Privacy Policy
The letter stays private. The policy stays clear.
This Privacy Policy explains how Slowkept LLC, a Wyoming limited liability company, collects, uses, shares, protects, and retains information when you use SLOWKEPT.
Effective Date: July 19, 2026
Last Updated: July 19, 2026
The full letter stays off SLOWKEPT
Do not upload the full letter text, a scan, or a photograph. SLOWKEPT is designed to work with limited account, payment, Code, timeline, and support records instead.
No passive open tracking
Opening a recipient page does not notify the sender. Only a shared update deliberately submitted by a participant appears in the shared timeline.
Private notes are not shared
A private note attached to a timeline event is shown only to the account that created it, not to the other participant.
Payment data stays with payment providers
SLOWKEPT does not store complete card numbers or card security codes. Payment providers handle those details and send SLOWKEPT limited order, risk, refund, and dispute records.
Information SLOWKEPT may process
Account and authentication information
SLOWKEPT is only for people who are 18 years of age or older. This may include your email address, authentication identifiers, account status, security events, session information, and records needed to verify adult eligibility.
Demo and product access records
This may include whether your one-time Demo has been used, guide access, printable access, Ongoing Private Thread credits, access status, and the order or administrative grant that created an entitlement.
Private Thread records
This may include Thread identifiers, participant roles, Private Thread Codes in protected form, chosen timeline updates, round status, access status, and private notes. The full physical letter is not part of the Thread record.
Purchase, Checkout Recovery, refund, risk, and dispute records
This may include provider identifiers, order totals, currency, payment status, fraud-risk summaries, early fraud warnings, refund and dispute events, entitlement changes, processing timestamps, and an optional Checkout Recovery consent and lifecycle. Recovery stores checkout identity and timing, not recipient email addresses or private correspondence.
Support and administrative records
This may include messages you send to support, investigation notes, account or entitlement corrections, administrator identity, and an audit trail of high-risk actions. Do not include the full letter in a support request.
Technical and security information
This may include IP-derived security signals, short-lived pseudonymous rate-limit identifiers, browser and request information, logs, error records, and webhook processing records used to protect accounts and payments.
How information is used
Only for operating, protecting, and supporting SLOWKEPT.
- Provide accounts, guides, printables, Demos, Private Threads, Codes, timelines, and private notes.
- Confirm purchases, deliver access, prevent duplicate delivery, process refunds and disputes, respond to payment-provider risk signals, and send one optional consent-based Checkout Recovery reminder when a payment remains incomplete.
- Protect accounts, Codes, downloads, checkout, payment webhooks, and administrative tools from abuse or unauthorized access.
- Provide customer support, investigate technical problems, maintain audit records, and comply with legal, tax, accounting, and dispute obligations.
- Improve reliability and usability through limited operational measurement. SLOWKEPT does not use a page opening as a recipient read receipt.
Cookies, sessions, and local storage
SLOWKEPT uses essential cookies or similar browser storage for sign-in, session continuity, security, checkout state, and preferences needed to operate the service.
SLOWKEPT uses privacy-minimized aggregate analytics on an explicit allowlist of public pages to count page views, selected button clicks, active visible engagement time, page exits, and the aggregate Pricing-to-Checkout entry funnel. It does not use analytics cookies or browser storage, create visitor profiles, store IP addresses or user agents in the analytics dataset, or track Thread, Code, letter, private-note, account, or private Checkout content. A recipient page opening is never used as a read receipt.
Checkout Recovery is optional and unchecked by default. When you explicitly request it, SLOWKEPT may attempt one reminder 2–3 hours later only while the order remains unpaid. Payment completion cancels unsent reminders. The recovery page requires sign-in and rechecks the current product, price, order, and provider session before returning to payment. You can stop future recovery reminders from that page, and bounce, complaint, or provider suppression signals stop delivery.
You can control cookies through your browser, but blocking essential storage may prevent sign-in, checkout, or private account features from working.
Service providers and disclosures
Hosting, database, and authentication providers
Service providers such as Vercel and Supabase may process information needed to host the website, operate the database, authenticate users, and deliver secure infrastructure.
Payment providers
Depending on the checkout offered, Stripe, Paddle, or PayPal may process payment details, authentication, fraud screening, refunds, and disputes under their own privacy terms.
Email, support, and security providers
Limited information may be processed by providers used for transactional messages, customer support, monitoring, fraud prevention, and incident response.
Legal and safety disclosures
Information may be disclosed when reasonably necessary to comply with law, protect users or SLOWKEPT, investigate fraud, enforce agreements, or respond to a valid legal process.
These providers may process information in the United States or other countries. Where required, SLOWKEPT relies on contractual, organizational, and technical safeguards for cross-border processing.
Retention and deletion
Account and product records
Account and access records are generally kept while your account or product access remains active. When you request account deletion, SLOWKEPT will delete or de-identify information that is no longer needed, subject to the exceptions below.
Private Thread history
Existing shared history and private notes may remain available in read-only form after a confirmed refund or final payment reversal. SLOWKEPT does not delete that history solely because paid write access ended. A separate deletion request is reviewed under applicable law and the rights of both participants.
Payment and audit records
Order, refund, dispute, fraud, security, and administrator audit records may be kept as needed for tax, accounting, fraud prevention, payment-provider requirements, legal claims, and regulatory obligations.
Webhook payloads and logs
Encrypted raw payment-webhook payloads are scheduled for deletion after 30 days. Event identifiers, hashes, processing results, entitlement changes, and necessary audit records may be retained longer.
Support records
Support records are kept only as long as reasonably needed to resolve the request, prevent repeated abuse, document a payment or account decision, or satisfy legal obligations.
Your privacy choices
Requests are reviewed according to the law that applies to you.
SLOWKEPT may need to verify your identity before completing a request. Some records cannot be deleted immediately when they are needed for security, payment disputes, legal obligations, or the rights of another Thread participant.
- Ask what personal information SLOWKEPT holds about you.
- Request correction of inaccurate account information.
- Request deletion or de-identification, subject to legal, security, payment, dispute, and multi-participant record obligations.
- Request a portable copy of information where applicable and technically feasible.
- Object to or request restriction of certain processing where applicable law provides that right.
- Withdraw consent where processing relies on consent, without affecting earlier lawful processing.
- Complain to an appropriate data-protection authority where that right applies.
Security
SLOWKEPT uses access controls, encrypted transport, payment-provider tokenization, rate limits, audit trails, secret management, and other administrative and technical safeguards. No internet service can guarantee absolute security.
Adults only
SLOWKEPT is only for people who are 18 years of age or older. We do not accept users under 18, including users with parent or guardian consent.
Policy changes
SLOWKEPT may update this policy as the service, providers, or legal requirements change. A revised date will be posted here, and material changes may also be communicated through the service or by email.
Contact
Privacy requests may be sent to support@slowkept.com. SLOWKEPT is operated by Slowkept LLC, a Wyoming limited liability company.