Privacy policy (draft)
Last updated: 25 October 2026. This is a working draft for the local MVP — finalise before go-live.
Who we are
“Letter Explainer” is a UK-facing tool that helps people understand official letters in plain English. Controller details (legal name, registered address, contact email) will be added here before public launch.
What this local demo does
In the current local demo, letter text is processed in your browser only by a mock explainer. It is not uploaded to our servers. No account is required.
What the live product will process
When a server-side model is connected, we expect to process:
- Letter text or images you choose to submit (please redact NI numbers and full account numbers where possible).
- Technical logs (e.g. time, letter-type label, error codes) with as little personal data as practical.
- Payment metadata from Stripe if you buy a pay-per-use decode (card details stay with Stripe).
- Optional email address only if we need to deliver a paid result by email.
Purposes and lawful bases (planned)
- Provide the decode you asked for — contract / steps needed to deliver the service.
- Improve reliability and prevent abuse — legitimate interests, with a documented assessment.
- Legal obligations — e.g. tax and accounting records for payments.
We will not use your letters to train public models unless we ask for clear, separate consent. AI use will be described in plain English on the decode page (ICO transparency expectation).
Retention
- Browser demo: nothing stored by us.
- Live decode (planned default): process → return result → delete letter content promptly (target: minutes, not days), unless you ask us to email a copy.
- Payments: keep Stripe/payment records as required for accounting.
- Support emails: keep only as long as needed to resolve the query.
Who we share with
Processors may include hosting (e.g. Vercel/Netlify), payments (Stripe), and an AI API provider — each under a contract with appropriate UK/EU transfer safeguards. We do not sell personal data to advertisers or data brokers.
Your rights (UK GDPR)
You may have rights to access, rectify, erase, restrict, object, and data portability, and to complain to the ICO. Contact details for requests will appear here at launch.
Cookies
The local demo does not set analytics cookies. If we add Google Analytics or ads later, we will show a consent choice before non-essential cookies.
Children
The service is aimed at adults dealing with their own official correspondence.
Changes
We will update this page when processing changes and highlight material updates before go-live.