Privacy Policy

Your privacy matters to us. Here's how we protect it.

Last updated: January 2025

🛡️

Our Commitment to You

At Wax Letter, we believe that trust is the foundation of every relationship. We handle your personal information with the same care and attention we put into crafting each wax-sealed letter. Your data is yours, and we're committed to protecting it.

The Quick Version

🚫
We Never Sell Your Data

Your information is never sold to third parties. Period.

🔒
Encrypted & Secure

All data is encrypted in transit and at rest.

🗑️
Easy Deletion

Request complete data erasure anytime via our contact form.

👁️
No Hidden Tracking

We only collect what's necessary to deliver your letters.

1. Information We Collect

We collect only the information necessary to provide our letter-mailing service:

  • Account Information: Email address and password when you create an account
  • Recipient Data: Names and mailing addresses for letter delivery
  • Letter Content: The messages you compose for your letters
  • Payment Information: Processed securely through Stripe; we never store your full card details
  • Usage Data: Basic analytics to improve our service (pages visited, features used)

2. How We Use Your Information

Your data is used exclusively for:

  • Printing and mailing your letters to the specified recipients
  • Processing payments and sending receipts
  • Communicating with you about your orders and account
  • Improving our service based on usage patterns
  • Sending occasional service updates (you can opt out anytime)

We do not: Use your data for targeted advertising, sell it to marketers, or share it with data brokers.

3. How We Protect Your Data

Security isn't an afterthought—it's built into everything we do:

Encryption in Transit

All data transmitted between your device and our servers uses TLS 1.3 encryption (HTTPS).

Encryption at Rest

Your data is encrypted when stored in our databases using AES-256 encryption.

Secure Infrastructure

We use industry-leading cloud providers with SOC 2 compliance and regular security audits.

Access Controls

Only authorized personnel can access customer data, and all access is logged and monitored.

4. Third-Party Access

We do not sell, rent, or share your personal information with third parties for their marketing purposes. The only exceptions are:

  • Payment Processing: Stripe processes payments on our behalf with their own strict privacy standards
  • Letter Fulfillment: Recipient addresses are used solely for postal delivery
  • Legal Requirements: We may disclose information if required by law or to protect our rights

We carefully vet any service providers and require them to protect your information.

5. Data Retention

We keep your data only as long as necessary:

  • Account Data: Retained while your account is active
  • Order History: Kept for 7 years for tax and legal compliance
  • Letter Content: Automatically deleted 30 days after successful delivery
  • Recipient Addresses: Retained until you delete them or request removal

6. Your Rights & Choices

You have full control over your data:

  • Access: Request a copy of all data we have about you
  • Correction: Update or correct any inaccurate information
  • Deletion: Request complete erasure of your data from our systems
  • Portability: Receive your data in a standard format
  • Opt-out: Unsubscribe from marketing communications at any time
Want Your Data Deleted?

Simply contact us through our contact form and request data erasure. We'll process your request within 30 days and confirm when complete.

7. Cookies & Tracking

We use minimal cookies to make our service work:

  • Essential Cookies: Required for login sessions and security
  • Preference Cookies: Remember your settings and choices
  • Analytics Cookies: Help us understand how people use our service (anonymized)

We do not use cookies for advertising or cross-site tracking.

8. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect information from children. If you believe we have collected data from a child, please contact us immediately.

9. Changes to This Policy

We may update this policy from time to time. When we make significant changes, we'll notify you by email or through a notice on our website. Your continued use of our service after changes constitutes acceptance of the updated policy.

10. Contact Us

Questions about your privacy or this policy? We're here to help:

  • Use our contact form
  • Email us directly with "Privacy" in the subject line

We respond to all privacy inquiries within 48 hours.

Have questions about how we handle your data?

Contact Us