Transparency
What we use, where data goes, and how it is protected.
Delivery methods
Email or First-class mail. Every letter is sent only after your explicit consent.
How your data is handled
- Names, emails, addresses and letter bodies are encrypted at rest (AES-256-GCM), with keys held outside the web root.
- AI providers never receive your identity — only the campaign's talking points and your optional note.
- No advertising trackers, no fingerprinting, and no sale of personal information.
Providers & sub-processors
Every third party that may process data, its role, location and a link to its own privacy policy. "On this site" shows what is currently enabled on this installation.
| Provider | Purpose & data shared | Location | On this site | Privacy |
|---|---|---|---|---|
| Anthropic (Claude) | Drafts letters with AI when an Anthropic key is configured. Receives the campaign's talking points and the optional personal note a supporter chooses to share — never the supporter's name, email or address. | United States | — | Policy ↗ |
| OpenAI | Drafts letters with AI as a fallback when an OpenAI key is configured. Same data as above. | United States | — | Policy ↗ |
| DeepSeek | Drafts letters on trial and entry plans and the public demo, and matches new federal consultations to watch topics, when a DeepSeek key is configured. Same data as above. | China (Hangzhou DeepSeek AI Co., Ltd) | Policy ↗ | |
| Stripe | Subscription billing and payments. Card numbers are entered on Stripe and are never seen or stored by us. | United States / Ireland | Policy ↗ | |
| Stripe Identity | Optional ID / residency verification — only on campaigns that turn it on. Stripe checks a government photo ID (and selfie) and returns the verified name and address. PoliPost keeps only that name and address; the document, selfie and ID number are never stored. | United States | — | Policy ↗ |
| PostGrid | Prints and mails physical letters when print mail is enabled. Receives the recipient's and sender's name and mailing address. | Canada / United States | Policy ↗ | |
| Lob | Prints and mails physical letters in the US (alternative provider). Same data as PostGrid. | United States | — | Policy ↗ |
| Scribeless | Produces robot-handwritten letters in real ink when enabled. Receives the recipient's and sender's name and mailing address. | United Kingdom (data processed in the United States) | — | Policy ↗ |
| Geocodio | Optional address and representative geocoding when a Geocodio key is configured. Receives a postal/ZIP code or address. | United States | — | Policy ↗ |
| Cloudflare Turnstile | Bot and abuse protection on public forms when enabled. Receives the visitor's IP address and a challenge token — no letter content. | United States | Policy ↗ | |
| Open North — Represent API | Finds your federal and provincial representatives from a postal code. Receives only the postal code. | Canada (Montréal) | Policy ↗ | |
| Email (SMTP) provider | Sends transactional and campaign email (configured by the operator). Receives the recipient email address and message content. | Set by the operator | n/a | |
| Hosting provider | Runs the application and stores the encrypted database (configured by the operator). | Set by the operator | n/a |
Open-data sources (no personal information sent): the Parliament of Canada's LEGISinfo and the Government of Canada's Open Government portal (open.canada.ca).
Updated 2026-06-13 · PoliPost Canada