Privacy-focused email infrastructure for product teams
Postscale combines transactional sending, inbound webhooks, masked email aliases, suppressions, DMARC reporting, retention controls, and GDPR documentation for teams that treat email as sensitive product infrastructure.
Need the full developer surface? Start with the email API platform for sending, inbound, SMTP, and aliases.
EU/EEA-hosted primary service data
Primary production service data is hosted in the EU/EEA, with documented safeguards for limited infrastructure metadata where required.
Masked addresses for users
Generate revocable aliases that forward to real inboxes so users can communicate without exposing personal addresses in your product.
Inbound privacy controls
Receive parsed inbound email through signed webhooks, store attachments separately, and route messages through rules before your app processes them.
Authentication and DMARC visibility
Use DKIM, SPF, DMARC, return-path alignment, and parsed DMARC reports to reduce spoofing risk and catch unauthorized senders.
Suppressions by default
Keep hard bounces, complaints, unsubscribes, and manual blocks close to the send pipeline so privacy-sensitive workflows do not repeatedly contact recipients who should be excluded.
Clear processor documentation
Link your legal and procurement reviews to the DPA, subprocessors page, privacy policy, data retention docs, and provider comparison material.
curl -X POST https://api.postscale.io/v1/shield/aliases \
-H "Authorization: Bearer ps_live_..." \
-H "Content-Type: application/json" \
-d '{
"forward_to": ["user@example.com"],
"description": "marketplace:buyer-481"
}'Frequently asked questions
What is privacy-focused email infrastructure?
It is an email platform design that treats addresses, message metadata, inbound content, attachments, suppressions, and authentication signals as sensitive product data, not just delivery logs.
Does Postscale replace a consumer mailbox?
No. Postscale is application email infrastructure for sending, receiving, forwarding, and processing product email. It is not a Gmail, Outlook, or Proton Mail replacement.
How do masked email aliases improve privacy?
A masked alias lets your product communicate with a user while hiding the user's real inbox. If an alias is leaked, abused, or no longer needed, it can be disabled without changing the user's real address.
Where should legal teams start?
Start with the DPA, subprocessors page, privacy policy, and the EU email API GDPR comparison. Engineering should review retention, webhook signing, suppressions, and domain authentication at the same time.
Further reading
Masked Email API
Add product-native aliases and forwarding addresses to protect user inboxes.
Inbound Email API
Process incoming messages as signed webhooks with parsed metadata and attachment links.
EU-hosted email API GDPR comparison
The DPA, subprocessor, and transfer-safeguard questions teams should ask email providers.
Why masked emails are the future of online privacy
The case for masked addresses as a product feature rather than an inbox-only consumer tool.
Data Processing Agreement
Review Postscale's standard GDPR DPA for vendor assessment and procurement.
Subprocessors
Review the documented service providers used to operate Postscale.
Ready to build?
Free tier includes everything you need to evaluate. No credit card required.
Create a free account