Privacy policy

Hartley Kingon trading as Dead Letter Club (ABN 39 734 988 546) handles personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).

What we collect

• Your email address: to create your account, sign you in, deliver cases and receipts, and (only if you agree) send marketing.
• Purchase details: plan, amounts and dates. Card details are handled by Stripe; we never see or store your card number.
• Gift details: names, messages and the recipient's email you enter, so we can deliver the gift.
• What you do in cases: notes, suspect board, interrogation chats, lab requests and accusations, so they're saved to your account and we can show statistics such as “solved by X%” (shown only in aggregate).
• Technical data: IP address and logs, used for security, rate limiting and fixing problems.

Why

To provide the service you bought, keep it secure, communicate with you, and improve it. We don't sell personal information and we don't use it for advertising profiles.

Where it's stored, and who helps us (APP 8)

We use these service providers, which may store or process data outside Australia:

• Supabase (database and sign-in): data hosted in Japan (Tokyo).
• Vercel (website hosting and AI gateway): servers in Japan and the United States.
• Stripe (payments): Australia, the United States and other countries.
• Resend (email delivery): United States.
• Anthropic, via Vercel's AI Gateway (AI generation): United States. Your interrogation questions and lab requests are sent to generate replies. We don't send your email address with them.

We take reasonable steps to ensure these providers protect your information consistently with the APPs.

Marketing (Spam Act 2003)

We only send marketing emails if you've ticked the consent box. Every marketing email identifies us and has a one-click unsubscribe, honoured immediately. Service emails (receipts, sign-in links, new-case notices for members) are not marketing.

Access, correction and deletion

You can see your account details on the Account page. To delete your account and associated data, use Account → Delete my account. This cancels any subscription and permanently deletes your profile, notes, chats and results. Stripe retains transaction records as required by tax law. For access or correction requests, email us.

Security and retention

Data is encrypted in transit; databases use access controls so members can only read their own records. We keep account data while your account exists, and logs for up to 30 days.

Complaints

Contact us first: hello@thedeadletterclub.com. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).