Privacy Policy

FutureLetter ("we" or "the Service") respects and protects your personal information. This Privacy Policy explains how we collect, use, and protect your information when you use FutureLetter. This policy applies to all users of the Service. By using the Service, you agree to the information collection and use practices described in this policy. This policy complies with applicable laws and regulations, including GDPR (General Data Protection Regulation) and other applicable privacy laws. The data controller responsible for the Service is A&B Network (South Korea, https://anb-network.com). You can reach us at contact+futureletter@evoa.one.

We collect the following information to provide our service: • Recipient email address: Required to send your letter • Sender email address (optional): If you don't use the anonymous sending option • Letter content: The Markdown text and formatting of your letter • Scheduled delivery date: To determine when to send your letter • Selected theme: To render your letter • Letter title (optional) We also collect visitor statistics through Google AdSense to improve the Service. This information is collected in anonymized form that cannot identify individuals.

We use the information we collect solely for the following purposes: • Delivering your letter on the scheduled date • Providing and maintaining Service functionality • Improving the Service and enhancing user experience • Complying with legal obligations • Preventing misuse and enhancing security We do not use your information for marketing purposes, nor do we sell or rent it to third parties. Letter content is sent only to the designated recipient and is not used for any other purpose.

Your letters are stored securely in Google Cloud Firestore, a managed database service operated by Google, in Google Cloud's asia-east1 region (Taiwan). We use the following security measures to protect your data: • Encryption of data in transit (HTTPS) and encryption at rest • No direct access from browsers or apps: the database rejects all client connections, and every read and write goes through our own server • Access to a letter is restricted until the recipient's email is verified We also perform automatic daily backups to prevent data loss. Backups are managed by Google Cloud, retained for 7 days, and then deleted automatically. In the event of a data breach, we will notify the relevant supervisory authority and affected users without undue delay, as required by applicable law.

We do not share, sell, or rent your personal information to third parties. Your letters are completely private and only accessible through the email address you provide. However, we may share information in the following cases: • Disclosure required by law • Court orders or requests from government agencies • Limited sharing with trusted service providers necessary for service delivery (e.g., Google Cloud for database hosting and backups, email delivery services, anti-spam services) Even in these cases, we share only the minimum necessary information and require them to comply with the same security standards. Your letters are stored and backed up in Taiwan, and some service providers, such as our email delivery provider, are located in the United States. Your information may therefore be transferred to and processed outside your country of residence.

Your letter is retained on our servers for up to 3 months from its scheduled delivery date, after which it is automatically deleted. When delivery succeeds as scheduled, this is effectively the same as 3 months after the letter was actually sent. This is for the following reasons: • Ability to retry if delivery fails • Providing sufficient time for recipients to view their letters • Data security and privacy protection After 3 months, all data is permanently deleted and cannot be recovered. If you wish to keep your letter permanently, please download it as a PDF after receiving it and store it on your personal device. Unsent letters are automatically deleted after the scheduled date passes.

We use Google AdSense to understand how visitors use our website and to display relevant advertisements. Google AdSense may use cookies to collect information such as pages visited, ads clicked, and time spent on the site. This information is collected in a form that cannot identify individuals and is used to improve the Service and maintain it as a free service. We also use Google reCAPTCHA v3 to prevent spam and abuse, which may send visitor behavior data to Google for analysis. You can view Google's privacy policy at https://policies.google.com/privacy. You can block cookies or opt out of personalized advertising through your browser settings, though some features may be limited.

You have the following rights regarding your personal information: • Right of access: To access and review your information • Right to rectification: To correct inaccurate information • Right to erasure: To request deletion of your information (may be limited if there are legal retention obligations) • Right to restriction of processing: To request restriction of information processing in certain situations • Right to data portability: To transfer your information to another service • Right to object: To object to the processing of your information • Right to lodge a complaint: To lodge a complaint with the data protection supervisory authority in your country of residence To exercise these rights, please contact us at contact+futureletter@evoa.one. We will respond to your request within a reasonable timeframe.

We may update this Privacy Policy from time to time to improve the Service or comply with legal requirements. If there are significant changes, we will notify you through the website or by email. Changes take effect from the time they are posted on the website. Continued use of the Service after changes are made means you accept the updated policy. The latest version of this policy is always available on our website, and you can check for changes by looking at the "Last updated" date.