Privacy Policy

Last updated: February 19, 2026

1. Information We Collect

LetterLog collects the following information when you use our service:

  • Account information: Your name, email address, and a securely hashed password when you create an account.
  • Uploaded documents: Photos of postal letters you upload for processing. These images are sent to an AI service for text extraction and are not stored permanently on our servers after processing.
  • Extracted letter data: Structured data extracted from your letters (sender, dates, amounts, summaries) is stored in our database linked to your account.
  • Google Calendar tokens: If you choose to connect Google Calendar, we store OAuth tokens to create calendar events on your behalf.

2. How We Use Your Information

  • To process and extract data from uploaded letter images using AI.
  • To display your processed letters and their details on your dashboard.
  • To create calendar events for letter deadlines when you connect Google Calendar.
  • To authenticate and secure your account.

3. Data Sharing

We do not sell or share your personal data with third parties. Your letter images are sent to OpenAI for AI-powered extraction only. Google Calendar data is accessed only when you explicitly authorize it via OAuth. We do not share your information with advertisers.

4. Data Storage and Security

Your account data and extracted letter information are stored in a secure PostgreSQL database. Passwords are hashed using bcrypt. Sessions are managed with HTTP-only cookies. We use industry-standard security practices to protect your data.

5. Google API Services

LetterLog uses Google Calendar API to create events for letter deadlines. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request the minimum scopes necessary (calendar event creation) and store tokens securely.

6. Your Rights

You may request deletion of your account and all associated data at any time by contacting us. You may disconnect Google Calendar at any time, which will revoke our access to your calendar.

7. Contact

If you have questions about this privacy policy, please contact us through the application.