Privacy Policy
Last updated: March 30, 2026
SendLetters respects your privacy. This policy explains what data we collect, how we use it, and who we share it with. We aim to collect only what we need to print and mail your letters.
Our privacy commitment in plain English
- We delete your letter content after printing and mailing. Once your letter is fulfilled, we don't keep it.
- We never read, analyze, or sell your letters. Your words are between you and your recipient.
- We don't store payment details. Stripe handles all payment processing — we never see your card number.
- We work with multiple printing partners to ensure reliability and competitive pricing. Each partner receives only the minimum data needed to print and mail your letter.
- No tracking cookies, no ads, no data brokers. We don't sell or share your data with advertisers.
1. Data We Collect
- Email address — Used for authentication (magic link login) and order confirmations
- Mailing addresses — Sender return address and recipient address, used to print and mail your letter
- Letter content — The text of your letter, used to print it and optionally process it through AI drafting
- Payment information — Processed by Stripe. We do not store your credit card number, CVC, or full card details on our servers
- IP address — Used for rate limiting and abuse prevention
- Basic usage data — Pages visited, orders placed, and feature usage to improve the service
2. How We Use Your Data
- Printing and mailing your letters
- Processing payments for your orders
- Sending authentication emails (magic link login)
- Looking up your elected representatives (politician letters)
- AI-assisted letter drafting (when you opt in)
- Rate limiting to prevent abuse
- Improving the service and fixing bugs
- Communicating with you about your orders
3. Third-Party Services
We share specific data with the following third parties, only as needed to operate the service:
| Service | Data Shared | Purpose |
|---|---|---|
| Stripe | Payment information, email | Payment processing |
| Lob | Sender address, recipient address, letter content | Printing and mailing letters |
| Resend | Email address | Sending authentication and notification emails |
| Anthropic (Claude) | Letter content (when AI drafting is used) | AI-assisted letter writing. Anthropic's API does not use your data for model training. |
| Google Civic API | Your address (for politician letters) | Looking up your elected representatives |
We do not sell your data to anyone. We do not share your data with advertisers. Each third party receives only the minimum data required for their specific function.
We work with multiple printing partners (including Lob, Thanks.io, and others) to ensure service reliability and quality. Regardless of which partner fulfills your order, they receive only the sender address, recipient address, and letter content — nothing else. All partners are contractually bound to use your data solely for printing and mailing your letter.
4. Data Retention
- Letter content — Deleted within 30 days after your letter is printed and mailed. We do not keep copies of your letters long-term.
- Order records — Kept for bookkeeping and customer support (order date, type, amount). You can request deletion.
- Account data — Kept as long as your account is active. Deleted upon request.
- IP logs — Retained for a limited time for rate limiting and security, then purged.
- Political letter data — Your address is used only to look up your representatives. We do not store your political opinions or share your political activity with anyone.
To request deletion of your data, email [email protected]. We will process your request within 30 days.
5. Cookies
SendLetters uses session-based cookies only for authentication. We do not use tracking cookies, analytics cookies, or advertising cookies. No third-party cookie trackers are present on this site.
6. Children's Privacy (COPPA)
SendLetters is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at [email protected] and we will delete it promptly.
7. California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect and how we use it
- Delete your personal information
- Opt out of the sale of your personal information (we do not sell your data)
- Non-discrimination for exercising your privacy rights
To exercise any of these rights, email [email protected]. We will verify your identity and respond within 45 days.
8. Security
We take reasonable measures to protect your data, including:
- HTTPS encryption for all data in transit
- Secure authentication via magic link (no passwords stored)
- Payment data handled entirely by Stripe (PCI-compliant)
- Rate limiting to prevent abuse
- Access controls limiting who can view order data
No system is perfectly secure. If you discover a security issue, please report it to [email protected].
9. Changes to This Policy
We may update this policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Continued use of SendLetters after changes constitutes acceptance of the updated policy.
10. Contact
If you have questions about this privacy policy or your data, contact us:
KeepAISharp
Redondo Beach, CA
[email protected]