Privacy Policy

Lettr is run by Noonscope Media Pvt. Ltd., D-42, Surya Palace, Delhi Road, Meerut 250001, Uttar Pradesh, India. We decide how your personal data is used for Lettr, so we are responsible for it (the "data fiduciary" under India's Digital Personal Data Protection Act, 2023, and the "controller" under the EU and UK GDPR).

• Account details: your name and email, and a password stored only as a secure hash. If you sign in with Google or LinkedIn, we receive your name and email from them.
• Resume content: what you type into Lettr, such as contact details, work history, education, skills and an optional photo.
• Files you upload:resumes and LinkedIn PDFs you import or check. We read the text from the file and don't keep the file itself. When you import, the resume we build from it is saved to your account. The free checker doesn't save anything.
• Job posts and letter details you paste in for job match, cover letters or resignation letters. Job match runs in your browser; letters are sent to our AI provider to write the draft.
• Usage records:things like when you created, imported or downloaded a resume, how many AI rewrites and downloads you've used, and when you were last active. These run your plan limits and help us support you.
• Applications and interview practice: the jobs you track (company, role, dates, notes, job posts) and your practice interview questions, answers and feedback. Only you can see them.
• Saved AI results: a copy of a cover letter or resume import, so if you ask again with the same resume and job post you get it instantly. Kept for up to 30 days and deleted with your account.
• Your country: worked out from your internet address so we can show the right price. We save the country, not the address.
• Security data:to stop abuse of free tools, we keep a scrambled (hashed) version of your internet address for a short time. We can't turn it back into the real address.
• Messages and reviews: support messages and feedback you send us.
• Payment details: handled by our payment provider. We keep your plan, payment status and invoices, never your full card or bank details.
• Google Drive:if you connect it, we store a permission token so we can save files Lettr creates to your Drive. We can't see your other Drive files.

• to run Lettr: saving resumes, previews, PDFs and Word files, scores and AI features;
• to manage your account, plan, payments and GST invoices;
• to send account emails, like email verification, password resets and replies to your messages;
• to keep Lettr safe, prevent abuse and fix errors;
• to understand, in total, how Lettr is used so we can improve it.

We use your data because you asked us to provide Lettr (your consent and our agreement with you), to meet legal duties such as keeping tax records, and for the safety of the service.

We don't sell your data.We don't show ads, and we don't share your resume with employers or recruiters unless you send it to them yourself.

When you use an AI feature (rewrites, summaries, the AI Resume Agent, cover and resignation letters, imports, the resume checker, the ATS score analyst, interview practice and replies to your reviews), we send only the text that job needs to our AI provider, Anthropic. It sends back a suggestion. Anthropic doesn't use this content to train its models.

We don't use your resumes to train AI. To see whether suggestions are useful, we count whether each AI suggestion was kept, edited or rejected (no text).

If you turn on Help improve Lettr's AI(Dashboard → Account; it's off by default), we also keep examples of suggestions you keep or edit, with your name, employers, email addresses, phone numbers and links removed, to make future suggestions better. You can turn it off at any time, and the examples kept from you are deleted.

Your resumes are private to your account. Reviews you leave are only shown on our website if you tick the box agreeing to it, and then only with your first name.

A small number of authorised team members can see account details, usage records and resumes when needed to support you, fix a problem or prevent abuse. Admin actions are logged.

We use trusted companies to run parts of Lettr. They may only use your data to provide their service to us:

• Vercel: hosting the website and app;
• our database provider: storing account and resume data;
• Anthropic: AI features;
• our payment provider (named at checkout): taking payments;
• Google and LinkedIn: sign-in, and Google Drive if you connect it;
• Resend: sending emails;
• Sentry: error reports so we can fix bugs.

Some of these providers store or process data outside India, for example in the United States or Europe. We only use providers with strong security, and we follow Indian law on sending data abroad. For users in the EU or UK, we rely on safeguards the law recognises, such as standard contractual clauses.

We use a few cookies that are needed to sign you in and keep your account secure. We don't use advertising or tracking cookies.

On the free plan we also set one cookie with a random code for your browser. Together with a one-way scrambled code of your email address (we can't turn it back into the address), it lets us give each person their free AI uses once, rather than once per account. These codes are kept after you delete your account, without your name, email or anything else about you, so the free allowance isn't reused.

If you build a resume without an account, your draft is saved in your own browser (local storage) so you don't lose it. It stays on your device until you sign up or clear your browser data.

• Account and resumes: until you delete them or your account.
• Saved AI results (cover letters and imports): up to 30 days, or until you delete your account.
• Tracked applications and practice interviews: until you delete them or your account.
• When you delete your account, we delete your account, resumes and usage records straight away. Copies in backups are removed as those backups expire.
• Invoices and payment records: as long as tax law requires (currently up to 8 years).
• Support messages: as long as needed to deal with your request.
• Records of admin actions: kept for security, even after an account is deleted.
• Hashed internet addresses used against abuse: a few days.

You can:

• see and correct your data, most of it directly in Lettr;
• delete your resumes or your whole account yourself from your dashboard;
• withdraw your consent at any time (we'll stop the processing that relies on it);
• ask for a summary of the data we hold about you and who we've shared it with;
• nominate someone to exercise your rights if you die or can't act yourself;
• complain to us (see below), and then to the Data Protection Board of India.

If you're in the EU or UK, you also have the GDPR rights to get a copy of your data in a portable format, to object to or restrict some processing, and to complain to your local data protection authority.

To use any of these rights, contact us through sagar@noonscope.com. We'll reply within 30 days.

Lettr accounts are for people aged 18 and over. We don't knowingly collect data from children. If you think a child has signed up, tell us and we'll delete the account.

We use encryption in transit, hashed passwords, access controls and limits on who can see data. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires.

We'll update this page when we change how we use data, and tell you by email or in the app before any important change affects you.

Grievance officer: Sagar Agarwal, Noonscope Media Pvt. Ltd., D-42, Surya Palace, Delhi Road, Meerut 250001, Uttar Pradesh, India. Contact: sagar@noonscope.com.

We acknowledge complaints within 48 hours and aim to resolve them within one month. You can also reach us through our help page.