1. Introduction
HDAPP SISTEMAS LTDA ("we," "our," or "us") operates AfterlifeLetters, a service that allows you to write letters and schedule their future delivery. We are committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.
2. Data We Collect
We collect: (a) Account information: email address, name, and password (stored in hashed form); (b) Letters and attachments: the content you write, recipient email addresses, delivery schedules, and any files you attach; (c) Trusted contacts: names and email addresses of people you designate; (d) Payment information: processed by Stripe—we do not store full credit card numbers on our servers; (e) Check-in data: dates of your check-ins and related verification status; (f) Usage data: logs of your interactions with the Service.
3. How We Use Your Data
We use your data to: provide the Service (store and deliver your letters); process payments and manage subscriptions; verify your identity and send transactional emails (verification, password reset, check-in reminders); notify trusted contacts when necessary; improve the Service and ensure security; and comply with legal obligations.
4. Data Sharing
We share data only with trusted service providers: Stripe (payment processing), Mailgun (email delivery), Amazon S3 (file storage), and Vercel (hosting). These providers process data on our behalf under contractual obligations. We do not sell your personal data. We may disclose data if required by law or to protect our rights and safety.
5. Cookies and Technologies
We use essential cookies for session management and authentication. We may use analytics cookies to understand how the Service is used. You can control cookies through your browser settings. Some features may not work properly if cookies are disabled.
6. Data Retention
We retain your data while your account is active. After cancellation, we retain data as needed to deliver any scheduled letters and to comply with legal obligations. You may request deletion of your data; we will process such requests subject to our delivery commitments and legal requirements.
7. Your Rights
Depending on your location, you may have rights to: access your personal data; correct inaccurate data; request deletion; receive a copy of your data (portability); object to processing; and withdraw consent. To exercise these rights, contact us at contact@afterlifeletters.com. We will respond within a reasonable timeframe. You may also have the right to lodge a complaint with a data protection authority.
8. Security
We implement technical and organizational measures to protect your data, including encryption in transit and at rest, secure authentication, and access controls. While we strive to protect your data, no method of transmission over the internet is 100% secure.
9. Children
The Service is not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If you believe we have collected data from a minor, please contact us and we will take steps to delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top indicates when the policy was last revised. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related questions or to exercise your rights, contact us at contact@afterlifeletters.com or at Rua XV de Novembro, 556, Conj. 1406, Cond. Lustoza Ed., CEP 80020-310, Curitiba, PR, Brazil.