Privacy
Loopletter exists to share what you choose, with whom you choose, and nothing else. This page says what we keep, why, who helps us run it, and what you can ask for. The data controller is Paul Leprevost, 13 le Guignoux, 44630 Plessé, France. Write to hello@loopletter.app about anything here.
If you write with Loopletter
- Your account: email address, name, handle, time zone. To sign you in and sign your letters.
- Your entries and files: what you log, with its time, where it came from (typed, your phone, your assistant) and the files you attach. They are private: only you see them. Deleted entries are kept 30 days so you can undo, then erased with their files.
- Your letters: their settings, drafts, published issues, how a draft compares with what you sent (so the next draft sounds more like you), and a short private note the writer keeps on what each letter’s reader cares about, which you can edit or undo. Only published letters are seen by others, as their page settings say.
- Your readers: the addresses and names you add, whether they’re subscribed, who got which letter and whether it was delivered, and their replies and reactions.
- Your subscription: its status and plan. Paddle handles the payment: we never see your card.
- Your Autolog address: stored only as a hash, and which assistants used it and when.
- Small usage counts (an entry was added, a letter drafted and what it cost to write), kept 13 months, to improve the product and keep fair-use limits.
Legal basis: the contract between us (running the service you subscribed to), and our legitimate interest in keeping it secure, working and fairly used. We never sell data, never show ads, and never use what you write to train AI models.
If you receive letters
Someone who writes with Loopletter added your address, or you asked to get their letter. We keep your address, your name if you gave it, which letters you got, and your replies and reactions, to deliver their letter and show your replies to them (and, if they chose shared replies, to their other readers). Every email has a one-click unsubscribe, and the letter’s author can remove you. Write to us and we’ll help with anything the author can’t.
Who helps us run it
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage: everything above | EU (Frankfurt) |
| Vercel | Hosting the app (requests pass through it) | EU (Frankfurt) |
| Anthropic (Claude) | Drafting a letter, only when you ask: the entries you picked (after your letter’s privacy rules) and a few of their pictures, the letter’s settings, and for letters with shared replies, readers’ unanswered replies with their first names. After a letter is sent, the letter as drafted and as sent, to keep a short private note on what its reader cares about. Anthropic doesn’t train on it. | United States |
| Mistral | Transcribing a voice note, only when it goes into a letter | EU |
| Postmark | Sending letters, sign-in emails, reminders and reply notifications, and receiving replies by email | United States |
| Paddle | Selling the subscription: checkout, payment, taxes, invoices, refunds. Paddle is the seller and controls the payment data. | United Kingdom |
| Sentry | Error reports when something breaks, without what you wrote, your address or your IP | EU (Frankfurt) |
Each one only gets what its job needs, under a data processing agreement. Transfers to the United States rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses; the United Kingdom has an adequacy decision.
Cookies
Only the ones the service needs: keeping you signed in, and remembering which letters a reader can open. No analytics, no advertising, no tracking pixels in emails.
How long
Until you delete them or your account. Deleting your account (Settings, Your data) erases your entries, files, letters, readers and replies at once; backups roll over within days. Paddle keeps payment records as tax law requires.
What you can ask for
To see, correct, download or delete your data, to restrict or object to how we use it: most of it you can do yourself (Settings, Your data), otherwise write to us and we answer within a month. You can also complain to your data protection authority (in France, the CNIL, cnil.fr).
Security
Data is encrypted in transit and at rest. Every table checks who’s asking, files are only reachable through short-lived links, and your entries never leave your account unless you put them in a letter.
Changes
If this changes in a way that matters (a new provider, a new use), we tell you by email before it applies.
Last updated October 7, 2026.