Privacy Policy

Effective Date: May 1, 2026

Last Updated: May 1, 2026

1. Introduction

Edmond Legacy, LLC ("My Letter Vault," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to all users of mylettervault.com and associated services.

By using My Letter Vault, you agree to the practices described in this policy. If you do not agree, please do not use the service.

2. Information We Collect

We collect the following categories of information:

Account Information: Your email address and password (hashed) when you register.

Letter Content: The letters, biographical answers, and notes you write and store within the platform. This is your personal content — private to you and your designated recipients.

Recipient Information: Names, email addresses, and birthdates of people you designate to receive your letters.

Payment Information: Billing and payment data processed by Stripe. We do not store your full payment card details on our servers.

Usage Data: Basic technical data including IP address, browser type, operating system, and pages visited. This helps us maintain and improve the service.

Communications: If you contact us by email, we retain those communications to provide support and improve the service.

3. How We Use Your Information

We use your information to:

— Operate and maintain your account and the service — Store and organize your letters and biography — Deliver scheduled letters to your designated recipients at the times you specify — Process payments and manage your subscription tier — Send transactional emails (account confirmation, delivery notifications, receipts) — Respond to support inquiries — Detect and prevent fraud, abuse, or security incidents — Comply with legal obligations

We do not use your letter content for marketing, advertising, or to train AI models. Your words are yours.

4. Your Letter Content

We treat the content of your letters and biographical entries as private and confidential. We do not read, analyze, sell, license, or disclose your letter content to any third party except:

— To deliver letters to your designated recipients, as you explicitly instruct — When required by law, court order, or valid legal process — To protect the safety of you, your recipients, or others in an emergency

Our staff do not have routine access to your letter content. Access is limited to automated systems required to operate the service and authorized engineers responding to verified technical issues.

5. Sharing Your Information

We do not sell your personal information. We may share information with:

Service Providers: Third-party vendors who help us operate the service, including Supabase (database and authentication), Stripe (payment processing), and email delivery providers. These providers are contractually bound to use your information only to provide services to us.

Legal Requirements: We may disclose information when required by applicable law, subpoena, court order, or government request.

Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity. We will notify users before such a transfer and will ensure the acquiring entity is bound by this Privacy Policy.

6. Third-Party Services

We use the following key third-party services:

Supabase — Provides our database infrastructure and authentication system. Supabase processes and stores your account data and letter content on our behalf. Learn more at supabase.com/privacy.

Stripe — Processes all payments. When you purchase a plan, you interact directly with Stripe's secure checkout. Stripe's privacy policy is at stripe.com/privacy.

Browserless — Used to generate PDF exports of your vault. Content is processed momentarily for rendering and is not stored by Browserless.

We are not responsible for the privacy practices of third-party websites you may link to from within the service.

7. Cookies and Tracking

My Letter Vault uses session cookies to keep you logged in and to maintain your preferences. We may use analytics tools to understand aggregate usage patterns (such as which pages are most visited). We use Meta Pixel for conversion tracking on our marketing pages. This tracks actions like viewing the pricing page or completing registration — it does not track the content of your letters. You can opt out of Meta's tracking through your Facebook/Meta ad settings or by using browser privacy tools.

8. Data Retention

We retain your account and letter data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer or where it is needed to honor outstanding scheduled delivery obligations.

Scheduled letters that are pending delivery at the time of account deletion will be canceled. We recommend exporting your data before deleting your account.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

— Access the personal information we hold about you — Correct inaccurate information — Delete your account and associated data — Export your data at any time using the built-in export tools — Object to certain processing of your information

To exercise these rights, contact us at support@mylettervault.com. We will respond within 30 days. If you are located in the European Union or California, additional rights may apply under the GDPR or CCPA respectively.

10. Data Security

We use industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and we encourage you to use a strong, unique password and to export your data regularly as a personal backup.

11. Children's Privacy

My Letter Vault is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at support@mylettervault.com and we will promptly delete it.

12. International Users

My Letter Vault is operated from the United States. If you are accessing the service from outside the United States, your information will be transferred to and processed in the United States. By using the service, you consent to this transfer. We will take steps to ensure that your information is handled in accordance with this Privacy Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For significant changes, we will notify registered users by email at least 14 days before the change takes effect. Continued use of the service after changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Edmond Legacy, LLC Operating as My Letter Vault support@mylettervault.com mylettervault.com

Florida, United States

We take privacy seriously and will respond to all inquiries within 30 days.