Last updated: 2026-09-28
What a drop sends
The server reads the file before it is saved. A PDF is sent to Posh AI as the file. An image is sent as the image. For every other file, Posh takes the text out and sends that text. If the text is longer than 80,000 characters, Posh AI receives the first 80,000 characters. Posh refuses an empty file and a file larger than 10 MB.
Posh AI runs on a model provided by Anthropic, a US company, so the file or its text is processed by Anthropic to write the report. The call does not send a training setting. This page does not say what Anthropic keeps after the call. That was not checked against Anthropic's current terms.
What Posh stores
- If you are not signed in, Posh does not save the file and does not save the report. The file is still sent to Posh AI.
- If you are signed in and the database is configured, the report is saved in Neon Postgres. This code does not name a region for that database. A paid plan, or Posh staff, stores the text Posh AI returned. Anyone else gets a stored report cut to one section and 800 words. That cut does not shorten a stored copy of the file.
- Pasted text named pasted.txt is stored in the database. It is not uploaded to Vercel Blob.
- For any other file, if Vercel Blob is configured, the bytes are uploaded there with public access. The file storage code says that store is provisioned in syd1. Anyone with the link can open the file. The database stores the link, the file name, the type, the size, and a content hash.
- If the database is configured, Posh can also write a usage row with the model, the format, token counts, and how long the call took. That row does not include the file.
- Several files dropped together are stored as one ZIP file. A pasted Google Sheets, Docs, or Slides link is downloaded from Google by Posh's server and then treated like an uploaded file.
- A client setup stores its name, Prepared for, mode, report type, and the house rules you type.
- A schedule stores its name, the Google link, the client, the day, and up to five email addresses. On its day, Posh downloads the link and saves the report like an upload.
- When someone opens a shared link, Posh stores a one way hash made from their network address, browser, the report, and the day. The address itself is not stored. An approval stores the name and note the reader typed.
- Highlights and notes are stored with the report. Sign in is handled by Clerk.
- When card checkout is connected, Stripe processes the payment. The database can store a Stripe customer id and a subscription id. It does not store a card number.
- Resend is used to email a shared report only when a sender address is saved. It does not send the sign in email.
How long it stays
This code does not choose a number of days and then delete the file or the report. There is no scheduled deletion.
A signed in owner can delete a report they own. That removes the report record. Highlights and notes on that report go with it. The uploaded file stays, in Vercel Blob or as text in the database. There is a function that can delete a Blob object. The delete actions do not call it.
What this page does not claim
- It does not claim a keep period, a backup window, or a log window.
- It does not claim that Posh sells files to advertisers. This code has no such sale.
- It does not claim an account export, an analytics opt out, or a close account button. Those controls are not in this code.
- It does not name a database region, and it does not say the database is in Sydney.
Contact
This site does not list an email address. A fuller path for a dropped file is on where your files go.