Privacy
Privacy, in plain words
Who is responsible
The data controller is UNTD s.r.o., Stodolní 1428/9, Moravská Ostrava, 702 00 Ostrava, Czech Republic, company number (IČO) 19669593, registered in the Commercial Register kept by the Regional Court in Ostrava, section C, file 93549. Contact: info@untd.club.
The waitlist
When you join the waitlist we store:
- your email address,
- which form you used on this site, plus your answers to the optional questions if you gave any,
- the time you joined, and a shortened browser identifier (User-Agent).
We don’t store your IP address. It is used only briefly, in memory, to stop one connection from flooding the list. We don’t use tracking cookies or third-party analytics on this site.
We use your address only to email you about Letterporch access: invitations to the beta, the founding-member offer and the launch. We don’t sell it or share it. The legal basis is your consent (GDPR Art. 6(1)(a)), which you give by joining and can withdraw at any time. We keep your entry until you withdraw that consent or ask us to remove it; there is no other deadline. If you submit an address that is already on the list, the form tells you so. Want off the list? Email info@untd.club and we delete the entry.
Your Letterporch account
Accounts are created by us, not by a sign-up form. For an account we store your email address and your password as a scrypt hash, never the password itself. The legal basis is the contract under which we provide the service (GDPR Art. 6(1)(b)).
Each sign-in creates a session, and with it we store the kind of client: the browser’s User-Agent for the web app, or the kind of device for the apps (“iPhone”, “iPad”, “Mac”). The apps deliberately do not send the name you gave your machine, which often contains your own name. Of the session token itself we keep only a SHA-256 hash, so a copy of our database cannot be replayed as a sign-in.
Your mail
- Letterporch reads your mailbox over IMAP and keeps the downloaded messages on our server so it can show, search and sort them. It sends through your own provider’s SMTP server, and it writes nothing back to your mailbox: seen, Done, Reply later and Set aside live in Letterporch only, so other mail apps see your mailbox exactly as before.
- Drafts you write and messages you send are stored on our server; attachments are not — they are fetched live from your mailbox each time you open one.
- Search queries are answered in the moment and are not logged anywhere.
- Your mailbox passwords are encrypted with AES-256-GCM before they’re saved. The key is kept outside the database and outside our code. You can use an app-specific password (Gmail, Seznam), so your main password never touches Letterporch.
- Other Letterporch users can’t see your mail: each account sees only its own mailboxes, senders and decisions. We can technically access stored mail and only do so to fix a problem you report.
- No AI reads your mail. Screening suggestions come from simple email headers, such as bulk-mail markers.
No tracking, no third parties
The apps and the web app contain no analytics, no crash reporting, no advertising identifiers and no third-party SDKs. Your account email and your mail go to the Letterporch server and nowhere else. We don’t share your data with anyone, and we don’t use it to build profiles or to advertise.
Where it lives
On our servers in the EU: Amazon Web Services in Frankfurt (eu-central-1), who host it for us. The database runs on encrypted storage, is not reachable from the internet, and is backed up daily for 7 days — a deleted record disappears from the backups within that week. Server logs are kept for 7 days. Everything travels over TLS and the site and app are served over HTTPS only. Coming before the paid launch: stronger per-customer encryption and a DPA.
Your rights, and how to use them
Under the GDPR you can ask for a copy of your data, have it corrected, have it erased, have its processing restricted, object to it, and complain to a supervisory authority (in the Czech Republic, the Office for Personal Data Protection, uoou.gov.cz). Write to info@untd.club and we answer within one month.
How deletion works in practice: in the web app, Settings deletes a mailbox that has not downloaded anything yet. A mailbox that already holds mail cannot be deleted there — Pozastavit (Pause) stops the downloading and keeps the mail. Deleting such a mailbox, or closing your account and erasing everything in it, is something we do for you on request.
Fonts
This site loads its typeface from Google Fonts, so your browser contacts Google’s servers when you open it. The apps and the web app don’t.
Contact
Questions about your data: info@untd.club. Help with the app: support.