Your information should feel as private as your mailbox.

A note about this policy.

This Privacy Policy explains how aersocial handles personal information when you create an account, use your Post Box, send or receive postcards, save content, interact with the Postcard Board, or contact us.

It should be read together with our Terms and Community Guidelines .

This policy is intended to describe our current practices. It does not replace rights or obligations that may apply to aersocial under applicable law.

Information we collect.

The information aersocial handles depends on how you use the service.

Why we use information.

We use information where necessary to operate and improve aersocial, including to:

• create and maintain your account;
• provide your Post Box and postcard features;
• deliver and display messages;
• allow you to save postcards and manage your account;
• prevent spam, abuse, fraud and other harmful activity;
• investigate reports and enforce our Community Guidelines;
• secure the service and diagnose technical problems;
• respond to support, privacy and other enquiries; and
• comply with applicable legal and regulatory requirements.

Your postcards.

aersocial is built around messages, so information connected with postcards is central to how the service works.

Depending on the feature you use, this can include the postcard message, delivery information, Post Box relationships, timestamps and information needed to show or manage the postcard.

Postcards may also be reviewed or processed for moderation and safety purposes when necessary to operate the service and enforce our rules.

Reports and safety.

When a postcard or account is reported, we may retain information needed to investigate the report, make a moderation decision, enforce account restrictions and protect the community.

Moderation history may include reports, moderation actions, strike information and related evidence.

Some of this information may remain available for a period even after an account is no longer active, where necessary for security, safety, dispute handling or legal compliance.

What happens when you delete your account?

Account deletion begins with a 30-day recovery period. During that period, your account is deactivated but can still be restored.

If you do not reactivate it during the recovery period, the account and personal profile are permanently deleted.

Saved personal content associated with the account is removed as part of the permanent deletion process.

Some historical postcard, moderation and safety records may be retained in a restricted or anonymized form where necessary for the safety, integrity and operation of aersocial or to meet applicable legal obligations.

Retention.

We do not keep every category of information for the same amount of time.

Retention depends on why the information is needed, the nature of the information, whether an account remains active, safety or moderation requirements and applicable legal obligations.

Where information no longer needs to be retained, we aim to delete or otherwise dispose of it in accordance with our practices and applicable requirements.

Keeping information safe.

We use reasonable technical and organisational measures designed to protect information against unauthorised access, misuse, loss or alteration.

No online service can guarantee absolute security. We continuously work to improve the security of aersocial and its systems.

When information may be shared.

We may disclose information where necessary to provide the service, protect aersocial and its users, investigate abuse, respond to lawful requests, enforce our rights, or comply with applicable law.

Where third-party service providers help us operate parts of aersocial, they may process information on our behalf as necessary for those services.

We do not sell your personal information simply because you use aersocial.

Your choices and requests.

Depending on the applicable law and circumstances, you may have rights or choices relating to your personal information, including requests concerning access, correction, deletion, withdrawal of consent where applicable, or complaints.

You can also use the account controls available on aersocial, including the account deletion and recovery process.

Because applicable legal requirements can depend on the nature of the request and when particular legal provisions become operative, we will handle requests according to the requirements that apply at the time.

Children and age requirements.

aersocial uses age-related information where required by its account and safety systems.

We do not knowingly design the service to bypass applicable age or child-safety requirements. If you believe an account has been created or used in a way that violates an applicable age requirement, please contact us.

Changes to this policy.

We may update this Privacy Policy when our service, practices or applicable requirements change.

When we make material changes, we will take reasonable steps to provide notice where required.