Privacy

This policy describes the MVP of Demand Letter Builder. It is written in plain language.

Letter text

We do not store the body of your letter on our server. The form is sent to a server route so a draft can be generated, and the response is returned to your browser. The letter, the form, and any download unlock token then live in this browser’s session storage. If you close the browser or clear site data, we cannot restore the letter, because we did not keep a copy.

Do not type a Social Security number, a bank account number, a routing number, or a full payment-card number. The form rejects text that looks like those numbers.

Model provider

When an OpenAI API key is configured, the facts you submit are sent to OpenAI to draft the letter. OpenAI’s API data terms apply to that processing. In local sample mode, the letter is assembled on the server from your form and the checked statute notes, and it is not sent to a model.

Payments

Paid checkout is handled by Lemon Squeezy, which receives your email and payment details on its own pages. We do not receive your card number. To unlock a download, you can give us the order number and the email on the receipt so we can ask Lemon Squeezy whether that order was paid. We do not attach your letter to that order.

A paid receipt can unlock downloads for 7 days (one letter) or 30 days (three letters) in the browser where the letter still exists. After that window, the unlock token expires. We do not keep a server archive of letters to delete, because the letters were not stored.

Rate limits and analytics

The draft route keeps a short-lived count of requests per IP address in the memory of the server instance, so one network cannot generate unlimited free drafts. That count is not a user account. If Vercel Web Analytics is enabled, it records page views. If a Google Analytics measurement ID is configured, the site loads Google Analytics. Those tools do not receive the letter text from us.

Age and place

The paid product is for adults in the United States. Do not use the form for someone else’s sensitive personal data.