Privacy policy

Courtesy translation. The reference version is the French one at lettreexpress.com/confidentialite.

Data controller

Axel Barats (sole trader), publisher of LettreExpress — see the legal notice. Contact: contact@lettreexpress.com.

Letters are generated in your browser

Letters are generated locally, in your browser. What you type in the forms (names, addresses, contract references…) is neither sent to our servers, nor stored, nor shared. Closing the page erases it.

Optional AI features

If you use AI personalisation or the custom letter, the text you provide is transmitted to our AI provider (Anthropic) only for the time of processing, solely to write or rewrite your letter. We keep none of it. Do not enter sensitive data that the letter does not require.

For the custom letter, the letter we produce is stored on our servers (Supabase, Paris): this is what lets us reliably deliver it after payment, email it to you and give it back to you if you close the page. It is tied to a random reference, with no account and no identifier, and deleted automatically: 7 days for a preview that was never paid for, 30 days for a paid letter. Your own contact details never leave your browser.

Payments and confirmation emails

Payments are processed by Stripe: your card details never pass through our servers. The email address you enter at Stripe is used only to send you your order confirmation (tracking number of your registered letter, or your custom letter and its retrieval link). Those emails are sent from our professional mailbox hosted by Zoho (European Union). We build no mailing list and will never send you marketing.

Registered post option

If you choose postal sending, the letter content and addresses are transmitted securely to our server and then to our printing and mailing provider (Merci Facteur, France), solely to perform this service (legal basis: performance of the contract). The letter content is deleted from our systems as soon as it is sent; we keep only the order reference and tracking number. Unpaid orders are automatically deleted after 7 days; in case of a sending incident, content is kept at most 60 days. This option requires your explicit confirmation before payment.

Processors and hosting

The site is hosted by Vercel Inc. (USA — transfers governed by standard contractual clauses). Anonymous audience counters and postal orders are stored with Supabase (servers in Paris, France). Payments: Stripe. AI: Anthropic. Postal sending: Merci Facteur. Fonts are self-hosted: your browser contacts no third-party service when browsing the site.

Cookies and analytics

LettreExpress uses no tracking or advertising cookies. We measure traffic with a strictly anonymous in-house tool: only the event type, page and time are counted — no IP address, no identifier, no personal data.

Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction and objection — write to contact@lettreexpress.com. You may also lodge a complaint with the French authority, the CNIL (www.cnil.fr).