Last updated: 2026-10-05
What a drop sends
The server reads the file before it is saved. A PDF is sent to Posh AI as the file. An image is sent as the image. For every other file, Posh takes the text out and sends that text. If the text is longer than 80,000 characters, Posh AI receives the first 80,000 characters. Posh refuses an empty file and a file larger than 10 MB.
Posh AI runs on a model provided by Anthropic, a US company, so the file or its text is processed by Anthropic to write the report. The call does not send a training setting. This page does not say what Anthropic keeps after the call. That was not checked against Anthropic's current terms.
What Posh stores
- If you are not signed in, Posh does not save the file and does not save the report. The file is still sent to Posh AI.
- If you are signed in and the database is configured, the report is saved in Neon Postgres. This code does not name a region for that database. A paid plan, or Posh staff, stores the text Posh AI returned. Anyone else gets a stored report cut to one section and 800 words. That cut does not shorten a stored copy of the file.
- Pasted text named pasted.txt is stored in the database. It is not uploaded to Vercel Blob.
- New original files use private Vercel Blob storage in Sydney (syd1), with owner-authorized access through Posh. If private storage is unavailable, signed-in file conversion stops. The database stores the file location, name, type, size and content hash. Earlier files may still have public links; no automatic migration is claimed.
- If the database is configured, Posh can also write a usage row with the model, the format, token counts, and how long the call took. That row does not include the file.
- Several files dropped together are stored as one ZIP file. A pasted Google Sheets, Docs, or Slides link is downloaded from Google by Posh's server and then treated like an uploaded file.
- A client setup stores its name, Prepared for, mode, report type, and the house rules you type.
- A schedule stores its name, the Google link, the client, the day, and up to five email addresses. On its day, Posh downloads the link and saves the report like an upload.
- When someone opens a shared link, Posh stores a one way hash made from their network address, browser, the report, and the day. The address itself is not stored. An approval stores the name and note the reader typed.
- Highlights and notes are stored with the report. Sign in is handled by Neon Auth.
- Stripe processes available card payments. The database can store a Stripe customer id and a subscription id. It does not store a card number.
- Resend is used to email a shared report only when a sender address is saved. It does not send the sign in email.
Public website analytics
With your permission, Google Analytics uses cookies to measure visits, scrolls and link clicks on public pages. Private reports, share links, uploaded files and form contents are excluded. URL queries and fragments are removed. Use Cookie preferences on any public page to allow or decline this measurement. Vercel Analytics and Speed Insights remain separate services.
With separate advertising permission, Meta Pixel measures visits to public marketing pages using advertising cookies and browser information, including the page URL and referrer. Our server may also share verified new-account and paid-purchase events, payment value and currency, and browser advertising identifiers with Meta. We exclude raw contact details, credentials, form contents, uploaded files and private page URLs. Conversion consent expires after 30 days; queued events are discarded after six days and recheck consent before delivery. Use Cookie preferences to withdraw permission. Analytics-only and earlier visit-only permission do not enable conversion sharing.
How long it stays
This code does not choose a number of days and then delete the file or the report. There is no scheduled deletion.
A signed in owner can delete a report they own. That removes the report record. Highlights and notes on that report go with it. The uploaded file stays, in Vercel Blob or as text in the database. To remove the original, use Delete original before deleting the report. It removes the saved bytes or pasted text while retaining the report and generation history. Existing processing, copies already downloaded, provider backups and prior AI processing are not revoked by that action.
What this page does not claim
- It does not claim a keep period, a backup window, or a log window.
- It does not claim that Posh sells files to advertisers. This code has no such sale.
- It does not claim an account export or a close account button. Those controls are not in this code.
- It does not name a database region, and it does not say the database is in Sydney.
Contact
This site does not list an email address. A fuller path for a dropped file is on where your files go.