Privacy policy · effective July 17, 2026
Private by design.
The generator is built to draft a letter without creating an account, collecting your email, or storing your form values or finished letter.
What the generator processes
When you choose to generate, the service temporarily processes the fields you entered so it can return letters in the same request. Do not enter a Social Security number, date of birth, account login, or document image. The tool blocks common SSN and birth-date patterns in free text.
How AI privacy works
Before a configured AI provider can receive dispute facts, the service replaces names, addresses, phone numbers, report confirmation numbers, account references, and recipient details with deterministic placeholders. Provider output must pass plain-text, placeholder, recipient, and unsupported-claim checks. Personal values are restored only in PHP memory. If the provider is unavailable, over budget, or invalid, a deterministic template is used.
What is not stored
The generator does not persist POST bodies, form values, generated letters, prompts containing your facts, provider responses, raw IP addresses, cookies, or persistent visitor identifiers. Finished letters remain in your browser tab. While you are filling in the form, your in-progress answers are also kept in your browser tab using session storage so that a reload does not discard them. That draft never leaves your device, is not readable by us, is cleared as soon as your letters are generated, and is discarded when the tab closes.
Contact messages
If you use the contact form, your reply email, selected topic, and message are delivered to the operator by email and are not written to the application database. Email systems may retain that message according to their normal delivery and mailbox policies. Do not include dispute facts or sensitive personal information.
Aggregate events and abuse controls
The site counts a short allowlist of aggregate events: page view, tool start, successful result, copy, print, and error. Event rows contain no form fields or letter text. Short-lived rate-limit keys are made from one-way network fingerprints and expire with their limit windows. Hosting infrastructure may process standard request metadata for security and delivery, but it is not joined to generator contents or analytics profiles.
Third parties
Cloudflare may deliver and protect the site, including the Turnstile anti-abuse check. A configured AI provider receives only placeholder-safe facts. External source links have their own privacy practices.
Retention
Raw aggregate event counts are retained for up to 30 days. Daily aggregate totals may be retained for up to 24 months. Security and administrative audit records are kept separately from public generator data.
Questions
Use the protected contact form. Do not send SSNs, credit reports, dispute letters, or account documents.