Who operates the service
Lettershape is operated by LATTY INTERACTIVE LLC, 5830 East 2nd Street, STE 7000 #33665, Casper, WY 82609-4308, United States. Contact support@lattyinteractive.com with privacy questions or requests.
The marketing website
This website has no advertising trackers, analytics scripts, or newsletter signup forms. We serve the fonts and illustrations with the site. Our hosting services process your IP address, requested pages, visit times, and browser details to load and protect the website.
Interactive previews
The sample editor and template search work in your browser. Text you enter there stays in the page and is not sent to our servers or saved on your device. Reloading resets it. Account links take you to the separate application at create.lettershape.com.
Accounts and saved work
We store your account details and records used for sign-in, email verification, and account recovery. A password hash lets us check your password without saving the password itself. We also store your saved designs, image records, plan details, and usage so you can return to your work and manage your subscription.
Images and exported emails
Uploaded and AI-generated images are processed and hosted through Cloudflare R2. Images used in exported emails have public URLs so recipients can load them. Anyone with an image URL may be able to view that image. We keep images used in exports so they can still appear in sent emails. Those images are protected from gallery deletion. Cancelling a subscription does not delete them. We also keep images used in exports after account deletion unless you ask us to remove them. Removing those images means they will stop loading in previously sent emails.
AI, payments, and account email
When you use AI tools, your prompt and the content supplied for the request are processed through OpenRouter and the company running the selected AI model. PayPal handles subscription payments; Lettershape stores the subscription ID, status, and payment confirmations. Resend sends verification and recovery emails. Cloudflare Turnstile checks account forms for automated abuse. Each service receives the information needed for its task.
Usage and support
The application records AI usage to apply your plan limits. It also records which design you export, its format, the sending tool you choose, and the time. These records appear in your dashboard. We do not track recipient opens or clicks or manage your mailing lists. If you contact support, we use your message to answer your question or investigate the problem.
Retention and requests
We keep your account information, saved designs, and hosted images while your account remains open, subject to the inactivity policy below. Cancelling a paid subscription does not itself delete your account or its data. To request a copy, correction, or deletion of your information, email support@lattyinteractive.com. Account deletion is handled through support. Within 30 days after verifying your deletion request, we delete your account information, saved designs, and hosted images that have not been used in exports, subject to the limited record-retention exceptions below.
Images already used in exports remain available after account deletion so they can still appear in sent emails. To remove those images too, include that instruction in your deletion request or contact us separately. We remove them within 30 days after verifying the removal request. They are an exception to account deletion, not a promise of permanent hosting.
Inactive accounts
We delete accounts after 24 months without account activity. We send a notice to your account email address at least 30 days before deletion, giving you time to sign in and keep the account active. This applies to Free and paid accounts, including accounts that return to Free after cancellation. Deletion removes account information, saved designs, and images not used in exports. Images used in exports remain available unless you request their removal, as described above.
Required records and backups
We retain only the limited billing, legal, and security records necessary to meet legal obligations, resolve disputes, or prevent fraud and abuse, and only for as long as those purposes require. Except for these necessary records and exported images retained as described above, deleted data is also removed from backups within the same 30-day deletion timeframe. For inactive-account deletion, backup removal is completed within 30 days after the account is deleted.
External links and updates
Links to sending platforms and other websites lead to services with their own privacy practices. We may update this notice as the service changes and will show the updated date on this page.