Legal

Privacy Policy

Effective May 12, 2026

DeadLetter (“DeadLetter,” “we,” “us”) is a product of BuildNotBurn LLC. We built this tool because the algorithm already knows too much about you. We are not going to repeat the pattern. This page tells you exactly what we collect, why, and how to make it stop.

What we collect

Audit selections. The platforms you tick on the audit page. Stored against an anonymous session ID in your browser’s local storage so you can come back to your dashboard without an account.
Email address. Only if you choose to save your audit, join the waitlist, or buy something. Used to send the audit confirmation, the 7-day Signal Stack, and (if you subscribe) your weekly Signal Report.
Account identity. If you sign in with a magic link, your identity is held by BNB ID, our shared sign-on system for the BuildNotBurn portfolio. DeadLetter only stores the member ID it issues us — not your password (there isn’t one).
Subscription state. If you buy Signal, Signal Pro, or the Signal Stack PDF, we store your tier, status, and renewal date so we know whether to keep delivering the product.
Aggregate analytics. Page views and event counts via Plausible Analytics. Plausible is cookie-free, does not fingerprint you, and does not share data with third parties. No personal profile is built.

What we do not collect

→ Your social media credentials. We never ask for them and cannot use them.
→ The actual contents of your feeds. The audit is generated from the platforms you select — not from scraping or screen-reading your accounts.
→ Tracking cookies for ad networks. There are none.
→ Location, device fingerprints, or behavioral profiles for resale. Period.

Who we share data with

We use a small number of vendors to actually deliver the product. Each one only sees what it needs to do its job:

Supabase — database hosting for your profile, subscriptions, and Signal Reports.
Resend — transactional emails (confirmation, magic links, Signal Reports).
Loops — the “Dead Letter Waitlist” onboarding email sequence.
Lemon Squeezy — payment processing and subscription management. We never see or store your card details.
BNB ID — identity and magic-link issuance for the BuildNotBurn portfolio.
Plausible — privacy-respecting, cookie-free analytics.
Anthropic — if you use AI screenshot analysis or AI-generated Signal Reports, the relevant text/image is sent to the Claude API to produce the result. Anthropic does not train on this data under our API agreement.

We do not sell your data. Ever. There is no advertising business here to sell it to.

How long we keep it

→ Anonymous audit profiles: until you delete them or two years pass with no return visit, whichever comes first.
→ Account data: until you ask us to delete your account.
→ Subscription records: retained as long as required by our payment processor and tax law (typically 7 years for financial records).
→ Aggregate analytics: indefinitely, but it cannot be traced back to you.

Your rights

Wherever you live, you can ask us to:

→ Show you everything we have about you.
→ Correct anything wrong.
→ Delete your account and all associated data.
→ Export your data in a portable format.
→ Opt out of marketing email (every email includes a one-click unsubscribe).

Email hello@getdeadletter.com with your request. We will respond within 30 days.

Cookies & local storage

DeadLetter uses one httpOnly cookie (bnbid_token) to keep you signed in, and your browser’s localStorage to remember your audit session so you can resume without an account. That is all. No tracking pixels, no third-party ad cookies.

Children

DeadLetter is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, email us and we will delete it.

Changes to this policy

If we change anything material, we will update the effective date at the top of this page and email account holders before the change takes effect. The current version always lives at getdeadletter.com/privacy.

Contact

BuildNotBurn LLC
hello@getdeadletter.com