Last updated August 19, 2026
We collect only what we need to operate Local Letter. We do not sell personal information or use advertising trackers. We count whether a newsletter was opened and which links were followed, so the agent who writes it can see what their readers found useful.
Three groups of people. Anyone visiting this website or signing up. Agents and lenders with a Local Letter account. And the people on an account holder's contact list, who never signed up with us at all, because they signed up with their agent.
If you sign up: your name and email, and — once your account exists — the profile you build: your brokerage, your market, your branding. Your card is collected by Stripe, our payment processor, on their own pages; card numbers never touch us.
If you use the question box: what you type, what the assistant replies, the page you were on, and your IP address. The conversation helps us understand what people want to know before they sign up. The IP address is there to stop abuse and is used for nothing else.
If you ask us to email you a sample newsletter: your email address, the page you asked from, and your IP address. The address is used to send you the sample and to avoid sending you a second one. The IP address is there to stop abuse and is used for nothing else.
The assistant has no access to any account, so please do not type anything private into it.
How we count visits. There are no advertising pixels and no third-party advertising trackers on this website. We do count page visits, using our hosting provider's own measurement, which is built to work without identifying anyone. It records the page that was viewed, the site that linked to it, the country, and the kind of browser and device. It sets no cookie, it stores no identifier that follows you between visits or between websites, and it does not tell us who you are. It tells us that a page was read, never by whom. If you would rather not be counted at all, any browser setting or extension that blocks analytics requests will stop it, and nothing on the site breaks if you do.
How we count blog visits. An agent's blog pages carry a small counter of our own. It records one thing: that a particular page was read on a particular day. It sets no cookie, stores no IP address, and keeps nothing that could join one visit to another or tell us who you are — the agent sees a number of views per page, and nothing further. Blocking analytics requests in your browser stops it, and the page works exactly the same if you do.
The ordinary technical record. Two more things happen anyway, and you should know about them. Our hosting provider records standard request information such as your IP address, browser and the page you asked for, which is how any website is served and kept secure. And the pages load their typefaces from a fonts service, so that provider receives the request for the font files, including your IP address. We do not combine any of this with anything else or use it to build a profile of you.
Your name, email, phone, photo, brokerage, market and service area, your brand colors and logo, your writing voice settings, the newsletters we draft for you, your blog posts, and a record of what was sent and when.
We also keep the date you accepted the beta agreement and the date you confirmed your list is people who agreed to hear from you, because the point of those is having the record.
Telling people you joined. When you sign up for a paid plan, we may briefly show your first name, your state, and the plan you chose on our own website — "Amy from Kentucky just signed up" — while your signup is recent. Never your last name, email, or anything else. If you would rather not appear, tell us and we will leave you out.
Your contacts are yours. We store and process them for exactly one purpose: sending the newsletter you approve.
We do not sell them, rent them, share them with other customers, or email them for our own reasons.
If you delete a contact, they are removed from your active account. We may keep limited records for a short time where we need them to prevent abuse, to comply with the law, or until routine backups age out. Closing your account removes the whole list on the same basis.
If you connect a CRM, we pull contacts from it at your instruction and keep the two in step. We take what is needed to send your newsletter and leave the rest.
No advertising cookies and no analytics cookies. There is no advertising, and the visit counting described in section 2 works without setting a cookie of any kind.
This website stores one small flag in your browser's session storage, so the question box remembers it already offered itself once and does not keep reappearing. It disappears when you close the tab.
If you arrive through a member's referral link, the site remembers that member's code in your browser's local storage for 60 days, so that if you come back later and sign up, the person who told you about us still gets the credit. It is one code and a date, stored only in your own browser and sent only with your sign-up — never used to identify you or follow you anywhere. Clearing your browser's site data removes it.
The app stores your sign-in session in your browser so you are not asked to sign in on every page. That is all it does.
We describe our providers by what they do rather than by name — the roster changes as we grow, and what matters for your privacy is what each one receives. Each receives only what it needs:
Your contact list is never sent to an AI provider. The writing tools are told about your market and your brand, not about the people you send to: your city and service area, your name and business name, your voice settings, and the local information gathered for that week's issue.
Recipient names are added at the moment of sending, by our own system, after the writing is finished. They never form part of a prompt.
Two other things go to our AI provider: the questions you ask the in-app assistant, along with a summary of your account settings and counts, and whatever a visitor types into the question box on this website. Under our AI providers' commercial terms this content is not used to train their models. It may be held briefly on their systems for abuse monitoring, which is standard, so please do not put anything into a chat box that you would not want stored.
The agent or lender whose name is on it is the sender, and their address is at the bottom of it. Every issue has an unsubscribe link that works immediately and is honored automatically.
If you would rather not deal with the link, write to us and we will make sure it happens. Unsubscribing takes effect for every future issue from that agent.
Account content stays while the account is open. Question box conversations are kept so we do not lose track of who asked; sign-up records live with the account they created.
Two things outlive a deleted account with the personal link removed: what an account cost us to run, and support conversations. We need the first to understand the business and the second to know what people reported.
Write to thomas@localetter.com to see what we hold about you, correct it, or have it deleted. Account holders can delete most of it themselves inside the app. There are no hoops.
Data is encrypted in transit and at rest by our hosting providers. Access is limited to authorized people and service providers who need it to operate or support Local Letter. No system is perfect. If something happens that affects you, we will tell you rather than hope you do not notice.
Local Letter is a business tool and is not intended for anyone under 18.
If we change this in a way that matters, account holders get an email before it takes effect.
Reissued for the public launch on August 19, 2026, as the beta version promised. Account holders were told before it took effect.