Privacy Policy

The controller of your personal data is Jakub Murček, sole trader, IČO 08294593, Czech Republic, operating Flashletter (flashletter.app). Contact: jakub@flashletter.app.

• Account data: your email address and a hashed password, or your Google account email and name if you sign in with Google. If you try Flashletter before signing up, we create an anonymous account with no personal details.
• Your content: the landing page URLs you submit, the page text we read from them, the emails generated for you, your edits and version history, and your messages to the AI assistant.
• Billing data: if you subscribe to Pro, Stripe collects your card and billing details. We never see or store your full card number; we keep only your plan, subscription status and the Stripe customer reference.
• Technical data: browser, device, pages visited and error reports, used to keep the service working and secure. We use your IP address briefly for rate limiting and to pick the right consent options for your region; we do not store it with your account.
• Waitlist data: if you joined our earlier waitlist, the email and optional name you gave us, and your marketing choice.

• To provide Flashletter: create your account, generate and store your campaigns (performance of a contract).
• To keep the service secure, prevent abuse and fix errors (legitimate interest).
• To understand how the product is used so we can improve it (legitimate interest).
• To send product or marketing emails only if you opted in (consent, which you can withdraw at any time via the unsubscribe link or by email).

To write and edit your emails, the page text you submit and your assistant messages are sent to Anthropic’s Claude API. Under Anthropic’s commercial terms, API data is not used to train their models. We do not use your content to train any model either.

We do not sell your personal data. We share it only with providers that run Flashletter for us, under their data processing terms:

• Supabase: database and sign-in (accounts, campaigns, waitlist).
• Anthropic: the Claude AI model that writes and edits your emails.
• Vercel: hosting of the website and app.
• Stripe: payments and subscription billing for Pro.
• Upstash: rate limiting and caching, if enabled.
• Sentry: error monitoring, which may include the email you entered if an error happens during sign-up.
• PostHog: product analytics, if enabled.
• Google: only if you choose Sign in with Google.

We may also disclose data where the law requires it or to protect our rights.

Some providers, including Anthropic and Vercel, process data in the United States. Where data leaves the EU, we rely on the providers’ Standard Contractual Clauses or the EU-US Data Privacy Framework.

We keep your account and campaigns while your account exists, and delete them when you ask us to. Anonymous trial data may be deleted after a period of inactivity. Waitlist data is kept until you unsubscribe or ask for deletion. Error logs are kept for a limited time by our providers.

You can ask us to access, correct, delete or export your data, to restrict or object to processing, and withdraw consent at any time. Email jakub@flashletter.app and we will reply within 30 days. You can also complain to the Czech data protection authority (ÚOOÚ, uoou.gov.cz) or the authority in your country.

California residents have the right to know, delete and not be discriminated against for exercising these rights. We do not sell or share personal information for advertising.

We use cookies and local storage that are needed to keep you signed in and remember your privacy choice. Analytics, if enabled, follows the consent options shown to you.

Flashletter is not intended for anyone under 16.

If we change this policy in a way that matters, we will update the date above and tell account holders by email or in the app.