Privacy Policy
Last updated: October 23, 2026
Who is responsible
The controller of your personal data is MB Violetinis rytas, Beržų g. 10, LT-90422 Plateliai, Lithuania (company code 307055066). Contact for all privacy questions: help@thebirthletter.com.
What we collect
- Your account: first name, email address and a securely hashed password.
- What you enter for a letter: your full birth name, date, time and place of birth, the question you ask and what you write about it. For a letter about two people, also the other person's first name and birth details.
- Your photo – only if you choose to add one: it is used once, to describe your expression in words, and then deleted (no later than 24 hours after upload).
- Order details from our payment processors (ThriveCart and Stripe): order number, products, amount and your billing country. We never see or store your full card number.
- Technical details: IP address (also in hashed form, to prevent abuse of the free letter), browser type and cookies (see below).
Please don't include health information in your question. If what you write reveals your health, your sex life, your beliefs or anything similar, you give us your explicit consent to use it only to write your letter, never for advertising (Article 9(2)(a) GDPR). You can withdraw that consent at any time by deleting the letter or writing to us.
What we use it for – and on what legal basis
- Writing and delivering your letters, in your account and by email, with an audio version and a PDF; running your account, answering requests and handling refunds – to perform our contract with you (Article 6(1)(b) GDPR).
- Safety: before a letter is written, your question is checked for signs that you may be in danger right now. If we find them, we don't write the letter, we show you where to get help, and we don't keep the question. For other difficult themes, your letter is written with extra care (legitimate interest, Article 6(1)(f) GDPR, and for your protection).
- Service emails (your letter is ready, your login details) – to perform the contract.
- Short emails about your letter: after you ask for a free letter, a short series about your letter over about a month; after an order, a few emails about what else you can ask. The basis is your consent (Article 6(1)(a) GDPR). Every one of these emails has a one-click unsubscribe link.
- Advertising measurement – only with your consent (see "Advertising and your choices").
- Accounting and legal obligations (Article 6(1)(c) GDPR).
Service providers that write your letter
Letters, the reading of your expression and the safety check are processed by Anthropic; the audio version is created by Alibaba Cloud (Model Studio); text polishing and audio checks by OpenAI. They process your details only on our behalf and only to produce your letter. Under their contract terms they do not use this data to train their models, and they delete it within 30 days, except where they must keep it longer to enforce their usage policies or to comply with the law.
Who else receives your data
Only service providers that help us run The Birth Letter: our hosting provider, the providers named above, ThriveCart and Stripe (payments and order records), GetResponse (sending our emails) and – only with your consent – Meta, to measure advertising. We do not sell your data.
Messages to our support and social pages
When you email us, or comment on or message our Facebook and Instagram pages, we read your message and prepare our reply with the help of a language model from Anthropic, which processes the text of your message to draft the reply. We keep a short excerpt and a one-line summary of each conversation for up to 90 days to improve our answers; comments and messages themselves stay on Facebook or Instagram. We hide comments that contain phone numbers or email addresses to protect the person who wrote them. To have your messages deleted, write to help@thebirthletter.com.
Advertising and your choices
Only if you choose "Allow" on our site do we tell Meta (Facebook and Instagram) that a page was viewed, a free letter was requested or an order was placed – with the order value, a hashed (scrambled) email address, your name, your IP address, your browser and Meta cookie identifiers – so that we can measure our advertising. Also only with your consent, our own measurement tool, on go.thebirthletter.com, records which ad and page brought you, your IP address and device type, and whether you then asked for a free letter or placed an order; that record stays with us. Your question, birth details, letter and photo are never shared.
You can withdraw your consent at any time, with effect for the future: with the button on this page, by deleting our site's cookies in your browser, or by emailing help@thebirthletter.com. We treat a Global Privacy Control signal from your browser as an objection.
Without any cookie, and without asking, we also count per day how many visits reach each step of our page (page opened, first answer, the email step, free letter requested, order opened) and which ad they came from (the ad's ID and name in the link). For this we keep only these daily totals: no cookie, nothing stored on your device, no IP address, no browser details, nothing that identifies you. A Global Privacy Control signal from your browser switches this count off too.
Cookies
Essential cookies keep you logged in, store your cookie choice and protect the site. Measurement cookies (the Meta Pixel and our own click tracking) are used only with your consent. On the checkout, ThriveCart and Stripe set the cookies they need to process your payment securely.
How long we keep it
- Your account and letters: until you delete them. You can delete a letter in your account, or ask us to delete your account.
- Your photo: deleted after your expression is described, and in any case within 24 hours of upload.
- Free letter without an order: deleted after 12 months, or sooner if you ask.
- Order records: for as long as accounting and tax obligations require. ThriveCart and Stripe keep their own records under their own policies.
Your rights
You have the right to access, correct, delete, restrict or receive a copy (portability) of your data, the right to object to its use, and the right to withdraw a consent at any time, with effect for the future. To do so, write to help@thebirthletter.com – we reply within one month.
You can also complain to a data protection authority: the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt) or the data protection authority of the EU country where you live.
International transfers
We are based in the European Union. Some of our providers also process data outside the EU, mainly in the United States and Singapore. For these transfers we rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses, as offered by those providers.
Security
We use encrypted connections (HTTPS), store passwords only as secure hashes and limit access to personal data to what is needed to run the service.
Children
The Birth Letter is not for anyone under 18, and we don't knowingly collect data from children.
Changes
We may update this policy. The date at the top shows the latest version.