Privacy Policy

What this means — plain-English summary, not legally binding; the full text below governs.

We collect the information needed to verify your identity (as USPS requires), receive and handle your mail, run your account, and keep the Service secure.

Your mail and documents are yours. We open and scan only what you authorize, and staff access is limited and logged.

We do not sell your personal information, and we do not put your mail contents or other sensitive data into advertising or analytics tools.

You can access, correct, export, or delete your information, subject to limits set by law and our mail-handling record-keeping duties.

The free demo uses fictional sample data only — no real accounts, no real mail, nothing collected about a real customer.

1. Scope

This Privacy Policy explains how MyEverAddress (“we,” “us,” “our”) collects, uses, discloses, and protects personal information when you use our website, the free demo, and the mail-handling Service. It is part of our Terms of Service. Specific handling of your physical mail is also governed by the Mail Handling Agreement and Scanning Authorization.

2. The demo collects no personal mail data

The public interactive demo runs on fictional, pre-built sample data. It does not create an account, does not receive real mail, and does not store personal information about you beyond ordinary, privacy-conscious website usage measurement (see Cookie Policy). Nothing you do in the demo affects any real mailbox.

3. Information we collect

You provide:

Account and contact details (name, email, phone, forwarding and destination addresses).
Identity-verification information required to operate as a CMRA: information from USPS PS Form 1583, government or other identification documents, and any notarization records. See the CMRA Onboarding Disclosure.
Names of household or business recipients you authorize.
Payment information, which is processed by our third-party payment processor; we do not store full payment-card numbers on our own systems.
Support messages, preferences, and instructions.

Generated by using the Service:

Mail metadata: sender, recipient, size, weight, postmark or received date, category, and status.
Images of envelopes and, only for items you authorize us to open, scanned document pages.
Information extracted or summarized by automated processing from authorized documents (see the AI Feature Disclosure).
Account activity, audit and security events, device and session information, and communications.

From third parties:

Delivery, tracking, and postage information from carriers.
Verification results from identity or notary providers, where used.

4. Categories in plain terms

We handle several categories of information, some of it sensitive: identity documents, financial documents (such as bank and card statements that arrive as mail), health-related mail (such as insurance statements), and government correspondence. We treat mail contents as confidential and access them only as needed to provide the Service or as required by law.

5. How we use information

We use information to: verify your identity and eligibility; assign and operate your mailbox; receive, photograph, classify, open (when authorized), scan, forward, store, shred, or return mail per your instructions; provide automated organization and summaries for authorized documents; process payments and forwarding/postage charges; send service messages; provide support; keep records CMRA operation requires; secure the Service and detect abuse or fraud; and comply with law.

We do not use the contents of your mail to build advertising profiles, and we do not feed your mail contents or account data into advertising networks.

6. Automated processing and AI

Automated features read and summarize documents you have authorized us to open. These features run on a restricted pipeline. Where an external processing provider is used, we offer and honor the privacy controls described in the AI Feature Disclosure; document contents are not sent to an external processing provider except with configuration consistent with your settings and your authorization to open the item. Automated output can be wrong; the original scan is authoritative. Automated summaries are not legal, tax, medical, or financial advice.

We share information only as needed to run the Service or as the law requires:

Service providers who work on our behalf under contract, such as payment processing, shipping carriers, notaries and identity verification, email delivery, cloud hosting and storage, and security tooling. They may use the information only to perform their service for us.
Legal and safety: to comply with law, valid legal process, or lawful requests from postal or other authorities; to protect rights, safety, and property; and to investigate fraud or misuse. As a CMRA, we are required to make certain identity records available to postal authorities and law enforcement on lawful request.
Business transfers: in a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising, as those terms are used under applicable state privacy laws. (Confirm against actual analytics vendors.)

8. Staff access controls

Access to your mail and documents is role-based and limited to the minimum needed. Mailroom, scanning, shipping, support, and compliance staff see only what their role requires. Staff cannot silently log in as you. Sensitive actions — opening authorization, scan completion, forwarding, shredding, identity review, and administrative access — are recorded in an append-only audit log. See Security Practices.

9. Analytics and no-PII rule

We use privacy-conscious, aggregate usage measurement to understand and improve the Service. We do not place personal information, mail contents, identity documents, or sensitive account data into analytics or advertising tools. See the Cookie Policy for details on cookies and measurement.

10. Data retention

We keep information only as long as needed for the purposes above or as the law requires. As a general guide (subject to attorney and CMRA-record confirmation): active mail images and scans are retained while your account is active and for a limited wind-down period after closure; identity and Form 1583 records are retained for the period USPS CMRA rules require; audit and security events are retained on a schedule appropriate to their purpose; and payment records are retained as tax and accounting law requires. Specific retention periods are set out in the Storage & Abandonment Policy and configured in our systems. When retention ends, we delete or de-identify the information securely.

11. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of your personal information, to opt out of certain uses, and to be free from unlawful discrimination for exercising these rights. You can exercise these rights through the Privacy Request page or by contacting privacy@myeveraddress.com. We will verify your identity before acting. Some information may be retained where the law or our mail-handling and CMRA record-keeping duties require it; we will explain any such limit.

12. Security

We are designed around security best practices, including encryption of data in transit and at rest, access controls, audit logging, and secure handling of documents. No method of storage or transmission is perfectly secure. If a data breach affecting your personal information occurs, we will notify affected users and authorities as applicable law requires. See Security Practices.

13. Children

The Service is intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided information, contact privacy@myeveraddress.com.

14. Changes

We may update this Policy. Material changes will be reflected in the “last updated” date and communicated by a reasonable method. Prior versions are retained and available on request.

15. Contact

Privacy questions or requests: privacy@myeveraddress.com, or [PRIVACY MAILING ADDRESS]. For a formal request, use the Privacy Request page.