Privacy Policy
Last updated: July 2026
The Letter is built on the belief that your messages deserve to stay private until you choose to open them. Here’s exactly what we collect, what we do with it, and how we protect it.
1. What we collect
We collect your email address when you sign up. We store the content of your time capsules (title, message, and any snapshot fields you fill in) so we can deliver them on your chosen date. If you opt in to text notifications, we also collect your phone number. We do not collect payment card details — those are handled entirely by Stripe.
2. How we use it
Your email is used to authenticate your account and to deliver your capsules on the dates you select. We do not use your email for marketing unless you explicitly opt in. We do not sell your data to third parties.
3. SMS & email delivery notifications
We collect phone numbers and email addresses solely to send capsule-delivery notifications (to you, or to your gift recipient). We do not share your phone number or email with third parties for their own marketing. By providing this information you confirm that the phone number and email are correct and belong to you, or that you are authorized to use them. Standard carrier message and data rates may apply to SMS. You can opt out of texts at any time by replying STOP to any message; you will still receive email notifications.
4. Your capsule content
Your messages are stored securely in our database. We do not read capsule content. Capsule content is only accessed programmatically to deliver it to your email on the scheduled date.
5. Cookies and tracking
We use essential cookies for authentication (via Supabase). We do not use advertising cookies or third-party tracking pixels.
6. Data retention
Your account, capsules, and any contact information you provide (email and phone number) are retained until you delete the capsule, delete your account, or request deletion. After a capsule is delivered, a copy may be retained for a reasonable period in case of delivery failure. You can request deletion of all your data by emailing hello@theletter.app.
7. Delivery guarantee & liability
We aim to deliver every capsule on its scheduled date and guarantee delivery on that date barring technical issues or events beyond our reasonable control. If a capsule fails to deliver due to our error, we will make reasonable efforts to re-deliver and, if we cannot, refund the purchase price for that capsule. To the fullest extent permitted by law, The Letter is not liable for emotional distress, lost time, or other indirect or consequential damages arising from a delayed or failed delivery. We are not responsible for delays or failures caused by carrier issues, incorrect contact information provided by the user (e.g., a wrong phone number or email), spam or filtering by email/SMS providers, or force majeure events such as outages, natural disasters, or other circumstances beyond our control.
8. Your privacy rights (GDPR & CCPA)
The Letter complies with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). You have the right to access, correct, export, or delete the personal data we hold about you, and to withdraw your consent to notifications at any time. We do not sell your personal information. To exercise any of these rights, email hello@theletter.app and we will respond within a reasonable timeframe.
9. Third-party services
We use Supabase for database and authentication, Stripe for payment processing, Resend for email delivery, and Twilio to send SMS notifications. We share only the data necessary for each service to perform its function (for example, your phone number is shared with Twilio only to deliver your text notification). Each of these services has its own privacy policy.
10. Contact
Privacy questions? Email us at hello@theletter.app. We will respond within 5 business days.