Privacy Policy

Last updated: 18 October 2026

This policy explains what Letter Moth collects, why, who it is shared with, and the choices you have. It covers the Chrome extension, this website and the service behind them. The short version: we read a page only when you ask, we use it only to write your draft, and we don't sell your data.

1. What we collect

Account information

When you sign in with Google we receive your name, email address and profile picture, and a unique account ID. We never see your Google password.

Information you give us in the extension

Writing profile (optional): your name, professional summary, skills, experience and writing instructions.
Preferences and saved prompts: your default tone, right-click default, your last selections, and prompts you save.

Page content, only when you generate a draft

When you press Write in the popup, or choose a Letter Moth item in the right-click menu, the extension reads from the current tab and sends to our server:

the page title;
the page address (with any query string and fragment removed), if you've left that option on;
text you selected, or the visible text of the page (a limited amount);
text already in the message box you're writing in, and the label or question next to it;
your instructions, tone, message type and length limit.

You can review, edit or untick any of this in the popup before it is sent. Password, hidden and payment-card-like fields are never read or written. The extension does not run in the background or read pages you haven't asked it to.

Usage and payment information

Usage: how many drafts you've generated each day, to apply plan limits. We don't keep the text of your drafts.
Orders: the plan, amount, date, status, payment method type (for example UPI or card), the payment gateway's order and payment reference numbers, and a receipt number. Card, UPI and bank details are handled by the payment gateway and never reach our servers.
Technical data: standard server logs (such as time, request path, error status) used for security and reliability. Request bodies, drafts and page text are not logged in production.

2. How we use it

To generate drafts you ask for, and to insert them where you choose.
To keep you signed in, sync your settings across devices, and apply your plan and limits.
To take payments, issue receipts, prevent fraud and meet legal and accounting duties.
To secure the Service, fix problems and support you.

We don't sell your personal data, we don't use it for advertising, and we don't use page content or drafts to build profiles or to train models. We use information obtained through the extension only to provide and improve the features described here, and we don't transfer or use it for unrelated purposes. This follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

3. Who we share it with

We use these service providers (processors) to run the Service, and share only what each needs:

Google: sign-in.
Supabase: accounts, settings, saved prompts, usage and order records (database and authentication).
An AI model provider (OpenAI): receives the page content, profile and instructions for a draft you request, and returns the draft. We ask for it not to be stored by the provider beyond what is needed to process the request, and under the provider's API terms, API data isn't used to train its models by default.
Our hosting provider (Vercel): runs the website and server.
A payment gateway: processes your payment and sends us the result.

We may also disclose information if the law requires it, to protect rights and safety, or in a business transfer (you'd be told).

4. Where your data is stored and how long

On your device: a signed-in session and a cached copy of your settings and prompts, kept in the extension's storage so it opens quickly. Signing out clears the cached copy.
On our providers' servers: your account, settings, profile, prompts, usage counts and order records, kept while your account exists. Orders and receipts may be kept longer where the law requires (for example, accounting records).
Page content and drafts: used to produce the draft and not stored by us after the request finishes.
Our providers may process data in countries outside India. We choose providers with appropriate safeguards.

5. Your choices and rights

Control what's shared: review or untick page text, address and message-box text before each request; turn the confirmation step on or off in Settings.
Edit or delete your profile and saved prompts in Settings at any time.
Access, correction, deletion: ask us to give you a copy of your data, correct it, or delete your account and the data tied to it. We'll act on verified requests within a reasonable time, normally within 30 days, except where we must keep records by law.
Withdraw consent by uninstalling the extension and asking us to delete your account.
Under the Digital Personal Data Protection Act, 2023 you may also nominate someone to exercise your rights and complain to us first and then to the Data Protection Board of India.

Email vishalmaurya3112@gmail.com. See the Contact page for all our details.

6. Security

Traffic is encrypted in transit. Accounts are protected by Google sign-in; the AI provider key and payment secrets stay on the server and are never in the extension. Database access is restricted so each user can read only their own records. No system is perfectly secure, so we can't guarantee absolute security. Tell us straight away if you suspect a problem.

7. Children

The Service is not meant for anyone under 18, and we don't knowingly collect their data. If you think a child has given us data, contact us and we'll delete it.

8. Cookies and local storage

This website uses browser storage only to keep you signed in. We don't use advertising or analytics cookies. If that changes, we'll update this policy and ask where required.

9. Changes to this policy

We'll post updates here with a new date and, for significant changes, tell you in the extension or by email.

10. Contact

Email vishalmaurya3112@gmail.com. See the Contact page for all our details.