Privacy Policy
Last updated September 2026 · applies to securitydepositdemandletters.com
The short version
- Your lease is never uploaded. If you use the lease reader, the file is opened and read inside your own browser. It never reaches our servers.
- We never see your card. Payment happens on Stripe. We receive a payment confirmation and an amount, never a card number.
- We do not sell or share your information for money, for advertising, or for anyone else's profiling. There are no advertising trackers on this site.
- We set no cookies. The site stores your answers in your own browser so you can come back to them.
- If you start a letter and never finish it, we delete it after 30 days, automatically.
Who we are
Security Deposit Demand Letters is a document preparation service. We prepare a demand letter from information you give us, at your direction, and mail it on your behalf. We are not a law firm and we do not provide legal advice. For questions about this policy, email privacy@securitydepositdemandletters.com.
What we collect
What you type into the letter
The facts your letter is built from: the state and address of the rental you left, your move-out date (and move-in date, if your state requires deposit interest), the deposit amount, how much came back, whether you received an itemized statement and what reasons were given, and your landlord's or management company's name and mailing address. Also which records you hold (photographs, the lease, messages; you check boxes, and nothing is uploaded), anything you choose to add in your own words, your name, your current mailing address, and your email address.
Some of this is sensitive by nature. It describes a dispute you are in. We treat it that way: it is used to prepare and send your letter and to support you, and for nothing else.
The letter itself
We store the exact text of the letter we generate for you, so you can read it, sign it, and so we can print and mail the same document you approved.
Your signature and its audit trail
When you sign, we record the signature you draw (as a set of line coordinates) or the name you type, along with the evidence that makes an electronic signature meaningful:
- the date and time you signed;
- the IP address and browser/device description you signed from;
- a SHA-256 cryptographic hash of the exact letter text you signed. This proves which document was signed and would not match an altered one; and
- a record that you consented to sign electronically.
These details are printed on the final page of your signed PDF, so you hold the same record we do.
Your lease, if you use the lease reader: read on your device only
You may choose a lease PDF to fill the form in automatically. The file is opened and read inside your browser, on your device, using software we serve to your browser. The file is never uploaded to us, never transmitted anywhere, and never stored. Only the handful of values it finds (deposit amount, dates, landlord name, addresses) appear in the form, and only what you keep and send ever reaches us. If you close the page without sending it, nothing about your lease has left your device.
Payment information
Payment is processed by Stripe on Stripe's own checkout page. We never receive or store your card number, expiry, or security code. We store what Stripe returns to us: a payment session identifier, the amount charged, and the time of payment.
Information collected automatically
- Approximate location, used once and not stored. When you open the letter form, our server asks Cloudflare (the network serving this site) which state the request came from, so the state can be pre-selected for you. That answer is used to fill in a dropdown you can change. It is not written to our database.
- Standard server processing. Like any website, requests to this site are processed by Cloudflare and carry an IP address. We do not keep our own server access logs of your browsing.
- Progress measurements. As you move through the form, the site sends us a small event containing what happened (“reached a step”, “started checkout”, “lease read, five fields found”), which step number you were on, which state you selected, and a timestamp. That is the whole event. No name, address, email, deposit amount, or dispute detail is ever in one. They exist so we can see which steps confuse people and fix them.
Stored in your browser, not on our servers
To stop you losing work, your answers are saved in your own browser's local storage, along with checklist progress and deduction-checker entries. This stays on your device, is not readable by us unless you send the form, and you can clear it by clearing your browser's site data. We do not use cookies, and we do not use advertising or cross-site tracking technology of any kind.
What we never collect
Your card number. Your lease document. Your precise GPS location. Your contacts, photos, or files. Your activity on other websites. We do not buy information about you from data brokers, and we do not build advertising profiles.
How we use what we collect
- To prepare your demand letter and show it to you before you pay.
- To let you sign it, and to produce your signed PDF and its audit trail.
- To print your letter and mail it by USPS Certified Mail to the recipient you identified.
- To email you about your letter: your copy, the tracking number, delivery confirmation, and a note when the landlord's legal deadline passes.
- To remind you that a signed letter has not been sent yet, if you signed and did not pay.
- To answer you when you contact support.
- To keep records of what we prepared and mailed, and to meet our legal and accounting obligations.
We do not use your dispute details to market anything to you, and we do not send unrelated promotional email.
Who we share it with
Only the providers needed to deliver what you bought, and only the part each one needs.
| Who | What they get | Why |
|---|---|---|
| Stripe | Your email and the amount; your card details go directly to them and never through us | To take payment |
| Cloudflare | Your requests to this site; our database and application run on their network | To serve and store the service |
| Resend | Your email address and the message we send you | To deliver email about your letter |
| Only the address text you type into an address box, as you type it, if address suggestions are available | To suggest complete addresses | |
| USPS | The tracking number of your letter | To check delivery status |
| Our print and mail operation | Your letter, your return address, and the recipient's address | To print and mail it |
We may also disclose information if the law requires it, to respond to lawful legal process, or to protect against fraud or abuse. If our business is ever sold or merged, information may transfer as part of it, and this policy would continue to apply to it, or you would be told before anything changed.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California and other state privacy laws. We never have.
How long we keep it
| What | How long |
|---|---|
| A letter you started but never signed or paid for | Deleted automatically after 30 days |
| A letter you signed but never paid for | Kept so you can still send it; deleted on request, and reviewed periodically |
| A letter we mailed, its signature and audit trail | Kept while it is useful to you as evidence and while we may need it to answer a dispute (up to seven years), then deleted |
| Payment records | As long as tax and accounting rules require |
| Your lease file | Never held at all. It is read on your device |
You can ask us to delete your information sooner and we will, unless we are required to keep a specific record. Deleting a mailed letter's record does not un-mail it.
Getting your records back, later
A demand letter matters most months after it was sent, usually in a small claims hearing. Two things make that work:
- Your link, if you lose it. Your letter tracker and signed PDF live at a private link we emailed you. If you no longer have that email, ask for it again from the letter tracker using the address on your order. We reply the same way whether or not an address is on an order, because confirming which email addresses are customers would itself leak something.
- The fingerprint, if someone doubts the letter. The last page of your letter prints a SHA-256 hash of its exact wording. Anyone can check it at our verification page and confirm the letter was not edited after you signed it. That check returns the signing date and the state law cited, and never who signed it or what was demanded. Holding a fingerprint should not turn into holding a person's name and address.
If you need records in a form we do not offer, or a formal declaration for a court, email support@securitydepositdemandletters.com and describe what the court asked for. We keep mailed letters and their signature records for up to seven years precisely so that request is answerable.
Your rights and choices
Wherever you live, you may ask us to:
- Tell you what we hold about you, and give you a copy.
- Correct anything that is wrong.
- Delete what we hold, subject to records we must keep.
- Stop emailing you, other than messages that are part of a letter you have paid us to send.
Email privacy@securitydepositdemandletters.com and we will respond within 45 days. We will not treat you differently for using any of these rights: no worse price, no reduced service.
If you live in California, the CCPA/CPRA gives you the rights above, plus the right to know the categories of information collected, used, disclosed and sold or shared. Because we do not sell or share personal information and run no advertising trackers, there is nothing for a “Do Not Sell or Share” request or a Global Privacy Control signal to opt you out of. The answer is already no, for everyone. We do not use or disclose sensitive personal information beyond what is needed to provide the service you asked for.
If you live in Texas, Virginia, Colorado, Connecticut, Utah, Oregon, Montana, or another state with its own privacy law, you have equivalent rights of access, correction, deletion and portability, and the right to appeal a decision we make about such a request. To appeal, reply to our response and say you are appealing; we will answer in writing.
This service is intended for renters in the United States. It is not directed at, or offered to, people outside the United States.
How your letter trackers are protected
Your letter tracker and your signed PDF are reachable only through a long random link we email you. Treat that link like a password: anyone who has it can see that letter. Tell us and we will invalidate it if you think it has been exposed. All traffic to this site is encrypted in transit.
Children
This service is for adults entering into rental agreements. It is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, email us and we will delete it.
Changes to this policy
If we change how we handle your information, we will update this page and change the date at the top. If a change is significant (new categories of data, a new purpose, a new recipient) we will say so plainly here, and email customers with an active case.
Contact
Privacy questions and requests: privacy@securitydepositdemandletters.com
Anything else: support@securitydepositdemandletters.com