Privacy Policy

We collect the minimum we need to run letterforu: your email if you sign in, the letter content you write, the media you upload, and basic payment data via our processor. We don't sell your data. We don't scan your letters for advertising. You can delete everything at any time.

Account information. If you sign in, we store your email and, for Google sign-in, the basic profile fields Google shares.

Letter content. The words, photographs, and music you add to a letter, plus the template and layout you chose.

Media uploads. Photos and audio files you upload live in our secure Supabase storage bucket, associated with the letter you added them to.

Payment data. Handled by our payment processors (Whop or Stripe). We receive a payment status and a transaction reference, not your full card number.

Basic device data. Standard logs (IP address, user agent, page paths, timestamps) that help us keep the service running and secure. We don't use cross-site tracking or ad networks.

We use your information to:

• Render your letter and deliver it via a shareable link
• Let you edit, save, and revisit your drafts
• Process payments and provide receipts
• Send transactional messages (payment receipts, security alerts, replies)
• Investigate abuse or protect users from harmful content
• Fix bugs and understand aggregate usage patterns

We do not use your letters for advertising, machine-learning training, or third-party marketing.

letterforu relies on trusted vendors. Each is contractually bound to protect your data:

• Supabase — database, authentication, storage for uploaded media
• Whop / Stripe — one-time payment processing
• Google Translate — optional language switcher (activated only if you pick a non-English language; the translation happens in your browser)
• Cloud hosting — servers that run the application

We don't sell, rent, or trade your personal information to anyone else.

Letters and their media are kept as long as the account exists or until you delete them. Payment records are kept for as long as our financial-record laws require (typically 7 years). Server logs are rotated within 90 days.

If you delete a letter, the record and its media are removed from live storage within 30 days. Encrypted backups may retain a copy for up to 90 days before they roll off.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct anything that's inaccurate
• Delete your account and letters
• Export a copy of your letters
• Object to certain processing or withdraw consent

Most of these are available directly in your dashboard. For anything else, email us — a real person will handle the request.

We use a small number of cookies and browser local-storage keys to keep you signed in, remember your language preference, and track which drafts you own on this device. We don't use tracking cookies or third-party advertising cookies.

Data in transit is encrypted with TLS. Passwords and payment tokens are never stored in plaintext. Access to production systems is limited to a small number of engineers using multi-factor authentication. No system is perfect — if we ever suffer a breach affecting your data, we'll notify you promptly and honestly.

letterforu is intended for users aged 16 and older. We don't knowingly collect information from anyone younger. If you believe a child has provided us data, contact us and we'll delete it.

Our vendors may process data in countries other than the one you live in. Where required, we use standard contractual clauses and other legal safeguards to keep your data protected wherever it travels.

We'll update the "Last updated" date at the top when this policy changes. For material changes, we'll notify you before they take effect. You can always find the current version at /privacy.