, usually without an account.

For your own account we decide how the data is used. For the content attendees submit to an event, the organiser running the event decides what is collected and what happens to it, and we process it on their behalf. If you took part in an event and want your submissions changed or removed, contact the organiser first; we will help them, or you directly where we can identify your data.

Account details. Your username, email address and password. The password is stored only as a salted bcrypt hash; we never see or store it in plain text. We also record when you last signed in and whether your email address is verified.

Organisation content. Organisation name, subdomain, logo and brand colour, and the events, polls and questionnaires you create, plus your team members and the email addresses you send invitations to.

Attendee submissions. Questions, upvotes, poll votes and questionnaire answers. If an attendee is signed in, the submission is linked to their account. If not, it is linked to a random device ID that the attendee’s browser keeps in local storage, so the same phone can’t vote twice. Events can allow anonymous questions; we do not ask attendees for their name or email.

Network data. When an attendee submits something we store a one-way SHA-256 hash of their IP address to help investigate abuse; we don’t store the address itself for these submissions. Audit logs and API usage logs record the IP address and, for the API, the user agent of the request.

External moderators. When an organiser shares a moderator link with someone who has no account, we store the name and email address the organiser enters, for the audit trail.

• To run the service: show questions, votes and results live on phones and on the presenter screen.
• To send account email: verification codes, password resets and team invitations.
• To keep the service secure: block bot signups, enforce plan limits and rate limits, and investigate abuse.
• To answer you when you contact support.

We do not sell personal data, show advertising, or use your content or attendees’ submissions to build advertising profiles.

Event pages are public to anyone with the link, and an organiser may show questions, poll results and questionnaire answers on a big screen or livestream. Assume anything you submit to an event can be seen by the audience. Organisers can moderate questions before they appear and keep individual questionnaire answers off the screen.

We only use what the service needs to work:

• a sign-in session cookie, which keeps you logged in for up to 30 days;
• a cookie remembering which of your organisations you are working in;
• the attendee device ID in local storage, described above.

We don’t use advertising or third-party analytics cookies.

We use a small number of providers that process data on our behalf:

• Cloudflare: DNS, network protection for organisation subdomains, and Turnstile bot checks on the signup and password-reset forms.
• Resend: delivering account email such as verification codes, password resets and invitations.
• Our hosting provider: the servers and database the application runs on.

These providers may process data outside your country. We share personal data with others only when the law requires it.

We keep your account and organisation content while your account is active. When you delete an event, question, poll or questionnaire it disappears from the service straight away, but we may keep it in our database and backups for a limited time for recovery and abuse investigation. To have your account and its data permanently erased, email support@postobox.app.

You can update your organisation and event details at any time, and export questions, poll results and questionnaire results as CSV from the dashboard. You can also ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is wrong;
• delete your account and data.

Email support@postobox.app from the address on your account and we will respond within 30 days.

All traffic to PostoBox is encrypted with HTTPS. Passwords are hashed with bcrypt, API keys are stored only as hashes, and access to organisation data is limited by role. No system is perfectly secure; if you find a vulnerability, please report it to support@postobox.app.

Organiser accounts are for adults. When an organiser runs an event for younger participants, such as in a classroom, the organiser is responsible for getting any consent required where they are.

If we change this policy we will update the date at the top of this page, and for significant changes we will tell account holders by email before they take effect.