Privacy policy
Last updated 2026-10-10.
The short version
We collect what the Service needs to work and nothing more. We do not sell your personal information. We do not use the contents of your case to train anything. Your case notes concern a legal dispute and we treat them accordingly.
What we collect
- Account — email address and a hashed password. We never store your password in a readable form.
- Case information — the names, addresses, amounts, dates and descriptions you type in order to generate letters and court forms. This is the sensitive part, and it exists because you asked us to produce a document from it.
- Documents — the PDFs we generate for you, stored so you can download them again.
- Payment — a Stripe customer reference, your plan and its status. Card details never reach our servers; Stripe handles them.
- Mailing — for a letter you ask us to send, the recipient address and the tracking record, shared with our print-and-mail provider.
- Technical — aggregate, privacy-respecting analytics (page views and conversions). We do not use cross-site advertising trackers.
- Support — messages you send us, so we can answer them.
Why we collect it
To create your account and let you log in; to generate the documents you ask for; to take payment; to post a letter you have asked us to post; to answer your support requests; to keep the Service secure and working; and to meet legal obligations.
Who we share it with
Only the providers needed to run the Service, and only what each one needs:
- Cloudflare — hosting, database and file storage.
- Stripe — payments. They receive your email and payment details; we receive a reference.
- Our print-and-mail provider — only for letters you ask us to send, and only the letter and the addresses.
- Email delivery — to send transactional email such as verification and receipts.
We will disclose information if legally compelled, and we will tell you unless we are prohibited from doing so.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
How long we keep it
- Account — while your account is open.
- Case data and documents — while your account is open, so you can come back to a case. Delete a case and we remove it, and deleting your account removes all of it.
- Mailing records — we keep the tracking and delivery record, because that is the proof you bought and may need in court.
- Payment records — as long as tax and accounting law requires.
Security
Encryption in transit; passwords hashed; sessions in secure HttpOnly cookies; rate limiting on authentication; access to production data limited to those who need it. No system is perfectly secure, and we will notify you promptly if a breach affects your information.
Your California rights
If you are a California resident you have the right to know what we hold about you, to get a copy, to correct it, to delete it, and to limit the use of sensitive personal information. You also have the right not to be discriminated against for exercising any of these rights — the price and the Service stay the same.
To exercise any of them, email [email protected] from your account address, or delete your account directly from your settings page. We respond within 45 days.
Children
The Service is not for anyone under 18 and we do not knowingly collect their information.
Changes
Material changes will be posted here with a new date, and emailed to account holders.