Privacy Policy

Last updated: October 3, 2026 · Last reviewed: October 3, 2026

Summary

We collect only what we need to generate your letter, deliver it, and process payment.
Your letter inputs are sent to our AI providers (Anthropic and, as a fallback, xAI) to generate the letter. Neither provider uses your data to train their models.
We do not sell your personal information. We use Google Analytics and Google Ads to measure visits and which ads lead to purchases. When you buy, your email address is sent to Google in hashed form to match the purchase to an ad click. When your browser sends a Global Privacy Control signal, the advertising part is off (see below).
Your questionnaire answers are saved as you type. If you enter your email and don't finish checking out, we send up to two reminder emails.
We delete letter content within 24 months of creating it and autosaved answers within 90 days of your last edit, unless you ask us to delete them sooner. You can request access, correction, deletion, or portability at any time.
Do not enter Social Security numbers, full bank or credit-card numbers, government ID numbers, or other highly sensitive data into the questionnaire. Use placeholders (e.g., "my SSN") and fill those in manually after downloading your letter.

Information We Collect

We collect the following information when you use LetterLotus:

Email address — used to send your receipt, communication about your order, and, if you don't finish checking out, the reminder emails described under "Marketing Communications".
Letter questionnaire inputs — the information you provide through our questionnaire to generate your letter. These inputs may include narrative descriptions of your circumstances, which can incidentally reveal sensitive information (such as health, financial, or legal context).
Autosaved answers — while you fill in the questionnaire, your answers (and your email address, once you enter it) are saved to our database as you go, including if you leave before finishing.
Address lookups — when you type into an address field, the text you type is sent to Google Maps Platform (Places) to suggest matching addresses.
Payment information — collected and processed by Stripe. We never see or store full card numbers. Stripe provides us limited metadata (last four digits, card brand, billing ZIP) for receipts, fraud prevention, and refund processing.
Session identifier — an anonymous UUID stored as a first-party cookie to maintain session continuity while you use the site.
Advertising and analytics data — Google Analytics and Google Ads cookies and the events they record (pages viewed, purchases, and when you start a questionnaire or view a preview, including which type of letter it is). If you arrive from an ad, we store the ad-click identifier (such as Google's gclid), the page you landed on, and the referring site in a first-party cookie and with your order.
Error reports — when something breaks, our error-monitoring service (Sentry) receives technical details: the error, the page address, and your browser and device type.
Basic usage data — pages visited, referral link clicks, and server logs (IP address, user agent, timestamp) used for security, debugging, and aggregate service improvement.

How We Use Your Information

Generate your letter based on the questionnaire inputs you provide
Save your questionnaire answers as you go, and review saved answers to see where people stop filling in the questionnaire so we can improve it
Send email receipts and order-related communication via Postmark
Send up to two reminder emails about a letter you started but didn't buy
Measure our advertising with Google Analytics and Google Ads, including sending Google a hashed copy of a buyer's email address with the purchase (Google "enhanced conversions")
Find and fix errors with Sentry
Process payments and refunds via Stripe
Detect and prevent fraud, abuse, and chargebacks
Improve our service using aggregate, deidentified usage data. We commit to maintaining that data in deidentified form, applying technical and business safeguards against re-identification, and not attempting to re-identify it.
Comply with legal obligations and respond to lawful requests

AI Processing of Your Inputs

LetterLotus generates letters using third-party large language model providers: Anthropic (Claude) as the primary model, and xAI (Grok) as a fallback when Claude is unavailable. When you submit your questionnaire, your responses are transmitted to one of these providers through their secure business APIs, and the generated letter is returned to you.

Under our agreements with these providers:

Your inputs and the generated letter are not used to train their AI models.
Anthropic retains API logs for up to 30 days for abuse-monitoring purposes before automatic deletion.
xAI retains API logs for up to 30 days for the same purposes.
Neither provider shares your data with third parties or uses it for advertising.

Because letter generation is automated and probabilistic, the output may contain inaccuracies, omissions, or fabricated information (commonly called "hallucinations"). You should carefully review every letter before sending it. Do not enter Social Security numbers, full bank or credit-card numbers, government ID numbers, protected health information beyond what is necessary for your letter, or information about minors under 13. If your letter requires reference to such data, use a generic placeholder and add specifics manually after download.

What We Store

Letter data — questionnaire inputs and generated output, stored in Supabase with encryption at rest and access restricted by row-level security.
Email address — retained for receipt delivery, order-related communication, and the reminder emails described below.
Autosaved answers — your in-progress questionnaire answers, deleted within 90 days of your last edit.
Session ID cookie — a strictly necessary first-party cookie. It is httpOnly, has a 12-month lifetime, and contains only an anonymous identifier. It is not shared with advertising or analytics providers.

What We Do Not Store

Full payment card details (Stripe handles all payment data directly)
Browsing history beyond our site
Biometric data or precise geolocation

Categories of Personal Information (CCPA)

In the preceding twelve months, we have collected the following categories of personal information, as defined by the California Consumer Privacy Act:

CCPA Category	Examples	Source	Purpose	Recipients	Retention
Identifiers	Email, session ID, IP address, ad-click identifiers	You; cookies; server logs; Google Ads links	Service delivery, receipts, reminder emails, security, ad measurement	Postmark, Supabase, Vercel, Sentry, Google (hashed email with a purchase; ad-click identifiers)	7 years (paid orders); 24 months (unpaid letters); 90 days (autosaved answers); 12 months (session cookie); logs per provider (see Data Retention)
Commercial information	Purchase records, refund history	Stripe	Fulfillment, accounting, fraud prevention, ad measurement	Stripe; Google (purchase value with a conversion)	7 years (tax/accounting)
Internet or network activity	Pages visited, questionnaire progress, referral clicks, user agent, error details	Cookies, Google tags, server logs, Sentry	Service improvement, debugging, security, ad measurement	Google (Analytics, Ads), Vercel, Sentry	Per provider (see Data Retention)
Inferences	None	—	—	—	—
Sensitive Personal Information (only when included in your letter inputs)	References to health (e.g., medical-debt hardship), financial account context, or criminal-justice context	You	Letter generation; autosave and questionnaire improvement	Anthropic / xAI (transient processing); Supabase (storage)	24 months (letters); 90 days (autosaved answers)

We do not sell personal information for money, and we have not done so in the preceding twelve months. We do use Google Analytics and Google Ads, which receive identifiers and activity from your browser and, when you buy, a hashed copy of your email address. Some state privacy laws may treat this as "sharing" personal information for cross-context behavioral advertising or as "targeted advertising." To opt out, turn on Global Privacy Control in your browser (see below) or email support@letterlotus.com.

Cookies and Tracking

We set these first-party cookies:

session_id — strictly necessary; keeps your session (12 months).
ll_attr — the ad-click identifier, landing page and referring site from your first visit, so a purchase can be credited to the ad or page that brought you (90 days).
ll_exp — which version of a page you were shown when we test page variations (1 hour).

We also load Google's tag (Google Analytics and Google Ads), which sets Google cookies to measure visits and ad conversions. In the European Economic Area, the United Kingdom and Switzerland these Google cookies are off by default. We do not use social-media trackers or fingerprinting tools.

Data Retention

Autosaved questionnaire answers: deleted within 90 days of your last edit.
Letters you didn't buy: deleted within 24 months of creating them, including your email address. If a checkout for the letter was started in the last 7 days (a payment may still be processing), we wait until 7 days after it before deleting.
Letters you bought: the content (your answers, the preview, your edits and the drafts) is deleted within 24 months of creating the letter. The order record (email address, amount and payment reference) is kept for 7 years from your purchase for tax, accounting, and chargeback-response purposes, then deleted by our next daily cleanup.
Session cookies: 12 months, or until you clear them.
Server logs and error reports: kept by Vercel (hosting logs) and Sentry (error reports) for the retention period of our plan with each provider, after which they delete them. We don't copy or archive these logs.
Analytics and advertising data: held by Google under its own retention settings.
Backups: deleted data can remain in our database provider's backups until those backups expire.
Stripe payment metadata: retained by Stripe per their own terms (typically 7 years).
AI provider logs: Anthropic and xAI each retain inputs and outputs for up to 30 days for abuse-monitoring before automatic deletion (see "AI Processing of Your Inputs" above).

You may request earlier deletion at any time (see "Your Privacy Rights" below). Some records may be retained longer where required by law or for legitimate fraud-prevention purposes.

Third-Party Services

We use the following third-party services to operate LetterLotus. Each service has its own privacy policy governing how it handles your data:

Stripe — payment processing. Stripe Privacy Policy
Supabase — database and file storage (US region). Supabase Privacy Policy
Postmark — email delivery (receipts and reminder emails). Postmark Privacy Policy
Vercel — hosting, edge functions, and server logs. Vercel Privacy Policy
Google — Google Analytics (site analytics), Google Ads (ad conversion measurement, including hashed buyer email for enhanced conversions), and Google Maps Platform (address suggestions in the questionnaire). Google Privacy Policy
Sentry — error monitoring. Sentry Privacy Policy
Anthropic — primary AI model (Claude) for letter generation. Anthropic Privacy Policy
xAI — fallback AI model (Grok) when Anthropic is unavailable. xAI Privacy Policy

Data Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit (TLS 1.2+), encryption at rest, row-level access control, least-privilege access, and rate-limiting. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

International Data Transfers

LetterLotus is operated from the United States, and our service providers process data primarily in the United States. If you access the service from outside the United States, your information will be transferred to and processed in the United States, which may have data protection laws different from those in your country.

Your Privacy Rights

Subject to applicable law, you have the right to:

Know what personal information we have collected about you, the categories of sources, the purposes of collection, and the categories of recipients.
Access a copy of the personal information we hold about you.
Correct inaccurate personal information.
Delete personal information we have collected, with certain exceptions required by law.
Portability — receive your information in a portable, structured, machine-readable format.
Opt out of the sale or sharing of personal information and of targeted advertising (we do not sell; see "Global Privacy Control" for advertising).
Limit the use and disclosure of Sensitive Personal Information (see below).
Non-discrimination — we will not deny service, charge different prices, or provide a different level of quality because you exercised your privacy rights.
Appeal a denial of any of these rights (where required by your state).

How to Exercise Your Rights

To exercise any of these rights, email support@letterlotus.com with "Privacy Request" in the subject line and a description of your request. To protect your information, we will verify your identity by confirming control of the email address associated with your account or order, and may request additional information if needed to confirm the request is legitimate.

We will acknowledge your request within 10 business days and respond substantively within 45 days, extendable by an additional 45 days when reasonably necessary (we will notify you if an extension is required).

You may designate an authorized agent to make a request on your behalf by providing the agent with written, signed permission and verifying your own identity directly with us.

If we deny your request in whole or in part, you may appeal by replying to our response within 60 days. We will respond to appeals within 60 days.

State-Specific Disclosures

Residents of certain U.S. states have additional rights under state privacy laws, including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Utah (UCPA), Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Indiana, Kentucky, Maryland, Minnesota, Nebraska, Rhode Island, and others. The rights summarized above apply to residents of these states to the extent provided by their respective laws.

California residents may also designate an authorized agent and have specific rights to know the categories listed above. We do not use or disclose Sensitive Personal Information beyond purposes permitted under Cal. Civ. Code §1798.121(d) (i.e., to provide the services you requested), and so the right to limit the use of Sensitive Personal Information does not apply to our processing.

Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals as an opt-out of sharing and targeted advertising. When your browser sends a GPC signal, our site does not load or configure the Google Ads tag for that browser, sets Google's advertising storage and ad-data consent to denied, turns off Google signals and ad personalization in Google Analytics, and does not send Google a purchase conversion or your hashed email address. We do not upload purchases to Google Ads from our servers. Google Analytics still measures site visits. You can also opt out by emailing support@letterlotus.com.

Sensitive Personal Information

Your questionnaire inputs may reveal Sensitive Personal Information (for example, references to health, financial accounts, or criminal-justice context) when relevant to your letter. We use this information to generate the letter you requested, to save your answers as you go, and to improve the questionnaire (for example, by seeing which questions people stop at). We do not send your answers to Google Analytics, Google Ads or any other advertising provider, and we do not use it to infer characteristics about you. Under Cal. Civ. Code §1798.121(d), these uses are exempt from the right to limit the use of Sensitive Personal Information.

Automated Decision-Making

Letter generation is fully automated using large language models. The output is content, not a decision about you (such as eligibility, pricing, or risk scoring). You always have the right to review, edit, or discard the output before you use it. If you would like to understand the general logic involved, email support@letterlotus.com.

Children's Privacy

Our service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn we have collected such information, we will delete it. If you believe we may have collected information from a child under 13, please contact us so we can investigate.

Data Breach Notification

If a breach affects your private information and you live in New York, we will notify you as New York General Business Law § 899-aa (the SHIELD Act) requires — in the most expedient time possible and without unreasonable delay, and no later than 30 days after the breach is discovered, unless a law-enforcement agency determines that notice would impede a criminal investigation. Wherever you live, we will also notify you as other state and federal breach-notification law requires.

Marketing Communications

We send transactional emails (receipts, order updates, deletion confirmations). If you enter your email address in the questionnaire and don't finish checking out, we also send up to two reminder emails about that letter, without asking you to opt in first: a reminder about 30 minutes later, and a day after that, an offer of 20% off. We stop when you buy, unsubscribe, or the address bounces. Every reminder has an unsubscribe link, and you can also opt out by emailing support@letterlotus.com. We comply with the CAN-SPAM Act for all commercial email.

Users in the EU and UK

LetterLotus is offered from the United States and primarily directed to U.S. customers. If you are located in the European Economic Area, United Kingdom, or Switzerland and use the service, the following applies:

Controller: LetterLotus is the controller of your personal information.
Lawful bases: performance of a contract (to generate and deliver your letter); legitimate interests (security, fraud prevention, service improvement); consent (where required); and legal obligations (tax, accounting).
Transfers: your information will be transferred to and processed in the United States. We rely on Standard Contractual Clauses or equivalent safeguards with our processors where applicable.
Rights: in addition to the rights listed above, you may lodge a complaint with your local supervisory authority.
Retention: as described above, with the same deletion-on-request procedures.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. For material changes, we will provide additional notice (such as a banner on the site or an email to recent customers) at least 14 days before the changes take effect. We review this policy at least annually.

Contact

For privacy-related questions, requests, or appeals, email us at support@letterlotus.com, or write to Archelaus LLC, 348 4th Avenue #1040, Brooklyn, NY 11215, United States. Archelaus LLC, a New York limited liability company, is the controller for the information described here. California residents may also see our California-specific notice in our Terms of Service.