Privacy
Privacy notice.
This notice explains how Letter of Wishes handles personal data when you browse the site, create a letter, pay for the AI-assisted option, contact us, or restore a purchase.
Last updated: 25 May 2026
Who is responsible for this notice?
Letter of Wishes is the controller for personal data collected through this website and product. For privacy questions, data requests, or support, email hello@letterofwishes.uk.
What we collect and why
| Data | Why we use it | Typical lawful basis |
|---|---|---|
| Letter answers, draft sections, selected modules, PDF style, and reviewed PDF payloads. | To create, improve, and render the letter you request. The product processes this data during the request and stores saved progress only in your browser. | Contract or steps requested before a contract; legitimate interests in operating the free tool. |
| Paid checkout email, Stripe customer/payment references, order status, entitlement expiry, remaining AI assists, hashed browser letter identifier, and recovery-token hashes. | To take payment, unlock paid features, prevent duplicate grants, support purchase recovery, handle failed/expired checkout, and manage customer support. | Contract, legitimate interests, and legal obligations for accounting, fraud prevention, and dispute handling. |
| Contact emails and any information you choose to include. | To respond to product questions, support requests, review enquiries, or business messages. | Legitimate interests and, where relevant, contract. |
| Technical request data, basic security data, rate-limit information, and aggregate site analytics. | To keep the website secure, diagnose problems, understand page performance, and improve the product without collecting letter content. | Legitimate interests. |
AI processing
If you use paid AI drafting or section polish, the relevant answers and draft text are sent to OpenAI so the model can return the requested letter draft or improvement. Do not include passwords, recovery phrases, secret keys, or private access credentials in the letter.
Free structured drafts do not call OpenAI. They are assembled from your answers by the application.
Payments and recovery
Payments are handled by Stripe. We do not receive or store full card numbers. Stripe may process payment, fraud-prevention, tax, and compliance data under its own notices.
The restore-purchase form uses the checkout email to send a magic link if an active entitlement exists. Recovery tokens are stored as hashes, not as raw links.
Browser storage
The write flow can save progress in your browser using local storage and session storage. This keeps your answers on your device so you can continue later. You can clear it through your browser settings or by starting a new letter.
Analytics and security providers
The site uses Cloudflare Web Analytics to understand aggregate page views and performance. Cloudflare describes this as privacy-first web analytics that does not collect or use visitors' personal data. The site may also use Cloudflare Turnstile if enabled to reduce abuse on protected forms.
Sharing personal data
We share limited data only where needed to run the product: hosting, payment processing, email delivery, analytics/security, AI processing for paid features, professional advisers, or authorities where required by law. We do not sell your letter answers.
How long we keep data
Letter answers, draft text, and PDFs are not intentionally stored in the product database. Browser-saved progress remains on your device until you clear it or overwrite it.
Payment, entitlement, recovery, support, security, and accounting records are kept only as long as needed for the purpose collected, including purchase support, fraud prevention, tax/accounting duties, legal claims, and operational troubleshooting.
Your rights
Depending on the situation, you may have rights to access, correct, erase, restrict, object to, or receive a copy of your personal data. You can also complain to the Information Commissioner's Office if you are unhappy with how your data is handled.
To make a request, email hello@letterofwishes.uk. We may need enough information to verify the request without asking for private Letter of Wishes content.
Changes to this notice
We may update this notice as the product, providers, or legal requirements change. Material changes will be reflected on this page.