1. Introduction

Letterogram is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable laws as of January 19, 2025.

2. What Data We Collect

• Account Data: Name, email address, password (hashed), and subscription status.
• Usage Data: Letters and templates you create, usage statistics, and preferences.
• Device Data: IP address, browser type, device information, and cookies.
• Payment Data: Processed securely by Stripe; we do not store your full payment details.
• Plan Usage Data: Monthly generation counts, overage tracking, and plan limitations for billing purposes.

3. Service Plans & Limitations

4. How We Use Your Data

• To provide and improve our services
• To personalize your experience and recommend content
• To communicate with you about your account, updates, and support
• To track usage and enforce plan limitations
• To comply with legal obligations and prevent fraud

5. Cookies & Tracking

We use cookies and similar technologies for authentication, analytics, and improving user experience. You can manage your cookie preferences through our cookie consent banner or in your browser settings. We only use non-essential cookies with your explicit consent.

6. Data Sharing & Transfers

• We do NOT sell your personal data to third parties
• We may share data with trusted service providers (e.g., Stripe, email providers) under strict confidentiality agreements
• Data may be transferred and processed outside your country, including the EU and USA, with appropriate safeguards (e.g., Standard Contractual Clauses, Data Privacy Framework)
• For EU/EEA users: We ensure adequate protection for international transfers as required by GDPR

7. Your Rights

• Access, correct, or delete your data at any time via your account or by contacting us
• Object to or restrict certain processing
• Request data portability
• Withdraw consent for marketing at any time
• EU/EEA users: Right to lodge a complaint with your local data protection authority
• California residents: Exercise CCPA rights (access, delete, opt-out of sale)

8. Data Security

We use industry-standard security measures (encryption, access controls, monitoring) to protect your data. However, no system is 100% secure and we cannot guarantee absolute security.

9. Data Retention

We retain your data only as long as necessary for the purposes described or as required by law. You can delete your account at any time, which will remove all your personal data within 30 days.

10. Children's Privacy

Letterogram is not intended for children under 16. We do not knowingly collect data from children under 16. If we become aware that we have collected data from a child under 16, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notice at least 30 days before they take effect.

12. AI-Generated Content and Templates

When you use our AI letter generation feature, the generated letters are automatically saved as public templates with placeholders (e.g., {nev}, {cimzett}, {datum}). These templates become immediately available to all users of the platform. AI-generated templates are automatically approved and do not require moderation. By using the AI generation feature, you consent to this automatic public sharing. The templates contain no personal information, only placeholder fields that other users can fill in with their own data.

13. Contact

If you have questions or requests regarding your privacy, contact us at szollosee@gmail.com.