This Privacy Policy explains how LetterClare ("we", "us") processes personal data when you use our website and service that translates and explains German official letters into plain English.

1. Data controller

LetterClare operates the service available at letterclare.com. For privacy questions, contact us at privacy@letterclare.com.

2. What we collect

Account data: email address, first name, and a hashed password when you sign up.
Letter content: the text, images, or PDFs you upload, and the explanations we generate from them.
Usage data: basic logs (timestamps, IP, browser) needed to operate and secure the service.
Billing data (Pro only): handled by our payment processor; we receive subscription status, not your card details.

3. Where your data is stored

All application data is stored within the European Union, on infrastructure located in Frankfurt, Germany (AWS region eu-central-1). This is the primary region for our database, authentication, and file storage.

4. Sub-processors

To provide the service, we share data with the following sub-processors:

Supabase (database, auth, storage) — EU region.
Anthropic (AI model that generates the explanations) — your letter content is sent to Anthropic's API to produce the explanation. Anthropic does not train models on API content.
Lemon Squeezy (payments for Pro plan) — when applicable.
Email delivery provider for transactional emails (sign-up confirmation, password reset).

5. Legal basis (GDPR Art. 6)

Performance of a contract — to provide the explanation service you requested.
Legitimate interest — to secure and improve the service.
Consent — for non-essential cookies, where applicable.
Legal obligation — to keep billing records.

6. Retention

Account and letter history are retained while your account is active. You can delete your account at any time by contacting us, after which personal data is deleted within 30 days, except where we are required to retain it (e.g. invoices).

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to lodge a complaint with your local data protection authority.

8. Cookies

We use only essential cookies required for authentication and to remember your cookie preference. We do not use advertising or cross-site tracking cookies.

9. Changes

We may update this policy. Material changes will be announced on this page with an updated date above.