Letterly

Privacy Policy

Last updated: August 28, 2026

What Letterly is

Letterly is a newsletter tool that lets you send professional emails from your existing Gmail or Google Workspace account. You sign in with Google, import your contacts, create an email, and send it — no domain setup, no DNS records, no extra mailbox.

Google user data we access

Letterly uses Google OAuth to authenticate you and to send mail through the account you connect. When you sign in, we receive basic profile information from Google (your name, email address, and profile picture). We also request the gmail.send permission so we can send campaigns you compose.

We store OAuth tokens so we can send when you ask us to. We do not request access to read, search, or modify your Gmail inbox, drafts, labels, or settings. We do not access, read, or store the contents of your Gmail inbox.

Google API Services User Data Policy (Limited Use)

Letterly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

  • Google user data is used only to provide and improve user-facing Letterly features — signing you in and sending emails you compose
  • We do not use Google user data to serve ads, including retargeting or personalized advertising
  • We do not sell, rent, or transfer Google user data to advertising platforms, data brokers, or information resellers
  • We do not use Google user data to determine credit-worthiness or for lending
  • We do not allow humans to read Google user data unless you have given affirmative consent for a specific case, it is necessary for security (for example investigating abuse), it is required by law, or the data is aggregated and used for internal operations

Campaign copy you write in Letterly, contacts you import, and optional writing-help prompts are not Google inbox data. Those stay in your Letterly account and are only sent to Google when you send a campaign through Gmail.

What data we collect

We only collect and store data that is necessary to run the service:

  • Your name, email address, and profile picture (from Google sign-in)
  • OAuth tokens needed to send mail on your behalf
  • Projects you create (name, logo, brand colors)
  • Contacts and lists you add or import
  • Emails you compose and send, including images you upload
  • Basic email analytics (send counts, failed sends, approximate opens via a tracking pixel, rewritten link clicks, and unsubscribes)
  • Billing details processed by Polar (plan, customer and subscription identifiers — we do not store full card numbers)
  • Optional writing-help prompts and drafts, if you use those features
  • Product and site analytics (pages visited, referrers, and events such as signup or send)

To show open rates we include a small tracking pixel in emails you send. Opens are approximate because some email clients block images. We do not use third-party ad networks or behavioral profiling.

How we use your data

Your data is used exclusively to:

  • Authenticate you and maintain your session
  • Send emails on your behalf through Gmail
  • Store your contacts, lists, and emails
  • Show you email analytics
  • Process payment if you upgrade
  • Generate or proofread drafts when you ask the writing tools to
  • Operate, secure, and improve the product

We do not sell your data

We do not sell, rent, trade, or otherwise share your personal data or your contacts' data with third parties for marketing or advertising purposes. Your data is yours.

How we store your data

Your data is stored securely in a managed PostgreSQL database hosted on infrastructure with encryption at rest and in transit. Images and logos you upload are stored in object storage. Access to production systems is restricted. We retain your data for as long as your account is active. If you delete your account, we delete associated data, including stored Google tokens.

Third-party services

Letterly uses the following processors to run the product. They only receive what they need for that job:

  • Google — sign-in and sending emails through Gmail
  • Vercel — hosting the application, and routing optional writing-help requests through AI Gateway to model providers
  • Neon — database hosting
  • Cloudflare R2 — storing logos and images you upload
  • Amazon SES — transactional email from Letterly (for example welcome or invite messages), not your campaigns
  • Polar — checkout, subscriptions, and invoices
  • DataFast — first-party website analytics
  • LogSnag — product analytics (for example signups and sends)

Each of these providers has their own privacy policies. We select providers that meet high standards for data security and privacy. Writing-help content is sent to the model provider only when you use those features; it is not taken from your Gmail inbox.

Your rights

You can at any time:

  • Request a copy of the data we hold about you
  • Request deletion of your account and all associated data
  • Revoke Letterly's access to your Google account through your Google Account settings

To exercise any of these rights, contact us at linus@utvecklarlabbet.se.

Cookies and analytics

Letterly uses essential cookies required for authentication and session management. We also run first-party analytics (DataFast and LogSnag, proxied through letterly.email) so we can understand traffic and product usage. We do not use advertising cookies or sell analytics data.

Children

Letterly is not directed at children. You must be at least 18 years old to use the service.

Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we will notify you through the application. Continued use of Letterly after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy, reach out to us at linus@utvecklarlabbet.se.