Terms of Service

Effective Date: March 17, 2026

Last Updated: October 5, 2026

1. Overview

These Terms of Service ("Terms") govern your use of the Postally direct mail platform ("Platform"), operated by Apricity Advisory Ltd., operating as Postally ("Company", "we", "us", "our"), a corporation incorporated in British Columbia, Canada. By accessing or using the Platform, you agree to be bound by these Terms.

2. Services

Postally provides a REST API for sending direct mail. Currently available: postcards. Letters, self-mailers, and checks are planned for future release. The Platform handles template management, recipient management, address verification, print production coordination, and delivery tracking.

3. Account Registration

You must provide accurate and complete information when creating an account. You are responsible for maintaining the confidentiality of your API keys and account credentials. You are responsible for all activity that occurs under your account.

4. Prepaid Credits & Billing

The Platform operates on a prepaid credit model. You must load credits into your account before sending mail via the API. Credits are deducted at the time a mail piece is submitted for production.

Dashboard users may also pay per job via Stripe Checkout, where the exact cost is charged at the time of order. Pay-per-job charges are subject to Stripe's refund policies and may be refunded only if the mail piece has not yet entered production.

5. Cancellation Window

Mail pieces may be cancelled at any time before 11:59 PM Pacific Time on the day they were submitted. Submissions are batched and dispatched to the print production partner each night at 2:00 AM Pacific Time. Once a mail piece has been submitted to the print production partner, it cannot be cancelled and credits will not be returned. Pieces submitted late in the evening will have a correspondingly shorter cancellation window.

6. Acceptable Use

You agree not to use the Platform to:

• Send mail that violates any applicable law or regulation
• Send fraudulent, misleading, or deceptive content
• Harass, threaten, or intimidate any individual
• Send unsolicited bulk mail (spam) to recipients who have not consented
• Impersonate any person, business, or entity
• Transmit content that infringes intellectual property rights
• Attempt to gain unauthorized access to the Platform or other accounts

7. API Usage & Rate Limits

API access is subject to rate limits. The Platform enforces a four-tier rate limiting system (READ, STANDARD, WRITE, EXPENSIVE). Exceeding rate limits will result in HTTP 429 responses. Repeated or intentional abuse of rate limits may result in account suspension.

8. Data Privacy

We handle personal information as described in our Privacy Policy, which lists the service providers that receive personal information, what each one receives and where, and how long we keep each kind of data.

The Platform is hosted on Amazon Web Services in the United States. Our application servers and database run in Ohio (us-east-2), and files, database backups and audit-log archives are stored in Amazon S3 in Oregon (us-west-2). Information you send to the Platform, including your recipients' personal information, is therefore stored and processed in the United States and is subject to US law there. Printing and mailing take place in Canada. The data region recorded on your account is a label for your records; it does not change where data is stored.

Recipient names, company names, job titles, address fields, email addresses and phone numbers are encrypted field by field with AES-256-GCM, using encryption keys managed by our application rather than a separate key-management service. Other data, including recipient countries, the province used for tax billing, tags, metadata and merge variables, is not field-encrypted. Files, and the database backups we keep in Amazon S3, are stored with Amazon S3 server-side encryption (AES-256). For more on our security controls, see our Security & Compliance documentation available on the Help page.

9. Protected Health Information (PHI) and HIPAA

Postally is not HIPAA-certified and does not currently offer Business Associate Agreements (BAAs). The Platform provides PHI-aware data-handling features (separate encryption keys for PHI, four-tier PHI access controls on API keys, and disclosure-accounting endpoints) that customers may use for internal handling of health information, but Postally itself does not act as a HIPAA-covered entity or business associate. Customers must independently determine whether the Platform meets their compliance obligations. Do not transmit Protected Health Information through the Platform without first contacting us at support@postally.ca to discuss your use case.

10. Service Availability

We strive to maintain high availability but do not guarantee uninterrupted service. The Platform may be temporarily unavailable for maintenance, updates, or due to circumstances beyond our control. We are not liable for any losses resulting from service interruptions.

11. Limitation of Liability

To the maximum extent permitted by law, Postally shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunities, arising from your use of the Platform. Our total liability shall not exceed the amount you paid to us in the 12 months preceding the claim.

12. Account Termination

We may suspend or terminate your account if you violate these Terms. You may close your account at any time by emailing enrico@postally.ca. Account closure is carried out by our team, which erases the account as described in our Privacy Policy; that policy also lists what is not erased and the records we keep. Upon account closure, any remaining prepaid credits are forfeited and non-refundable.

13. Modifications

We may update these Terms from time to time. Material changes will be communicated via email or dashboard notification at least 30 days before taking effect. Continued use of the Platform after changes take effect constitutes acceptance of the updated Terms.

14. Governing Law

These Terms are governed by the laws of British Columbia, Canada. Any disputes shall be resolved in the courts of British Columbia.

15. Contact

For questions about these Terms, contact us at support@postally.ca.