Privacy Policy

Last updated: February 2025

1. Who We Are

OneLetter is operated by Nathan Deeble, based in the United Kingdom. We are committed to protecting your personal data in accordance with UK GDPR and the Data Protection Act 2018.

Contact: hello@oneletter.uk

2. What Data We Collect

  • Email address — provided by you when submitting a letter
  • Letter content — the document you upload
  • Payment data — processed by Stripe; we receive only a transaction reference (not your card details)
  • Technical data — server logs (IP address, browser type) for security purposes

3. How We Use Your Data

  • To provide the explanation service you have paid for
  • To send you your explanation and payment confirmation by email
  • To maintain records for legal and accounting purposes
  • To improve our service (anonymised, aggregated analysis only)

4. Data Retention

Your uploaded letter and explanation are retained for a maximum of 30 days from the date of submission, after which they are permanently deleted from our servers.

Your email address may be retained for up to 12 months for accounting purposes.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

  • Anthropic — your letter content is sent to Claude AI for analysis. Anthropic's privacy policy applies to their processing of this data.
  • SendGrid — used to deliver your explanation by email.
  • Stripe — payment processor. Stripe's privacy policy applies.
  • Legal obligation — we may disclose data if required by law.

6. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure of your data (subject to legal retention requirements)
  • Object to processing
  • Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email hello@oneletter.uk.

7. Security

We use HTTPS encryption for all data in transit. Files are stored on a secure UK-based server with access restricted to authorised personnel only.

8. Cookies

We use only essential session cookies required for the service to function. We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.