This policy explains which personal data Courio processes when you, or an AI agent acting for you, quote, pay for and follow a letter, and what rights you have. It also applies to the recipients of the letters.
1. Data controller
Tallandier Holding (SASU), 8 rue Aristide Briand, 67450 Mundolsheim, France, operating Courio. Contact for any question about your data: support@courio.si.
2. Data we process
- Addresses: the sender’s and the recipient’s names and postal addresses, and the sender’s email address when it is given.
- The document: the PDF (or the text we lay out as a PDF), with whatever it contains. We do not read it, except through the automated moderation and, for letters printed by our team, at printing.
- Proofs and tracking: tracking number, proof of mailing, proof of delivery and the letter’s status history.
- Payment: for a card payment, Stripe collects the card details; we only keep the Stripe session and payment references, the amount and the email given to Stripe. For an x402 payment, the paying wallet address and the transaction hash, which are public on the blockchain.
- Technical data: your IP address, which we store only as a keyed hash, never in clear; the user agent and the optional
X-Agent-Idheader; the webhook URL you give. - Usage statistics: pages viewed and steps of the order, measured without cookies.
3. Why, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Quote, print, mail and track the letter; supply proofs; refund when it cannot be mailed | Performance of the contract (art. 6(1)(b)) |
| Keep accounting records | Legal obligation (art. 6(1)(c)) |
| Moderate content, prevent fraud and abuse, apply daily limits | Legitimate interest in a lawful and safe service (art. 6(1)(f)) |
| Measure the use of the site and the API to improve them | Legitimate interest (art. 6(1)(f)), without cookies |
| Process the recipient’s address and the content addressed to them | Legitimate interest of the sender and of Courio in delivering the letter (art. 6(1)(f)) |
4. Automated moderation
When a letter is quoted, the document is checked by automated rules and sent to an AI model operated by Anthropic, which classifies it (for example threats, fraud, impersonation). A refused document gets no quote and nothing is charged. This decision has no other effect; you can ask for it to be reviewed by a person by writing to us with the quote id. Under its commercial terms, Anthropic does not use these documents to train its models.
5. Providers who process data for us
| Provider | What for | Where |
|---|---|---|
| Clever Cloud | Hosting of the API, the website, the database and the document storage | France (Paris region) |
| Cloudflare | DNS and network proxy in front of the website and the API (security, traffic measurement), and relay of the audience statistics sent to PostHog | Worldwide network, with transfers to the United States |
| Stripe | Card payments and refunds (Stripe Checkout) | Ireland, with transfers to the United States |
| Anthropic | Automated content moderation of each document when it is quoted | United States |
| PostHog | Audience and usage statistics, without cookies | European Union (PostHog EU cloud) |
| PayAI (x402 facilitator) | Settlement of x402 payments on the Base network, only when you pay that way | Public blockchain (worldwide) |
| Printing and mailing partners | Printing, enveloping and posting, depending on the destination: Seeuletter (France), Pingen (Switzerland), Lob (United States), ClickSend (Australia). Today, letters are printed by our own team. | Country of the partner |
| Postal operators | Carriage and delivery of the letter, tracking and proofs | Country of departure and destination |
Some providers are outside the European Union (Anthropic, Stripe, Lob, ClickSend).
6. How long we keep data
| Data | Duration |
|---|---|
| Quotes not turned into a letter (addresses and document) | 30 days from the quote |
| Letters: sender and recipient addresses, document | 1 year from mailing; 10 years for registered letters, like their proofs |
| Proofs of mailing and of delivery | 10 years from mailing, to let you prove the sending |
| Payment and accounting records (amount, date, payment reference) | 10 years (French Commercial Code, article L123-22) |
| Hashed IP address, user agent, agent id | Same duration as the quote or letter they belong to |
7. Deleting your data
Write to us with the letter_id or quote_id concerned. We delete the document and the addresses
within one month, except what we must keep: accounting records, and the proofs and addresses of a registered letter that
has already been mailed, which you may need as evidence. A letter that has been paid but not yet mailed cannot be deleted
before it is mailed.
8. Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, and to data portability. Recipients of letters have the same rights. Write to support@courio.si; we answer within one month. You may also lodge a complaint with the CNIL (cnil.fr) or with the supervisory authority of your country.
9. Security
- Documents and proofs are stored in a private bucket and are only reachable through signed links that expire.
- Without the API key that created it, a letter’s status only shows the recipient’s city and country.
- IP addresses are stored hashed with a secret key.
- The back office is protected by a secret token and never shows addresses in lists or notifications.
10. Cookies
The site sets no cookie. Statistics are measured without cookies or local storage. The only data kept in your browser is your choice of the “Human / Agent” label view, in local storage.