STATUTORY DATA GOVERNANCE · ZERO-PII RETENTION

Privacy Policy & Zero-PII Custody Architecture

EFFECTIVE DATE: OCTOBER 2026 · OPERATOR: ADAM MATAR D/B/A TDH AI LABS

1. Statutory CMRA Custody & Scope

PostalAgent.ai operates commercial mailroom facilities in accordance with United States Postal Service Domestic Mail Manual (DMM) § 508.1.8 and 18 U.S.C. §§ 1702 & 1708. We collect only the identity verification records strictly mandated by federal law (USPS Form 1583) and the routing coordinates required to deliver your digitized mail and bank check remittances.

ARCHITECTURAL INVARIANT · ZERO-PII LONG-TERM RETENTION

We never sell, broker, or train third-party foundation models on your physical correspondence, bank account numbers, or corporate filings. Physical mail items marked for destruction are cross-cut shredded to DIN 66399 Level P-4 standards.

2. USPS Form 1583 Identity Verification

To activate a commercial street address, federal postal regulations require two forms of government-issued identification and a notarized USPS Form 1583. These records are transmitted exclusively to the United States Postal Service Customer Registration Database (CRD) and encrypted at rest.

3. 300 DPI Scanning, OCR & Remittance Processing

Envelope and document scans are encrypted in transit (TLS 1.3) and at rest (AES-256-GCM). When you configure webhook or Model Context Protocol (MCP) endpoints, extracted structured payloads are signed with your tenant HMAC key and delivered directly to your designated server.

4. Contact & Data Deletion Requests

You may export or purge your digitized mail archive at any time from your suite ledger or by contacting our privacy officer at [email protected].