| July 18, 2026 01:17 UTC | July 19, 2026 21:25 UTC | ||||
|---|---|---|---|---|---|
| t | t | 1 | Skip to navigation | ||
| 2 | Skip to sidebar | ||||
| 3 | Skip to main content | ||||
| 4 | We care about your privacy. | ||||
| 5 | You may review our privacy policy to help you understand what information we col | ||||
| > | lect, why we collect it, and how we use and share your personal information. You | ||||
| > | may also update your privacy settings. | ||||
| 6 | Review the Privacy Policy → | ||||
| 7 | Update my privacy selections → | ||||
| 8 | Privacy SettingsOur PoliciesTracking Technologies | ||||
| 9 | Privacy Policy | ||||
| 10 | What this Privacy Policy Covers | ||||
| 11 | Information We Collect | ||||
| 12 | How We Use Information | ||||
| 13 | How We Share Information | ||||
| 14 | Workspace Content | ||||
| 15 | Other Important Information | ||||
| 16 | How We Store and Secure Information We Collect | ||||
| 17 | How to Manage Your Information | ||||
| 18 | How Information Is Transferred Internationally | ||||
| 19 | Other Important Privacy Information | ||||
| 20 | Academy Privacy Policy | ||||
| 21 | What is Postman Academy | ||||
| 22 | What this Privacy Policy Covers | ||||
| 23 | Information We Collect | ||||
| 24 | How We Use Information | ||||
| 25 | How We Share Information | ||||
| 26 | How to Manage Your Information | ||||
| 27 | How We Store and Secure Information We Collect | ||||
| 28 | Our Policy Towards Children | ||||
| 29 | How Information is Transferred Internationally | ||||
| 30 | Other Important Privacy Information | ||||
| 31 | Contacting Us | ||||
| 32 | Partner Academy Privacy Policy | ||||
| 33 | What is Postman Partner Academy | ||||
| 34 | What this Privacy Policy Covers | ||||
| 35 | Information We Collect | ||||
| 36 | How We Use Information | ||||
| 37 | How We Share Information | ||||
| 38 | How to Manage Your Information | ||||
| 39 | How We Store and Secure Information We Collect | ||||
| 40 | Our Policy Towards Children | ||||
| 41 | How Information is Transferred Internationally | ||||
| 42 | Other Important Privacy Information | ||||
| 43 | Contacting Us | ||||
| 44 | Games Privacy Policy | ||||
| 45 | What this Privacy Policy covers | ||||
| 46 | What information we collect about you | ||||
| 47 | How we use information we collect | ||||
| 48 | How we disclose information we collect | ||||
| 49 | Additional Provisions | ||||
| 50 | Contacting us | ||||
| 51 | Privacy Policy | ||||
| 52 | Last Updated: April 2026 | ||||
| 53 | What this Privacy Policy Covers | ||||
| 54 | This Privacy Policy (“Policy”) covers the information relating to you that we ma | ||||
| > | y collect, use, share, and process when you use the Postman software and service | ||||
| > | s, contact us, or otherwise interact with us, unless a different policy is displ | ||||
| > | ayed. For the purposes of this Policy, and unless otherwise noted, “Postman”, “w | ||||
| > | e” and “us” refer to Postman, Inc. (our U.S. entity) and any of our affiliates a | ||||
| > | nd subsidiaries, and the term "Websites" shall refer collectively to www.postman | ||||
| > | .com, astropods.com, astropods.ai, docs.astropods.ai, blog.astropods.ai and the | ||||
| > | other websites that Postman operates and that link to this Policy. We refer to t | ||||
| > | he Postman software and services including any Beta Previews, together with our | ||||
| > | Websites, as "Services." By using our Services or otherwise interacting with our | ||||
| > | business, you acknowledge that you understand and agree to the terms of this Po | ||||
| > | licy. If you do not agree with this Policy, do not use our Services. | ||||
| 55 | Where we provide the Services under contract with an organization (for example y | ||||
| > | our employer), that organization controls the information processed and acts as | ||||
| > | the data controller. In those circumstances, we operate as the data processor an | ||||
| > | d the contract may require us to process the information pursuant to the organiz | ||||
| > | ation's instructions instead of pursuant to this Policy. | ||||
| 56 | Information We Collect | ||||
| 57 | Information You Provide to Us | ||||
| 58 | Account and Profile Information: We collect information about you when you creat | ||||
| > | e a Postman account, create or modify your profile or your team profile settings | ||||
| > | , set preferences, or sign-up for or make purchases through the Services. This i | ||||
| > | nformation may include a public username, password, contact information, billing | ||||
| > | information, a profile photo, and your account preferences and settings. | ||||
| 59 | Services Information: We collect content from your use of the Services, which ma | ||||
| > | y include any information about you that you choose to upload to, store in, or o | ||||
| > | therwise provide to our Services. We also collect information you provide direct | ||||
| > | ly to us, such as feedback and your responses to interactive features (such as s | ||||
| > | urveys or contests). | ||||
| 60 | Support Information: We collect information you provide through a customer suppo | ||||
| > | rt request, such as your contact information, details and screenshots, or other | ||||
| > | information that you provide. | ||||
| 61 | Payment Information: We collect payment and billing information when you registe | ||||
| > | r for certain paid Services. We use external secure payment processing services | ||||
| > | to collect and process payment information, such as payment card details. | ||||
| 62 | Information We Collect Automatically When You Use the Services | ||||
| 63 | Services Use Information: We collect information when you interact with our Serv | ||||
| > | ices, including the features you use, the links you click on, and your interacti | ||||
| > | ons with others on the Services. We may also collect information about the teams | ||||
| > | and people you work with and how you work with them, including, for example, wh | ||||
| > | o you collaborate with most frequently. | ||||
| 64 | Device and Connection Information: We collect information about the device you u | ||||
| > | se to access our Services, including the type of device, connection type, device | ||||
| > | settings, operating system, browser type, IP address, URLs of referring/exit pa | ||||
| > | ges, device identifiers, and crash data. | ||||
| 65 | Cookies and Other Tracking Technologies: Postman and our third-party partners co | ||||
| > | llect information through cookies and other tracking technologies. You may updat | ||||
| > | e your Privacy Settings, including opting out of cookies and other tracking tech | ||||
| > | nologies. See our Tracking Technologies Notice for more information about our us | ||||
| > | e of cookies and other tracking technologies. | ||||
| 66 | Information We Receive from Other Sources | ||||
| 67 | Other Users: Other users of our Services may provide information about you when | ||||
| > | they submit content through the Services, such as in a support ticket or if they | ||||
| > | provide us with your email address to invite you to the Services. Similarly, an | ||||
| > | administrator may provide your contact information when they designate you as a | ||||
| > | n additional administrator or the billing admin on your company's account. | ||||
| 68 | Other Services You Link: We receive information about you when you or your admin | ||||
| > | istrator integrate or link a third-party service with our Services. For example, | ||||
| > | if you create an account or log into the Services using your Google credentials | ||||
| > | , we receive your name and email address as permitted by your Google profile set | ||||
| > | tings to authenticate you. The information we receive depends on the settings, p | ||||
| > | ermissions, and privacy policy controlled by that third-party service. Postman's | ||||
| > | use and transfer of information received from Google APIs to any other app will | ||||
| > | adhere to the Google API Services User Data Policy, including the Limited Use r | ||||
| > | equirements. | ||||
| 69 | Postman Partners: We work with reseller partners who provide purchasing and rela | ||||
| > | ted services who provide us with information such as billing information, admin | ||||
| > | contact information, company name, country location, and what Services have prev | ||||
| > | iously been purchased or may be of interest to you. | ||||
| 70 | Other Partners: We receive information about users' activities on and off the Se | ||||
| > | rvices from third-party partners, such as advertising and market research partne | ||||
| > | rs who provide us with information about users' interests in and engagement with | ||||
| > | our Services and online advertisements. | ||||
| 71 | Information We Do Not Collect | ||||
| 72 | Sensitive Personal Information: We do not intentionally collect "Sensitive Perso | ||||
| > | nal Information" (also known as “special category data”), such as personal data | ||||
| > | revealing racial or ethnic origin, political opinions, religious or philosophica | ||||
| > | l beliefs, trade union membership, genetic data, biometric data, health and medi | ||||
| > | cal data, or information concerning sex life or sexual orientation. If you choos | ||||
| > | e to store any Sensitive Personal Information on our servers, you are responsibl | ||||
| > | e for complying with all applicable legal obligations regarding that data. | ||||
| 73 | Children: If you are in the United States and under the age of 13, or outside of | ||||
| > | the United States and under the age of 18, you may not have a Postman account. | ||||
| > | Postman does not knowingly collect information from or direct any of our content | ||||
| > | specifically to children under 13. If we learn or have reason to suspect that y | ||||
| > | ou are a user who is under the permitted age, we will close your account. | ||||
| 74 | How We Use Information | ||||
| 75 | How we use the information we collect depends in part on which Services you use, | ||||
| > | how you use them, any preferences you have communicated to us, your relationshi | ||||
| > | p with us, and applicable law. We process personal data for the purpose it was o | ||||
| > | riginally collected unless consent to materially different processing purposes h | ||||
| > | as been obtained or, depending on relevant jurisdiction, there is no applicable | ||||
| > | opt-out of such processing. Below are the purposes for which we process the info | ||||
| > | rmation, grouped by the legal basis for that processing under relevant law (wher | ||||
| > | e applicable). | ||||
| 76 | We process information for our legitimate business interests: | ||||
| 77 | To provide the Services to you. | ||||
| 78 | To provide customer support. We use your information to resolve technical issues | ||||
| > | you encounter, respond to your requests, analyze crash information, and repair | ||||
| > | and improve the Services. | ||||
| 79 | To conduct research and development, and analyze and improve the Services. We us | ||||
| > | e information and collective learnings (including feedback and surveys) about ho | ||||
| > | w people use our Services to troubleshoot; identify trends, usage, activity patt | ||||
| > | erns and areas for integration; improve our Services; and develop new products, | ||||
| > | features and technologies that benefit our users and the public. We may anonymiz | ||||
| > | e data for these purposes, and may also test and analyze certain new features wi | ||||
| > | th some users before rolling the feature out to all users. We may also use infor | ||||
| > | mation you provide to develop artificial intelligence (AI) tools and systems as | ||||
| > | set forth in our Postman AI Terms. | ||||
| 80 | To communicate with you about the Services. We use your contact information to s | ||||
| > | end transactional communications, including to confirm your purchases, remind yo | ||||
| > | u of subscription expirations, explain our Services, respond to you, provide cus | ||||
| > | tomer support, and send you technical notices, updates, security alerts, and adm | ||||
| > | inistrative messages. | ||||
| 81 | To market, promote, and drive engagement with the Services. We use your contact | ||||
| > | information and information about how you use the Services to send promotional c | ||||
| > | ommunications that may be of specific interest to you. These communications, whi | ||||
| > | ch aid to drive engagement and maximize the Services we offer to you, include ti | ||||
| > | mely information about new features, survey requests, newsletters, and events th | ||||
| > | at we think may be of interest to you. We also may engage in these activities on | ||||
| > | the basis of your consent. | ||||
| 82 | To increase safety and security. We use information about you to prevent, detect | ||||
| > | , and respond to potential or actual security incidents, and to monitor and prot | ||||
| > | ect against malicious, deceptive, fraudulent, or illegal activity, including vio | ||||
| > | lations of our Terms of Service. | ||||
| 83 | To protect our legal rights, our interests, or the interests of others, and to o | ||||
| > | therwise address legal and compliance matters. | ||||
| 84 | To facilitate the acquisition, merger, or sale of our business, or similar trans | ||||
| > | actions. | ||||
| 85 | We process information to further our customers' legitimate interest in using ou | ||||
| > | r Services. | ||||
| 86 | We process information to comply with our legal obligations. | ||||
| 87 | We process information on the basis of your consent to: | ||||
| 88 | Engage in certain marketing activities, including when consent is required. | ||||
| 89 | Publish testimonials or featured customer stories to promote the Services. | ||||
| 90 | We also engage in processing that is necessary for us to comply with our contrac | ||||
| > | tual obligations to you, such as to provide the Services to you if you opened an | ||||
| > | account with us in your personal capacity. | ||||
| 91 | When we process personal information in our capacity as a "processor" for our cu | ||||
| > | stomer, the customer is responsible for establishing its own legal basis for our | ||||
| > | processing on their behalf, and the descriptions above do not apply. | ||||
| 92 | The bolded legal basis information above is based on our activities that are sub | ||||
| > | ject to the EU General Data Protection Regulation (GDPR) and similar laws. Where | ||||
| > | a different legal framework applies, the legal bases for the activities describ | ||||
| > | ed above may differ. For example, the list of processing activities based on con | ||||
| > | sent may be different from the above. | ||||
| 93 | How We Share Information | ||||
| 94 | Sharing with Other Service Users | ||||
| 95 | For Collaboration: You may grant permission to others to see, share, edit, copy | ||||
| > | and download the content you create, which may contain information about you, ba | ||||
| > | sed on your settings. | ||||
| 96 | Managed Accounts and Administrators: If you register or access the Services usin | ||||
| > | g an email address with a domain that is owned by your employer or organization, | ||||
| > | or otherwise associate that email address with your existing account, certain i | ||||
| > | nformation about you (including your name, profile picture, contact info, conten | ||||
| > | t and past use of your account) may become accessible to that organization's acc | ||||
| > | ount administrator and other Service users sharing the same domain. If you are a | ||||
| > | n administrator for a particular site or group of users within the Services, we | ||||
| > | may share your contact information with current or past Service users for the pu | ||||
| > | rpose of facilitating Service-related requests. | ||||
| 97 | Community Forums: Our Websites offer publicly accessible blogs, forums, issue tr | ||||
| > | ackers, and wikis like Postman Community. You should be aware that any informati | ||||
| > | on you post on such sites —including profile information associated with the acc | ||||
| > | ount used to post the information—may be read, collected, and used by any member | ||||
| > | of the public who accesses the site, and those posts and profile information ma | ||||
| > | y remain on such sites even after you delete your account. | ||||
| 98 | Sharing with Third Parties | ||||
| 99 | Service Providers and Vendors: We work with third-party service providers and ve | ||||
| > | ndors to provide website and application development, hosting, maintenance, back | ||||
| > | up, storage, virtual infrastructure, payment processing, analytic and other serv | ||||
| > | ices for us, which may require them to access or use user information. We impose | ||||
| > | strict requirements on our service providers and vendors, including security an | ||||
| > | d confidentiality requirements designed to protect your information. | ||||
| 100 | Marketing and Advertising Partners: We are not in the business of selling inform | ||||
| > | ation about you to advertisers or other third parties. We do not sell informatio | ||||
| > | n that directly identifies you (like name and contact info) to outside parties. | ||||
| > | Visitor information, however, including information collected via cookies and ot | ||||
| > | her tracking technology, may be provided to other parties for marketing, adverti | ||||
| > | sing, or other uses. We may also share or use hashed contact information for thi | ||||
| > | s purpose. | ||||
| 101 | Third-Party Apps: You, your administrator or other Service users may choose to e | ||||
| > | nable integrations with third party applications (apps) within the Services. Doi | ||||
| > | ng so may give third-party apps access to your account and information about you | ||||
| > | like your name and email address, and any content you choose to share. If you a | ||||
| > | re an administrator, you may permit us to share your details with the third-part | ||||
| > | y app provider upon installation. We do not control third-party app policies and | ||||
| > | procedures, and this Policy does not cover how third-party apps use your inform | ||||
| > | ation. | ||||
| 102 | Links to Third-Party Sites: The Services may include links that direct you to th | ||||
| > | ird-party websites or services. Any information you submit to those third partie | ||||
| > | s is governed by their privacy policies. | ||||
| 103 | Third-Party Widgets: Some of our Services may contain widgets and social media f | ||||
| > | eatures. These widgets and features collect your IP address and which page you a | ||||
| > | re visiting on the Services, and may set a cookie to enable the feature to funct | ||||
| > | ion properly or for other purposes. Your interactions with these features are go | ||||
| > | verned by the privacy policies and practices of the company providing it. | ||||
| 104 | Compliance with Enforcement Requests and Applicable Laws; Enforcement of Our Rig | ||||
| > | hts: We may share information about you with a third party if we believe that sh | ||||
| > | aring is reasonably necessary to (a) respond to lawful requests by public author | ||||
| > | ities, including to meet national security or law enforcement requirements; (b) | ||||
| > | enforce our agreements, policies, and Terms of Service; (c) protect the security | ||||
| > | or integrity of our Services; (d) protect Postman, our customers, or the public | ||||
| > | from harm or illegal activities; or (e) respond to an emergency that we believe | ||||
| > | in good faith requires us to disclose information to assist in preventing the d | ||||
| > | eath or serious bodily injury of any person. | ||||
| 105 | Sharing with Affiliated Companies | ||||
| 106 | Postman Companies: We share information about you with our corporate affiliates | ||||
| > | to operate and improve the Services subject to appropriate data transfer agreeme | ||||
| > | nts. | ||||
| 107 | Business Transfers: We may share or transfer information in connection with any | ||||
| > | merger, sale of company assets, financing, or acquisition of all or a portion of | ||||
| > | our business to another company. You will be notified via email and/or through | ||||
| > | a prominent notice on the Services if a transaction takes place, as well as any | ||||
| > | choices you may have regarding your information. | ||||
| 108 | Workspace Content | ||||
| 109 | Access to Private Workspaces | ||||
| 110 | If your workspace is private, you control the access to your Content. Postman pe | ||||
| > | rsonnel do not access private workspace content except for: | ||||
| 111 | security purposes | ||||
| 112 | to assist the workspace owner with a support matter | ||||
| 113 | to maintain the integrity of the Service | ||||
| 114 | to comply with our legal obligations | ||||
| 115 | if we have reason to believe the contents are in violation of the law, or | ||||
| 116 | with your consent. | ||||
| 117 | Note that while we do not generally search for content in your workspaces, we ma | ||||
| > | y scan our servers and content to detect certain tokens or security signatures, | ||||
| > | known active malware, known vulnerabilities in dependencies, or other content kn | ||||
| > | own to violate the Postman Terms of Service. | ||||
| 118 | Access to Public Workspaces | ||||
| 119 | If you make your workspace public, anyone may view its contents, including searc | ||||
| > | h engines or unknown third parties. You are responsible for complying with all a | ||||
| > | pplicable legal obligations regarding information you choose to make public. | ||||
| 120 | Other Important Information | ||||
| 121 | Public Information on Postman | ||||
| 122 | If you choose to make any content or information public, or post issues, comment | ||||
| > | s, or contributions to other users' public workspaces, third parties may access | ||||
| > | and use it, including by viewing your workspace and profile, or "forking" your A | ||||
| > | PIs, collections, environments, mocks, monitors, and other linked entities. We d | ||||
| > | o not sell that content; it is yours. However, any content made public will be p | ||||
| > | ublicly accessible through the internet and may be crawled and indexed by search | ||||
| > | engines. | ||||
| 123 | APIs, collections, environments, mocks, monitors, and other linked entities in p | ||||
| > | ublic workspaces on Postman may include publicly available user personal informa | ||||
| > | tion collected as part of the collaborative process. If you have a concern about | ||||
| > | any user information on Postman, please contact us as indicated below. | ||||
| 124 | Teams | ||||
| 125 | If you collaborate on or become a member of a team, then the team's account owne | ||||
| > | rs may be able to see some of your information, such as your email address(es) w | ||||
| > | ithin that team's verified domain(s). Your team's account owner(s) can provide y | ||||
| > | ou with more information about how they process your team's information and the | ||||
| > | ways for you to access, update, alter, or delete the information stored in the a | ||||
| > | ccount. | ||||
| 126 | How We Store and Secure Information We Collect | ||||
| 127 | Information Storage and Security | ||||
| 128 | We use industry standard technical and organizational measures to secure the inf | ||||
| > | ormation we store. For more information on where and how we store your informati | ||||
| > | on, please see Security at Postman. | ||||
| 129 | Although our security safeguards are designed to protect your information, no se | ||||
| > | curity system is impenetrable and we cannot guarantee that data transiting the I | ||||
| > | nternet or stored on our systems is absolutely safe. | ||||
| 130 | How Long We Keep Information | ||||
| 131 | We will only retain your information for as long as necessary to fulfill the pur | ||||
| > | poses for which it was originally collected. How long we keep information about | ||||
| > | you depends on the type of information, as described in further detail below. Af | ||||
| > | ter such time, subject to certain legal exceptions (for example, because the inf | ||||
| > | ormation needs to be retained for recordkeeping purposes, to complete transactio | ||||
| > | ns, or to comply with our legal obligations), we will either delete or anonymize | ||||
| > | your information. | ||||
| 132 | Account Information: We retain your account information for as long as your acco | ||||
| > | unt is active and up to 15 days thereafter. | ||||
| 133 | Information You Share on the Services: If your account is deleted, some of your | ||||
| > | information and content may remain on our Services to allow your team members or | ||||
| > | other users to make full use of the Services. | ||||
| 134 | Managed Accounts: If the Services are made available to you through an organizat | ||||
| > | ion (e.g., your employer), we retain your information as long as required by the | ||||
| > | administrator of your account. | ||||
| 135 | How to Manage Your Information | ||||
| 136 | Communications and Tracking Technologies | ||||
| 137 | Opt-Out of Communications: You may opt out of receiving promotional emails from | ||||
| > | us by using the unsubscribe link within each email, or by contacting us as provi | ||||
| > | ded at the end of this Policy. You can opt out of receiving some notifications v | ||||
| > | ia your account settings; for more information, please visit: https://www.postma | ||||
| > | n.com/settings/me/notifications. Note that you will continue to receive transact | ||||
| > | ional messages from us regarding our Services. | ||||
| 138 | Cookies and Other Tracking Technologies: See our Tracking Technologies Notice fo | ||||
| > | r more information about how we use cookies and other tracking technologies, and | ||||
| > | your Privacy Settings to update your choices. | ||||
| 139 | Your Choices in the Services | ||||
| 140 | Our Services have features that let users manage certain information, including | ||||
| > | the ability to access and update certain records, correct or rectify certain rec | ||||
| > | ords, delete certain records, delete your account, and disable or remove third-p | ||||
| > | arty integrations. Please use your account settings, review learning.postman.com | ||||
| > | , or contact your administrator to make these choices or for more information. | ||||
| 141 | Your Privacy Rights | ||||
| 142 | Depending on where you live, and subject to certain exceptions, you may have som | ||||
| > | e or all of the rights listed below. This includes residents of certain location | ||||
| > | s, such as the European Union, United Kingdom, Switzerland, or states with “US S | ||||
| > | tate Privacy Laws” (California, Colorado, Connecticut, Delaware, Iowa, Maryland, | ||||
| > | Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Tex | ||||
| > | as, Utah, and Virginia, and other states to the extent they enact similar privac | ||||
| > | y laws). | ||||
| 143 | Right to Know: The right to request that we disclose to you the personal informa | ||||
| > | tion we collect, use, or disclose about you, and information about our data prac | ||||
| > | tices. | ||||
| 144 | Right to Request Correction: The right to request that we correct inaccurate per | ||||
| > | sonal information that we maintain about you. | ||||
| 145 | Right to Request Deletion: The right to request that we delete personal informat | ||||
| > | ion that we have collected about you. | ||||
| 146 | Right to Object: The right to object to, opt-out of and/or restrict certain uses | ||||
| > | or disclosures of the information. | ||||
| 147 | Right to Withdraw Consent: The right to withdraw consent previously provided for | ||||
| > | consent-based handling of information (without affecting the lawfulness of prio | ||||
| > | r use and disclosure of the information). | ||||
| 148 | Right to Opt Out: Residents of states with US State Privacy Laws may have the ri | ||||
| > | ght to opt out from the “sale” or “sharing” of your personal information, includ | ||||
| > | ing the processing of your personal information for purposes of targeted adverti | ||||
| > | sing. Targeted advertising is when we or our partners display ads to you based o | ||||
| > | n your personal information that is collected across different businesses. We do | ||||
| > | not “sell” or “share” personal information if we have actual knowledge that the | ||||
| > | consumer is less than 16 years of age. Residents of US State Privacy Law states | ||||
| > | who would like to opt out of our use or disclosure of information for such purp | ||||
| > | oses can follow the steps at "Your Privacy Choices". Note, if you use a cookie b | ||||
| > | locker such as Ghostery, it may block visibility of this tool or link, including | ||||
| > | in your web footer. We do not currently process “Do Not Track” signals. But if | ||||
| > | you have enabled a legally recognized browser-based opt out preference signal (s | ||||
| > | uch as Global Privacy Control) on your browser, we recognize such preference to | ||||
| > | the extent required by applicable law. | ||||
| 149 | Exercising rights: To exercise your rights, please contact us in the following w | ||||
| > | ays: | ||||
| 150 | By Email: help@postman.com | ||||
| 151 | By Phone: 1-888-616-1665 | ||||
| 152 | Website: https://www.postman.com/company/contact-us/ | ||||
| 153 | By Mail: Postman, ATTN: Legal, Steuart Tower, 1 Market St Suite 0800, San Franci | ||||
| > | sco, CA 94105 | ||||
| 154 | Depending on where you live, you may appeal the denial of a request by emailing | ||||
| > | us at help@postman.com. | ||||
| 155 | Verification of Rights Requests: We may take reasonable steps to verify your ide | ||||
| > | ntity before responding to your request, which may include verifying your name, | ||||
| > | email address, and other information regarding your use of our services, dependi | ||||
| > | ng on the sensitivity of the information involved, the nature of our relationshi | ||||
| > | p with you, and the type of request you are making. | ||||
| 156 | Requests Made by Agents: In certain states, you can designate an authorized agen | ||||
| > | t to make a rights request on your behalf. You or the agent must provide written | ||||
| > | authorization acceptable to us. You may still need to verify your identity and | ||||
| > | confirm the agent's authority directly with us. For security and legal reasons, | ||||
| > | we reserve the right to reject requests that require us to visit an agent's webs | ||||
| > | ite. | ||||
| 157 | How Information Is Transferred Internationally | ||||
| 158 | International Transfers of Information We Collect | ||||
| 159 | We collect information globally and may transfer, process, and store your inform | ||||
| > | ation outside of your country of residence to countries where we or our third-pa | ||||
| > | rty service providers (and other recipients mentioned in this Policy) operate fo | ||||
| > | r the purpose of providing you the Services. Postman's primary hosting facilitie | ||||
| > | s are in the United States. Whenever we transfer your information, we take steps | ||||
| > | to protect it. | ||||
| 160 | International Transfers within the Postman Companies: To facilitate our global o | ||||
| > | perations, we transfer information globally and allow access to that information | ||||
| > | from countries in which Postman has operations for the purposes described in th | ||||
| > | is Policy. These countries may not have privacy and data protection laws that ar | ||||
| > | e equivalent to those in the many of the countries where our customers and users | ||||
| > | are based. These countries and the nature of the processing operations are as f | ||||
| > | ollows: | ||||
| 161 | Country | ||||
| 162 | Nature of Processing Operations | ||||
| 163 | United States (US) | ||||
| 164 | Access and other processing by employees and independent contractors to perform | ||||
| > | their day-to-day responsibilities for Postman. Additionally, the Postman platfor | ||||
| > | m is hosted in the US (unless you have an EU instance, in which case, see “EEA” | ||||
| > | below). | ||||
| 165 | Australia | ||||
| 166 | Access and other processing by employees and independent contractors to perform | ||||
| > | their day-to-day responsibilities for Postman. | ||||
| 167 | Brazil | ||||
| 168 | Access and other processing by employees and independent contractors to perform | ||||
| > | their day-to-day responsibilities for Postman. | ||||
| 169 | Canada | ||||
| 170 | Access and other processing by employees and independent contractors to perform | ||||
| > | their day-to-day responsibilities for Postman. | ||||
| 171 | European Economic Area (EEA) | ||||
| 172 | Postman platform is hosted in Germany (EU instance). Access and other processing | ||||
| > | by employees and independent contractors to perform their day-to-day responsibi | ||||
| > | lities for Postman. | ||||
| 173 | India | ||||
| 174 | Access and other processing by employees and independent contractors to perform | ||||
| > | their day-to-day responsibilities for Postman. | ||||
| 175 | Nigeria | ||||
| 176 | Access and other processing by employees and independent contractors to perform | ||||
| > | their day-to-day responsibilities for Postman. | ||||
| 177 | Philippines | ||||
| 178 | Access and other processing by employees and independent contractors to perform | ||||
| > | their day-to-day responsibilities for Postman. | ||||
| 179 | Ukraine | ||||
| 180 | Access and other processing by employees and independent contractors to perform | ||||
| > | their day-to-day responsibilities for Postman. | ||||
| 181 | United Kingdom | ||||
| 182 | Access and other processing by employees and independent contractors to perform | ||||
| > | their day-to-day responsibilities for Postman. | ||||
| 183 | International Transfers to Third Parties: Some of the third parties described in | ||||
| > | this Policy, which provide services to us under contract, are based in other co | ||||
| > | untries that may not have equivalent privacy and data protection laws to the cou | ||||
| > | ntry in which you reside. When we share information of customers regulated by th | ||||
| > | e data protection laws of the European Economic Area, the UK, or Switzerland, we | ||||
| > | make use of standard contractual data protection clauses approved by those juri | ||||
| > | sdictions (Standard Contractual Clauses) or other appropriate legal mechanisms f | ||||
| > | or the transfer. | ||||
| 184 | Please contact us as provided at the end of this Policy to exercise any right yo | ||||
| > | u may have to see the mechanisms used for transfers of your personal data or to | ||||
| > | make a general privacy-related complaint. | ||||
| 185 | International Transfers of Information to Us | ||||
| 186 | Our customers use various mechanisms for transferring personal information to us | ||||
| > | , including in some cases the Standard Contractual Clauses. | ||||
| 187 | EU-U.S. Data Privacy Framework (DPF), the UK Extension of the DPF, and the Swiss | ||||
| > | -U.S. DPF: | ||||
| 188 | Postman, Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), th | ||||
| > | e UK Extension to the DPF (UK DPF Extension), and the Swiss-U.S. Data Privacy Fr | ||||
| > | amework (Swiss DPF) as set forth by the U.S. Department of Commerce. Postman, In | ||||
| > | c. has certified to the U.S. Department of Commerce that it adheres to the EU-U. | ||||
| > | S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the | ||||
| > | processing of personal information our business customers transfer to Postman, | ||||
| > | Inc. as "Your Content" (as defined in our Terms of Service) from the European Ec | ||||
| > | onomic Area and the United Kingdom in reliance on the EU-U.S. DPF and the UK Ext | ||||
| > | ension to the EU-U.S. DPF. Postman, Inc. has certified to the U.S. Department of | ||||
| > | Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (S | ||||
| > | wiss-U.S. DPF Principles) with regard to the processing of personal information | ||||
| > | our business customers transfer to Postman, Inc. as "Your Content" (as defined i | ||||
| > | n our Terms of Service) from Switzerland in reliance on the Swiss-U.S. DPF. If t | ||||
| > | here is any conflict between the terms in this Policy and the EU-U.S. DPF Princi | ||||
| > | ples and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn | ||||
| > | more about the Data Privacy Framework (DPF) program, and to view our certificat | ||||
| > | ion, please visit https://www.dataprivacyframework.gov/. | ||||
| 189 | We comply with the EU-U.S. DPF, UK DPF Extension, and the Swiss-U.S. DPF Princip | ||||
| > | les (collectively "the Principles") with respect to all such data transferred to | ||||
| > | us in reliance on our certification under the Principles. | ||||
| 190 | We are subject to the investigatory and enforcement powers of the U.S. Federal T | ||||
| > | rade Commission (FTC) with respect to our compliance with the EU-U.S. DPF, UK DP | ||||
| > | F Extension, and Swiss-U.S. DPF. | ||||
| 191 | Covered individuals are able to exercise certain choices under the EU-U.S. DPF, | ||||
| > | UK DPF Extension, and the Swiss-U.S. DPF regarding how some of their personal in | ||||
| > | formation is used and shared, and may access, correct, or delete certain persona | ||||
| > | l information by following the instructions in the "How to access and control yo | ||||
| > | ur information" section of this Policy. For other personal information, please c | ||||
| > | ontact the Postman Support Center or the customer who transferred the data to us | ||||
| > | . Because Postman often acts as its customer's "processor" within the meaning of | ||||
| > | the EEA, UK, and Swiss laws, we often must refer such requests to our customer | ||||
| > | to handle, consistent with such law. | ||||
| 192 | In the context of an onward transfer of data, Postman is responsible for the pro | ||||
| > | cessing of personal information it receives under the EU-U.S. DPF, UK DPF Extens | ||||
| > | ion, and the Swiss-U.S. DPF, and subsequently transfers to a third party acting | ||||
| > | as an agent on its behalf. Postman shall remain liable under the Principles if i | ||||
| > | ts agent processes such personal information in a manner inconsistent with the P | ||||
| > | rinciples, unless Postman shows that it is not responsible for the event giving | ||||
| > | rise to the damage. | ||||
| 193 | In compliance with the EU-U.S. DPF, UK DPF Extension, and the Swiss-U.S. DPF, Po | ||||
| > | stman commits to resolve DPF Principles-related complaints about our collection | ||||
| > | and use of your personal information. EU and UK individuals and Swiss individual | ||||
| > | s with inquiries or complaints regarding our handling of personal information tr | ||||
| > | ansferred to Postman, Inc. as "Your Content" (as defined in our Terms of Service | ||||
| > | ) in reliance on the EU-U.S. DPF and the UK DPF Extension, and the Swiss-U.S. DP | ||||
| > | F should first direct any questions, concerns or complaints to Postman at privac | ||||
| > | y@postman.com. We will attempt to answer your questions and satisfy your concern | ||||
| > | s in a timely and complete manner. | ||||
| 194 | In compliance with the EU-U.S. DPF and the UK Extension, and the Swiss-U.S. DPF, | ||||
| > | Postman, Inc. commits to refer unresolved complaints concerning our handling of | ||||
| > | personal information received in reliance on the EU-U.S. DPF, UK DPF Extension, | ||||
| > | and the Swiss-U.S. DPF EU-U.S. to an independent dispute resolution mechanism o | ||||
| > | perated by JAMS, an alternative dispute resolution provider based in the United | ||||
| > | States. Please contact Postman first at privacy@postman.com. If we do not respon | ||||
| > | d to your complaint within 45 days, or if after discussing the matter with Postm | ||||
| > | an, Inc., your issue or complaint is not resolved to your satisfaction, please v | ||||
| > | isit JAMS at https://www.jamsadr.com/DPF-Dispute-Resolution for more information | ||||
| > | or to file a complaint. The services of JAMS are provided at no cost to you. | ||||
| 195 | In certain circumstances, if your complaint has not been resolved after first ra | ||||
| > | ising it with Postman, Inc., following the JAMS procedure above, and taking cert | ||||
| > | ain other steps, complaints may be resolved through binding arbitration, as desc | ||||
| > | ribed in Annex I of the Data Privacy Framework. | ||||
| 196 | Other Important Privacy Information | ||||
| 197 | Disclosures for California Residents | ||||
| 198 | This section applies to Postman's handling of personal information about Califor | ||||
| > | nia residents under the California Consumer Protection Act ("CCPA"). | ||||
| 199 | During the past 12 months, we have collected the personal information described | ||||
| > | in the "What information we collect about you" section above. During that period | ||||
| > | , we made the following disclosures of personal information: | ||||
| 200 | CATEGORY OF PERSONAL INFORMATION | ||||
| 201 | CATEGORIES OF ENTITIES TO WHICH IT WAS DISCLOSED | ||||
| 202 | Identifiers (e.g., name, email address, telephone number, and other contact info | ||||
| > | ) | ||||
| 203 | Affiliates, advertising partners, vendors and service providers (for example, pa | ||||
| > | yment processors), and governmental entities (as appropriate) | ||||
| 204 | Personal information listed in the California Consumer Records Statute (Civil Co | ||||
| > | de Section 1798.80(e)), such as name and telephone phone number | ||||
| 205 | Affiliates, advertising partners, vendors and service providers (for example, pa | ||||
| > | yment processors), and governmental entities (as appropriate) | ||||
| 206 | Commercial information (such as personal information in records of transactions | ||||
| > | with us and communications with us) | ||||
| 207 | Affiliates, advertising partners, vendors and service providers (for example, pa | ||||
| > | yment processors), and governmental entities (as appropriate) | ||||
| 208 | Audio, electronic, visual or similar information (e.g., recordings of calls, mee | ||||
| > | tings, or events, and voicemail messages) | ||||
| 209 | Affiliates and service providers | ||||
| 210 | Internet or other electronic network activity information (e.g., interactions wi | ||||
| > | th our emails and digital platforms and third party websites and applications) | ||||
| 211 | Affiliates, advertising partners, vendors and service providers (for example, pa | ||||
| > | yment processors, providers of advertising services, and operators of certain em | ||||
| > | bedded functionality on our website) | ||||
| 212 | Inferences about you from the any of the personal information above (e.g. your p | ||||
| > | references and attitude) | ||||
| 213 | Affiliates, service providers, and advertising partners | ||||
| 214 | We will not discriminate against you if you choose to exercise your privacy righ | ||||
| > | ts. | ||||
| 215 | Right to Lodge a Complaint with a Supervisory Authority | ||||
| 216 | In general, every individual has a right to lodge a complaint with their local a | ||||
| > | uthority, though we invite you to contact us first so that we may do our best to | ||||
| > | address the matter. If the EU or UK General Data Protection Regulation applies | ||||
| > | to our processing of your personal data, you have the right to lodge a complaint | ||||
| > | in the Member State of the European Union of your habitual residence, place of | ||||
| > | work, or the alleged violation of the GDPR. In the UK, you can lodge a complaint | ||||
| > | with the UK Information Commissioner's Office. | ||||
| 217 | Changes to Our Privacy Policy | ||||
| 218 | We may change this Policy from time to time. We will post any privacy policy cha | ||||
| > | nges on this page and, if the changes are material, we will provide you with not | ||||
| > | ice. | ||||
| 219 | Contact Us | ||||
| 220 | If there are any questions or complaints regarding this Policy or our handling o | ||||
| > | f personal information, you may contact us using the information below. | ||||
| 221 | help@postman.comPostman, Inc. or Postdot Technologies UK Ltd.ATTN: LegalOne Mark | ||||
| > | et Plaza1 Market StreetSteuart TowerSuite 0800San Francisco, CA 94105 | ||||
| 222 | European Union Representative | ||||
| 223 | We have appointed VeraSafe as our representative in the EU for data protection m | ||||
| > | atters. While you may also contact us, VeraSafe can be contacted on matters rela | ||||
| > | ted to the processing of personal data. To contact VeraSafe, please use this con | ||||
| > | tact form: https://www.verasafe.com/privacy-services/contact-article-27-represen | ||||
| > | tative or via telephone at: +420 228 881 031. Alternatively, VeraSafe can be con | ||||
| > | tacted at: | ||||
| 224 | VeraSafe Ireland LtdUnit 3D North Point HouseNorth Point Business ParkNew Mallow | ||||
| > | RoadCork T23AT2PIreland | ||||
| 225 | Data Protection Officer | ||||
| 226 | We have appointed VeraSafe as our Data Protection Officer (DPO). While you may c | ||||
| > | ontact us directly, VeraSafe can also be contacted on matters related to the pro | ||||
| > | cessing of personal data. VeraSafe's contact details are: | ||||
| 227 | VeraSafe LLC100 M Street S.E., Suite 600Washington, D.C.20003USAEmail: experts@v | ||||
| > | erasafe.comWeb: https://www.verasafe.com/about-us/contact-us/ | ||||
| 228 | In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and t | ||||
| > | he Swiss-U.S. DPF, Postman commits to cooperate and comply respectively with the | ||||
| > | advice of the panel established by the EU data protection authorities (DPAs) an | ||||
| > | d the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Prot | ||||
| > | ection and Information Commissioner (FDPIC) with regard to unresolved complaints | ||||
| > | concerning our handling of human resources data received in reliance on the EU- | ||||
| > | U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF in the c | ||||
| > | ontext of the employment relationship. | ||||
| 229 | Powered by Transcend | ||||
| 230 | Contact Support | ||||
| 231 | Return to Main Site | ||||
Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.