Skip to content
Sign inCreate a document

Privacy policy

Last updated 20 September 2026

This policy describes which personal data Lettr collects, why it is processed, and which rights you have under the General Data Protection Regulation (GDPR).

1. Controller

The controller of personal data is Adria Digital d.o.o., Zagreb, Croatia. Contact details are in the impressum. For questions about processing, write to hello@adriadigital.agency.

2. Data we collect

  • Account data: name, email address and password (stored only in hashed form), plus sign-in tokens when you use a magic link or Google.
  • Company data: legal name, address, tax identifiers, branding and logos you upload.
  • Directory data: customers and products you save so they can be reused on documents.
  • Document data: the fields, line items and body text you enter, plus version history.
  • Billing data: plan, status and identifiers needed to honour a purchase. Card numbers are handled by Stripe, not by Lettr.
  • Technical data: access logs needed to keep the service secure.

3. Purposes and legal bases

  • Providing the document service and keeping you signed in (performance of a contract).
  • Applying plan entitlements, preventing abuse and keeping the product reliable (legitimate interest).
  • Meeting legal obligations such as accounting records.

4. Sharing

Data is stored with infrastructure providers in the EU (hosting, database and, when configured, Stripe). We do not sell personal data. Processors receive only what they need to perform that role. Document contents are not used for advertising.

5. Retention

We keep account and document data while the account exists, or for as long as needed for the purpose collected or required by law. If you close an account we delete or anonymise personal data we no longer need, except where a payment or legal request must be kept.

6. Your rights

  • Access, rectification and erasure.
  • Restriction of processing and objection to processing.
  • Data portability. Exporting a PDF or DOCX is one way to take a copy of a document with you.
  • The right to lodge a complaint with Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, Zagreb.

7. Cookies

Lettr uses only cookies needed to sign you in and run the product (or an equivalent session cookie in local mode). We do not use third-party cookies for tracking or advertising.

8. Local and development mode

Lettr can run without cloud credentials. In that local mode, account, company and document data stay on the machine running the app, and checkout is mocked rather than sent to Stripe.

9. Changes

If this policy changes, the date at the top of the page will change. The current terms of service sit alongside this policy.