What we use
Your name and return address identify your federal offices and are printed on mail you choose to send. Your message, return address, selected recipients, and payment reference are used only to prepare, fulfill, support, and reconcile that request.
What we do not do
We do not sell personal information, publish letters, build political-advertising audiences, or use AI to write your message. We do not retain raw IP addresses. A rotating keyed abuse identifier helps prevent message spam and expires after 30 days.
Retention and vendors
Paid, complimentary-beta, and postcard-proof content and return-address data are encrypted and retained for one year for order status, support, and fulfillment records. During beta, an allowlisted human reviewer can read the message before approval but does not receive the return address in the review queue. A complimentary beta pass is limited with a non-reversible keyed hash of the verified return address; we do not save the code or a separate readable address record for that purpose. A postcard proof is limited with non-reversible keyed hashes of the verified address, a browser cookie, and a connection-derived value; those values are not stored in readable form and expire after one year. If you provide an email during paid checkout, we may use it through our payment processor to send transactional order updates; it is not stored in our application database. Stripe processes payment details; Lob processes the postal address and mailpiece needed to produce and mail it. Free print packets are not saved as orders.
Your choices
Do not submit a message if you do not want it printed and delivered to the selected public office. The order-status link deliberately excludes your full message and return address; it may show the short subject you choose to help you recognize the order. Contact the operator to request help with an eligible order.