Privacy Policy

1. Introduction

Letter Ledgers ("we", "our", or "us") operates the website letterledgers.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We collect information in the following ways:

Account Information

When you create an account, we collect your email address and password. Passwords are securely hashed and never stored in plain text.

Third-Party Integrations

When you connect third-party services (Beehiiv, Meta Ads, Stripe), we access data from those platforms on your behalf. This includes:

• Beehiiv: Subscriber counts, growth metrics, source tags, email engagement rates
• Meta Ads: Ad campaign spend, impressions, clicks, audience demographics (age, gender, platform), and lead form data
• Stripe: Transaction amounts, dates, and descriptions for revenue tracking

Usage Data

We automatically collect certain information when you access the Service, including your IP address, browser type, and pages visited. This is used for rate limiting and security purposes.

3. How We Use Your Information

• To provide and maintain the Service
• To display your newsletter analytics dashboard
• To generate your public media kit page (only when you opt in)
• To process payments and manage your subscription
• To send important service-related communications
• To detect and prevent fraud and abuse

4. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

• Public Media Kit: If you enable your media kit, your newsletter name, tagline, logo, subscriber stats, sponsors, and rates are publicly visible
• Discover Page: If you opt in, your newsletter name, tagline, logo, and media kit link are displayed on our public Discover page
• Service Providers: We use Supabase (database and authentication), Vercel (hosting), Stripe (payment processing), and Upstash (rate limiting)
• Legal Requirements: We may disclose information if required by law or to protect our rights

5. Data from Meta (Facebook)

When you connect your Meta Ads account, we access data through the Meta Marketing API. We use this data solely to display your ad performance and audience demographics within the Service. We do not share Meta data with third parties. You can disconnect your Meta account at any time from your settings, which will stop further data collection.

If you remove our app from your Facebook account, Meta will notify us via our data deletion callback, and we will delete all Meta-related data associated with your account.

6. Data Security

We take reasonable measures to protect your data, including encrypting API keys at rest, using HTTPS for all communications, implementing rate limiting, and using row-level security on our database. However, no method of transmission over the Internet is 100% secure.

7. Data Retention and Deletion

We retain your data for as long as your account is active. You can request deletion of your account and all associated data by contacting us. Third-party API keys are encrypted and can be removed at any time by disconnecting the integration from your settings.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Disconnect any third-party integration at any time
• Disable your public media kit at any time

9. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at myletterledgers@gmail.com.