Posta Privacy Policy

This policy explains how Posta (lt.posta.app) collects, uses, shares, retains, and deletes information. Posta is operated by the developer or publisher identified for Posta in the app store or distribution channel. Posta is the data controller for the service. Privacy and support contact: info@posta.lt.

1. Scope

This policy applies to the Posta mobile application, its household parcel service, and the public pages at posta.lt. Posta helps an invitation-only household organize parcel pickup information. The service is intended for users aged 18 and over.

2. Information we collect

• Account and device information: random person, installation, device, session, household, membership, and Support IDs; a device name; household role; feature settings; consent records; and session creation, use, and revocation times. Posta does not use an advertising ID or a hardware identifier such as IMEI or MAC address.
• Parcel information: carrier, parcel number, pickup place, pickup code or PIN, door number, deadline, status, warnings, and relevant timestamps.
• Content you submit: sender and message text that you deliberately paste, share, or submit for parcel extraction; manual corrections; parser feedback; and optional details in a report about a parcel or household member.
• Activity and service records: parcel status changes, household notifications, invitations, moderation reports, and limited operational and security records needed to run and protect the service.
• Network information: restricted service and security logs record client and proxy IP addresses, request time, HTTP method, a route template, status, duration, response size, request ID, and opaque authenticated actor and household IDs where applicable. Logs do not record authorization credentials, message bodies, parcel contents, pickup codes, or query strings.

3. Optional notification access

Posta can read new notifications from supported text-message apps, Viber, WhatsApp and Beeper only after you accept a prominent disclosure, select a source, and grant notification access in device settings. Matching text is parsed on your device. Extracted parcel details, an opaque duplicate-detection value, source app, parser ruleset version, sender, full parcel message and received time are sent to the service for parcel imports and restricted parsing/overwrite diagnostics. This applies to both successful imports and supported parcel messages that cannot be added; no separate confirmation is required for each message after accepting the disclosure. Reports may include a PIN, address or tracking number from the message. They are restricted to authorized administrators, not shared with other households, and retained for up to 30 days. Failed messages remain available for local review for up to seven days. Posta does not scan SMS inbox history or request SMS inbox permissions.

You can disable each source in Posta and revoke notification access in device settings. QR invitation camera frames are also processed locally and are not uploaded by Posta.

4. Why we use information

We use information to create and authenticate your device-based account; provide household invitations and access controls; extract, synchronize, display, and remind household members about parcels; prevent duplicate imports; respond to support and deletion requests; investigate reports and abuse; secure the service; comply with law; and maintain reliable operation.

Where the GDPR applies, processing necessary to provide Posta is based on performance of our agreement with you. Optional notification access is based on your choice and permission, which you can withdraw. Security, abuse prevention, support, and service improvement rely on our legitimate interests in operating a safe and dependable service. We process information when necessary to comply with a legal obligation.

5. Household visibility and recipients

Current members of your household can see shared parcel information, relevant activity, and device display names. A deliberately submitted source message may be available to authenticated household members while it remains within the source-message retention period. Invite only people you trust. Removing a member stops future access but cannot erase information that person already saw or copied.

Authorized Posta administrators can access limited account and parcel summaries for support and moderation. Revealing raw source text or a pickup code requires a specific audited support action. Posta does not sell personal data and does not use advertising, analytics, or external AI message-processing services.

Posta uses infrastructure and network providers to deliver and protect the service, including Cloudflare for network routing and security. These providers process data on our behalf under their own security and data-protection commitments. When you choose Show on map or open another external link, your chosen map, browser, carrier, or retailer receives that request under its own privacy policy.

Posta uses Google Firebase Cloud Messaging to keep connected phones up to date, including when visible household alerts are turned off. Google processes the app installation identifier and delivery metadata. Push payloads contain no pickup codes, addresses or message text; the app fetches parcel notifications from Posta using its authenticated session. Turning off notifications disables visible alerts while background parcel updates continue. Stale server registrations are removed after 30 days without refresh. Google Analytics is not enabled.

6. Storage and international transfers

Posta's application database is operated in Lithuania. Connections between the app and service use HTTPS. Network delivery and protection may cause limited connection metadata to be processed by providers operating in other countries. Where required, we rely on applicable contractual and legal safeguards for those transfers.

7. Retention

Restricted request and operational logs are retained for 30 days; security access and administrative audit records are retained for 90 days. Scheduled cleanup and compaction may take a short additional interval. These logs are available only to authorized administrators for service operation, security and abuse investigation.

• Raw submitted sender/message text and failed manual or automatic parser samples are retained in the live service for up to 30 days.
• Parcel activity, household notifications, and expired or used invitation records are retained for up to 90 days.
• Structured parcel records remain until an owner deletes the parcel or history, the household is deleted, or the record is otherwise no longer needed to provide the service.
• Account, device, membership, session, settings, and parser-rule records remain while needed for the account or household and are removed or deactivated through the applicable deletion or revocation action.
• Restricted recovery and maintenance copies may temporarily retain earlier data after live deletion. They are not used for ordinary access and are kept only for disaster recovery, integrity verification, and secure service maintenance.

8. Your controls

You can correct parcel information, disable message sources, revoke notification access, revoke a device session, leave or switch a household, report content or a member, and—as an owner—remove a member or permanently delete a parcel or parcel history. Household ownership may pass to another member when an owner leaves.

9. Account and data deletion

If you still have access to the app, use Settings → Legal and privacy → Delete account and data for immediate authenticated deletion. This ends access and deletes your account identifiers, sessions, devices, raw contributions, personal notifications, and invitations. Shared parcel facts can remain available to other household members. If you are the last member, the household and its remaining parcel data are also deleted. Data may remain temporarily in restricted recovery copies as described above.

10. Security

Posta uses HTTPS, hashed session credentials, household-scoped authorization, revocable sessions, request limits, restricted administrative access, and audit records for sensitive support actions. No system is completely secure; keep your device, invitations, Support ID, and parcel pickup codes private and contact us if you suspect unauthorized access.

11. Your rights

Subject to applicable law, you may request access to, correction of, deletion of, restriction of, or portability of your personal data, and may object to certain processing. You may withdraw a consent-based choice without affecting earlier lawful processing. Contact info@posta.lt to exercise these rights. You may also complain to the Lithuanian State Data Protection Inspectorate or your local data-protection authority.

12. Changes and contact

We may update this policy when Posta, its providers, or legal requirements change. We will update the effective date and provide appropriate notice of a material change. Questions, complaints, privacy requests, and deletion requests can be sent to info@posta.lt.