Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This is Postman's Privacy Policy, covering how the company collects and uses personal information when users interact with its API platform and related services, including the astropods.ai domains. The policy authorizes sharing of cookie-derived visitor information and hashed contact details with advertising and marketing partners, and states that personal information may be used to develop AI tools and systems under separate Postman AI Terms. For users covered by GDPR or US state privacy laws, the policy describes rights including access, correction, deletion, opt-out of targeted advertising, and the ability to designate an authorized agent for rights requests.
This document is Postman's Privacy Policy (last updated April 2026), governing the collection, use, sharing, and processing of personal information across Postman's software, services, and websites, including astropods.com and astropods.ai, with legal bases asserted under GDPR legitimate interests, contractual necessity, legal obligation, and consent frameworks. The policy states that Postman collects account and profile information, billing information, device and connection data, browsing and interaction data, collaboration metadata, and inferences about user preferences; the terms authorize sharing of visitor information and hashed contact data with advertising and marketing partners, and permit use of personal information to develop AI tools and systems as referenced in the Postman AI Terms. The policy states that Postman does not sell information that directly identifies users by name or contact details to advertisers, but separately authorizes disclosure of cookie-derived visitor information and hashed identifiers to advertising partners, a distinction that may engage state law definitions of 'sale' or 'sharing' under statutes such as the CCPA and similar US state privacy laws. The policy asserts compliance with the EU-U.S. Data Privacy Framework, UK DPF Extension, and Swiss-U.S. DPF, with Postman certified under all three frameworks and subject to FTC investigatory and enforcement powers; unresolved DPF complaints are referred to JAMS arbitration, with binding arbitration available as a final resolution mechanism under DPF Annex I. Compliance teams should note that the policy explicitly references AI data use governed by separate Postman AI Terms not reproduced here, that data is processed in ten listed countries including India, Nigeria, Ukraine, and the Philippines under Standard Contractual Clauses or DPF mechanisms, and that the policy applies differently depending on whether Postman acts as a controller or processor for organizational customers.
The agreement authorizes use of personal information including contact data, usage patterns, and inferred preferences to develop AI tools and systems, subject to separate Postman AI Terms that are not reproduced in this policy. Under these terms, cookie-derived visitor information and hashed contact identifiers may be shared with advertising and marketing partners, even though the policy states Postman does not sell directly identifying information such as name and contact details to outside parties. You can opt out of targeted advertising by following the steps at the 'Your Privacy Choices' link in the policy footer, adjust cookie and tracking preferences in Privacy Settings, and submit deletion or correction requests by emailing help@postman.com or calling 1-888-616-1665.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
40 important changes detected
44 versions captured · Latest change detected by ConductAtlas: July 2026
Postman's privacy policy page underwent a technical update detected on July 16, 2026. The change involved modification of the page's metadata and build timestamp, from a build time of Wed …
View change record →Postman's privacy policy HTML was updated on July 15, 2026. The detected change involved a modification to build metadata in the document header, where the build timestamp changed from July …
View change record →The detected change consists entirely of an HTML build-time metadata update (from July 10 to July 13, 2026) within the Postman Privacy Policy page source code. No substantive policy language, …
View change record →The detected change to Postman's privacy policy on July 11, 2026 consists of a build metadata update in the HTML header (build timestamp changed from July 8 to July 10, …
View change record →Postman updated its Privacy Policy on July 9, 2026. The detected change involves a modification to the document's HTML metadata, specifically the build timestamp and associated code. The diff shows …
View change record →On July 8, 2026, Postman updated the technical build metadata of its privacy policy page, with the build time changing from July 6 at 20:08:40 UTC to July 7 at …
View change record →The detected change is a metadata update to Postman's privacy policy webpage, specifically a build-time timestamp change from July 2 to July 6, 2026. This is a technical refresh of …
View change record →Postman updated its privacy policy web interface on July 3, 2026. The change appears to be a technical rebuild of the HTML structure and browser dependency declarations, with an updated …
View change record →The change detected in Postman's Privacy Policy on July 2, 2026 consists of HTML metadata and build version updates. The document's build timestamp was updated from June 30, 2026 to …
View change record →The detected change consists of a build timestamp update in the HTML metadata of Postman's privacy policy page, changing from 'Mon Jun 29 18:26:56 UTC 2026' to 'Tue Jun 30 …
View change record →On June 30, 2026, Postman updated the HTML structure of its Privacy Policy page. The change involved updating the page build timestamp and making minor modifications to the HTML metadata …
View change record →Postman's privacy policy HTML was updated on June 28, 2026, with a build timestamp change from June 25 to June 26. The detected change appears to be a build-time metadata …
View change record →Postman's privacy policy page was updated on June 26, 2026, but the detected changes are limited to technical HTML metadata and build timestamps. The substantive policy content remains identical between …
View change record →The detected change to Postman's privacy policy consists of a build timestamp update and minor HTML structure modifications on June 24, 2026. The build time changed from June 18 to …
View change record →The detected change consists entirely of technical updates to the HTML build metadata and script loading order of Postman's privacy policy web page, captured on June 19, 2026. The build …
View change record →Postman's privacy policy was updated on June 18, 2026. The detected change appears to be a build-time metadata update in the HTML document structure rather than a substantive policy revision. …
View change record →The change detected is a minor update to the HTML metadata of Postman's privacy policy web page, specifically the build timestamp, which changed from June 16, 2026 at 04:09:31 UTC …
View change record →The detected change is a build timestamp update in the HTML metadata of Postman's privacy policy page, changing from June 12 to June 16, 2026. This reflects a document rebuild …
View change record →The detected change consists of a build-time metadata update in the HTML header of Postman's privacy policy page, changing from 'Thu Jun 11 21:32:12 UTC 2026' to 'Fri Jun 12 …
View change record →The detected change in Postman's privacy policy appears to be a technical update to the HTML document's build timestamp (from June 11 00:54 UTC to June 11 21:32 UTC), with …
View change record →On June 11, 2026, Postman updated its privacy policy website to include a new JavaScript library (highlight.js) in the page load and removed another library (transcend-io-internationalization). This is a technical …
View change record →The detected change involves only HTML metadata and build timestamp updates between the June 5 and June 9, 2026 versions of Postman's privacy policy web page. The substantive privacy policy …
View change record →The detected change in Postman's Privacy Policy document reflects a routine update to the HTML metadata and build timestamp on June 5, 2026, from June 4 at 20:08 UTC to …
View change record →Postman updated their privacy policy website on June 5, 2026. The detected change involves only technical metadata updates to the HTML document structure (build timestamp changed from June 3 to …
View change record →Postman updated its privacy policy page on June 4, 2026 by modifying the underlying HTML and JavaScript structure. The primary technical change involved replacing a single bundled JavaScript file with …
View change record →Postman's privacy policy page underwent a technical rebuild on June 2, 2026, with the document's build timestamp updated from June 1 to June 2, 2026. The underlying HTML structure and …
View change record →The detected change is a build metadata update in the HTML source code of Postman's privacy policy webpage, not a substantive change to privacy policy language or terms. The build …
View change record →The detected change involves only HTML metadata updates to the privacy policy page, specifically a build timestamp change from May 28 to May 29, 2026. No substantive privacy policy language, …
View change record →The detected change is a build-time metadata update in the HTML source code of Postman's privacy policy page, not a substantive change to the privacy policy text itself. The build …
View change record →The provided diff shows only HTML metadata and build timestamp changes between two versions of Postman's privacy policy page. The build time updated from May 26, 2026 to May 27, …
View change record →Postman's privacy policy underwent a technical update on May 27, 2026, with the document's build timestamp changing from May 23 to May 26. The detected change appears to be limited …
View change record →On May 24, 2026, Postman updated the HTML metadata of its privacy policy document. The detected change involved a modification to the build timestamp in the document's header code, from …
View change record →The detected change in Postman's Privacy Policy on May 22, 2026 appears to be a technical update to the HTML document build metadata, specifically the build timestamp. The change reflects …
View change record →The change detected is a build-time metadata update in Postman's privacy policy webpage HTML, dated May 21, 2026 instead of May 15, 2026. This reflects a routine deployment or page …
View change record →Postman's privacy policy page underwent a technical rebuild on May 16, 2026. The detected change involves only HTML metadata and structural elements; the substantive policy content remains unchanged. No new …
View change record →The detected change consists of HTML metadata updates to Postman's Privacy Policy page, specifically changes to the build timestamp and build version metadata. The before version shows a build time …
View change record →Postman updated their privacy policy website on May 6, 2026. The detected change appears to be a technical rebuild of the policy page (build timestamp updated from May 5 to …
View change record →On May 6, 2026, Postman made a technical update to their Privacy Policy document. The change involved updating the HTML metadata (build timestamp) that powers the policy page. The actual …
View change record →“If you register or access the Services using an email address with a domain that is owned by your employer or organization...certain information about you (including your name, profile picture, contact info, content and past use of your account) may …”
“Postman, Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the DPF (UK DPF Extension), and the Swiss-U.S. Data Privacy Framework (Swiss DPF) as set forth by the U.S. Department of Commerce.”
“Postman's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.”
“We are not in the business of selling information about you to advertisers or other third parties. We do not sell information that directly identifies you (like name and contact info) to outside parties.”
“Where we provide the Services under contract with an organization (for example your employer), that organization controls the information processed and acts as the data controller...we operate as the data processor and the contract may require us to process the …”
“Postman shall remain liable under the Principles if its agent processes such personal information in a manner inconsistent with the Principles, unless Postman shows that it is not responsible for the event giving rise to the damage.”
“Postman personnel do not access private workspace content except for: security purposes to assist the workspace owner with a support matter to maintain the integrity of the Service to comply with our legal obligations if we have reason to believe …”
“We process personal data for the purpose it was originally collected unless consent to materially different processing purposes has been obtained or, depending on relevant jurisdiction, there is no applicable opt-out of such processing.”
“Residents of states with US State Privacy Laws may have the right to opt out from the "sale" or "sharing" of your personal information, including the processing of your personal information for purposes of targeted advertising.”
“We may also use information you provide to develop artificial intelligence (AI) tools and systems as set forth in our Postman AI Terms.”
“If you choose to store any Sensitive Personal Information on our servers, you are responsible for complying with all applicable legal obligations regarding that data.”
“Visitor information, however, including information collected via cookies and other tracking technology, may be provided to other parties for marketing, advertising, or other uses. We may also share or use hashed contact information for this purpose.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Postman has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Binding Arbitration Available for Unresolved DPF Complaints and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.