Privacy notice

Who is responsible

The controller is SyncLex OÜ, Merekalju tn 6, 13521 Tallinn, Estonia, registration 17476899. Write to support@demandletterpack.com with any privacy question.

What we use and why

• Your email address, to send your documents, the link to your draft and order, and the confirmations the law requires. Basis: our contract with you.
• Your answers: the names and addresses of you and the other party, what was agreed, amounts, dates, what happened, and the payment details for the letter. We ask only for what goes into the documents. Basis: our contract with you.
• Files you upload as evidence, kept in private storage. We extract the text of your uploaded files and send it once to the AI provider, which suggests a short summary of each file. You check and edit the summary; only the summary is used in your documents, and the files themselves are never sent. Basis: our contract with you.
• Payment records: amount, currency, date, tax and payment references. Stripe handles your card or bank details; we never see them. Basis: our contract with you and our legal duty to keep accounting records.
• Your confirmations at checkout (the AI disclosure and, for EU buyers, the request to start straight away), with the time you gave them. Basis: our legal duty to be able to show them.
• Technical data: your IP address and email address, turned into one-way codes to limit abuse and kept for at most one day. Basis: our legitimate interest in keeping the service secure.

You need to give us the information the form asks for: without it we cannot prepare your documents. Please leave out health information and other sensitive details the letter does not need. You give us the other party's name and address because your letter needs them; make sure you have a lawful reason to use them.

No decision with legal or similarly significant effects is made about you by automated means. You decide whether to send anything.

Who else handles it

• Anthropic (San Francisco, United States): the AI model provider. It receives your answers, your file summaries and the text of your uploaded files to write your documents.
• Mistral AI (Paris, with hosting in the European Union): the backup AI model provider, used only when Anthropic is unavailable.
• Supabase: database and file storage, in a data centre in the European Union.
• Stripe: payments and tax calculation.
• Resend: sending emails.
• Vercel: hosting the website and running the application.

They work for us under data processing agreements and may use your information only to provide their service to us. Under its commercial terms, Anthropic does not use it to train its models. We never sell your information and never contact the other party.

Some of these providers are in the United States or may process data there. Those transfers are covered by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework, as applicable. Write to us for a copy of the safeguards.

How long we keep it

• Your answers, uploaded files and documents: deleted 30 days after delivery, or straight away when you ask.
• Drafts you never pay for: deleted 30 days after your last change.
• The record of the sale (amount, dates, payment references and your checkout confirmations): kept as long as accounting and tax law requires, without your email address once your data is deleted. Stripe keeps its own payment records under its own privacy policy.

Cookies

We set one strictly necessary cookie. It holds the key to the draft you are working on, so your draft survives a page refresh and the payment step, and it expires after 30 days. We use no analytics, advertising or tracking cookies, so we do not ask for cookie consent. Before your draft is saved, your answers on the first step stay in your browser tab only.

Your rights

You can ask for access to your information, and for it to be corrected, deleted, restricted or given to you in a portable format, and you can object to its use. The quickest way to delete everything is the “Delete my data now” button on your order page or the link in your delivery email. For anything else, write to support@demandletterpack.com.

You can also complain to a data protection authority: the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), our lead authority, or the authority in the country where you live or work, such as the Autoriteit Persoonsgegevens in the Netherlands.

Security

Your order opens only with the private link we email you. Files and documents are kept in private storage, and all connections are encrypted.