This Privacy Policy explains what personal data Letter Mail, Inc. ("Letter", "we", "us") collects when you use letter.click and the Letter email service, how we use it, and the choices and rights you have.
Who we are
Letter is operated by Letter Mail, Inc., a Delaware corporation. For privacy matters, we are the "data controller" of your personal data. You can reach us at privacy@letter.click or our Data Protection Officer at dpo@letter.click.
What we collect
- Account information you give us: the name you choose, your Letter address, a recovery email address, and a password (which we store only as a salted hash, never in plain text).
- Your mail: the messages, attachments, contacts and folders in your mailbox, plus the technical metadata needed to deliver mail (sender, recipient, timestamps, routing headers).
- Usage and device data: log records such as IP address, browser or mail-client type, and the dates and times you connect, kept for security and troubleshooting.
- Billing data: your subscription status and history. Card details are handled by our payment processor and are never stored on Letter's own servers.
How we use it
- To provide, secure and maintain your mailbox and deliver your mail.
- To authenticate you, prevent fraud, abuse and spam, and protect the service.
- To take payment for your subscription and send you service and account notices.
- To meet legal and regulatory obligations.
We do not scan the content of your mail to build advertising profiles, and we do not sell your personal data.
Legal bases (EU/UK GDPR)
We process your data to perform our contract with you (running your inbox), to pursue our legitimate interests in keeping the service secure and abuse-free, to comply with legal obligations, and, where required, with your consent. See our GDPR & CCPA page for the detail.
Sharing and subprocessors
We share personal data only with vetted service providers ("subprocessors") who help us run Letter, such as cloud hosting and payment processing, under contracts that require them to protect your data and use it only on our instructions. We may also disclose data where legally required, or to protect the rights and safety of our users and the public.
Retention
We keep your data for as long as your account is open. When you close your account we delete or anonymise your mailbox and personal data within 30 days, except where we must keep limited records to meet legal, tax or security obligations.
Security
We protect your data with encryption in transit and at rest, strong password hashing, access controls and monitoring. See our Security page.
Your rights
Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. To exercise any of these, email privacy@letter.click. You will not be treated differently for exercising your rights.
Cookies
We use a small number of strictly necessary cookies to keep you signed in and remember basic preferences. We do not use advertising or cross-site tracking cookies. See our Cookie Policy.
International transfers
Letter is operated from the United States. Where we transfer personal data out of the EEA, UK or Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses.
Children
Letter is not intended for children. You must be at least 16 years old to create an inbox.
Changes
We may update this policy from time to time. If we make a material change we will notify you by email or in the app before it takes effect.
Contact
Questions? Write to privacy@letter.click, or see our full Contact & Abuse page.
← Back to letter.click