In short: we do not store your letters. The Service has no database: your letter passes through our server function to the AI provider, and the result comes back to your tab. Below we describe this precisely, because "we store nothing" needs a few honest qualifications.
1. Data controller
- The controller of your personal data is: TODO(owner): business name and registered address, NIP (tax ID), REGON (we).
- Contact for data protection matters: TODO(owner): e-mail address. We have not appointed a data protection officer (TODO(owner): lawyer to confirm none is required).
2. How the processing works, step by step
- The letter you paste or photograph is prepared in your browser (photos are downscaled on your device) and sent over an encrypted connection to our server function hosted on Vercel.
- The server function passes the content of the letter to Anthropic's API, whose model generates the explanation or the draft reply. On our server the content exists only in working memory, while that single request is handled.
- The result returns to your browser. We store neither the letter nor the result: we have no database or file storage, and we do not log the content of requests or model responses.
- In your browser the letter, the analysis and the reply are kept in sessionStorage, the memory of a single tab, and disappear when you close it.
- The only lasting trace is the payment record in Stripe (if you pay), with a "consumed" flag in its metadata. It does not contain the letter.
3. What data we process and on what basis
- The letter and the result (text, photos or PDF, receipt date, language). Official letters usually contain personal data (name, address, PESEL, the personal identification number, case number, amounts) and sometimes sensitive data, for example about health, criminal proceedings or residence status. Basis: article 6(1)(b) GDPR (performance of the free or paid service contract to which you are a party); for data of other people appearing in the letter (for example a family member you are helping), article 6(1)(f) GDPR (your and our legitimate interest in having the letter explained). Special categories of data (article 9 GDPR) are processed on the basis of your explicit consent, given by knowingly uploading the document after reading this information (article 9(2)(a) GDPR). You can withdraw consent at any time, with effect for the future. If you do not want certain data to enter the system, black it out before sending.
- Technical request data: IP address, browser headers, the Turnstile verification result. They protect against abuse and limit free analyses; for the limit we store not the IP address but its irreversible hash with a secret salt. Basis: article 6(1)(f) GDPR (security).
- Payment data: Stripe collects the data needed for the payment (method, amount, confirmation e-mail, card or bank details). From Stripe we receive only the session ID, payment status and amount, never the card number. Basis: article 6(1)(b) GDPR (performance of a contract) and (c) (accounting and tax obligations).
- Visit statistics: Vercel Web Analytics counts page views and basic device data without cookies, telling visitors apart by a temporary hash of connection data, discarded daily. We see only aggregated data; the content of letters never reaches the statistics. Basis: article 6(1)(f) GDPR.
- Correspondence: if you write to us (for example a complaint), we process your e-mail address and message in order to reply. Basis: article 6(1)(b) or (f) GDPR.
4. Recipients of data (subprocessors)
- Vercel Inc. (USA): hosting of the site and server functions, visit statistics. It processes network traffic, including, briefly, request content in the function's memory.
- Anthropic PBC (USA): provider of the AI model that processes the letter and generates the result. Under Anthropic's commercial terms, data sent through the API is not used to train models. Retention on Anthropic's side: TODO(owner): confirm Anthropic's current API retention policy and fill in.
- Stripe (Stripe Payments Europe Ltd., Ireland, and Stripe Inc., USA): payments. For payment data Stripe is an independent controller: stripe.com/privacy.
- Cloudflare Inc. (USA): Turnstile, the bot protection on the free form. It processes technical browser data, not the letter.
- Upstash Inc. (USA; data in the region TODO(owner): fill in the database region): rate-limit counters, that is only the hashed IP address and a count. Never content.
We do not sell data and do not share it with anyone else unless the law requires it.
5. Transfers outside the EEA
- Vercel, Anthropic, Stripe, Cloudflare and Upstash are based in the USA, so your data may be processed outside the European Economic Area.
- The basis for the transfer is the European Commission's decision on the EU-US Data Privacy Framework (for DPF-certified providers) or the Commission's standard contractual clauses in our data processing agreements with them. TODO(owner): confirm the mechanism (DPF or clauses) for each provider separately and fill in.
- You can ask for a copy of the safeguards at the address in point 1.2.
6. How long we keep data
- Letters, photos, results: we do not keep them on our side. They exist in the server function's memory while the request is handled (seconds), and at the AI provider for the processing time and the period under its policy (point 4).
- Rate-limit counters (hashed IP): expire automatically within 24 hours.
- Payment data: at Stripe according to its policy; accounting documents on our side for the period required by tax law (currently 5 years from the end of the tax year).
- Visit statistics: aggregated only, according to Vercel's policy.
- Correspondence: until the matter is closed and for the limitation period of any claims.
7. Cookies and browser storage
- The Service sets one cookie, NEXT_LOCALE, which remembers your interface language, valid for 1 year. It is necessary for the language choice to work and is not used for tracking, so it needs no consent.
- We do not use advertising, tracking or analytics cookies.
- The Service uses your browser's sessionStorage (point 2.4); this data is not sent anywhere except in the requests described in point 2 and disappears when you close the tab.
- Stripe Checkout and Cloudflare Turnstile may set their own technical cookies on their domains, necessary for payments and bot protection.
8. Your rights
- You have the right to: access your data, rectify it, erase it, restrict its processing, object to processing based on legitimate interest, data portability, and withdrawal of consent (without affecting earlier processing).
- Honestly: since we do not store letters or results, usually there is nothing for us to hand over, correct or erase. In practice we can handle requests concerning our correspondence with you and, to a limited extent, payment data (for the rest, turn to Stripe).
- Send your request to the address in point 1.2. We will reply within one month.
- You can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with the supervisory authority in the country where you live.
- We do not make automated decisions about you with legal effects (article 22 GDPR); the analysis is information for you, not a decision about you.
9. Security
The connection is encrypted (HTTPS). We do not log the content of letters or results, error messages are stripped of content, IP addresses in the counters are hashed with a secret salt, and uploaded files are limited in size and type. The most important safeguard, however, is architectural: nothing can be stolen from a database that does not exist.
10. Changes to this policy
We may update this policy when the law, our providers or the way the Service works change. The new version appears on this page with the update date. This version applies from 2026-08-22.