Privacy

Short and plain.

Last updated 2026-04-22. Written for humans, not lawyers.

What we collect

  • The details your agent sends us to place an order: card choice, message text, recipient US address, your (sender) US address, and receipt email.
  • A server log of your API calls (timestamp, URL, HTTP status) for 30 days. Used to debug and to keep abusive traffic out.
  • A short-lived record of each order, kept so you can open your preview URL and finish checkout. Deleted after 30 days.

What we do NOT collect

  • Your payment details.Checkout happens on Postable’s website via Stripe. We never see, store, or process your card number, CVV, billing address, or anything Stripe-related.
  • No tracking pixels, no analytics that identify you personally, no ad networks.
  • No chat transcripts from Claude / ChatGPT / other agents.

Who we share it with

Only Postable, and only the fields they need to print and mail your card: recipient address, sender address, message text, and card choice. Postable has their own privacy policy at postable.com/privacy.

Infrastructure sub-processors (Vercel for the marketing site, Fly.io for the API, npm for the MCP distribution) can see aggregated network traffic but not your order contents.

We do not sell data to anyone. Full stop.

How long we keep it

  • Order records: 30 days after creation.
  • Server access logs: 30 days.
  • Preview artifacts (rendered card PNGs): 30 days.
  • After 30 days, all order-identifying data is deleted or irreversibly aggregated.

Security

Traffic is HTTPS-only. Preview URLs are signed with HMAC so only the recipient of the URL can open the preview. The API is stateless between requests except for your order record.

Your choices

  • Delete an order: email hi@cards-for-agents.com with the order id or recipient name — we’ll delete it the same day.
  • Uninstall the MCP server: remove the cards-for-agents entry from your claude_desktop_config.json, or delete the Custom GPT from ChatGPT.
  • Stop placing orders: don’t place any. We only hold data for orders you create.

Agents

We assume the human driving the AI is who we’re dealing with. If you’re using an agent on someone else’s behalf, make sure they’ve consented to the card being sent.

Changes

If we change how we handle data in a material way we’ll update this page and the Last updateddate at the top. We won’t retroactively apply new terms to data already collected.

Contact

Questions: email hi@cards-for-agents.com. We’ll reply within a few business days.