This Privacy Policy explains how Smalltalk Group Ltd, trading as Cosmic Letter ("we", "us", "our"), collects, uses and protects information when you use cosmicletter.to and related Services.
1. Who we are
We are the data controller for the personal data we collect about you. You can reach us at hello@cosmicletter.to, or by post at Henstaff Court, Llantrisant Road, Cardiff, Wales CF72 8NG, United Kingdom.
2. Information we collect
We collect the following categories of personal data:
- Account information — your name (or chosen display name) and email address.
- Cosmic profile — date, time and place of birth, gender (optional), tone preferences and any details you choose to add for your daily letter.
- Location & weather — your approximate location and local weather, used to personalise your daily note. You can disable this in preferences.
- Billing information — handled by our payment provider; we store only the metadata needed for receipts and subscription management.
- Usage data — pages viewed, features used, device and browser information, IP address, and similar telemetry.
3. How we use your information
We use your information to:
- Create, send and store your personalised daily Cosmic Letter and Cosmic Card.
- Operate your account and process subscriptions and gifts.
- Send service emails (your daily letter, billing receipts, important changes).
- Improve our writing, our models and the quality of our Services.
- Detect fraud, abuse and security incidents.
- Comply with legal obligations.
4. Legal bases (UK & EU)
We process your data on the bases of: performance of our contract with you (to deliver the Services you signed up for), your consent (for optional personalisation such as location and marketing emails), our legitimate interests (to improve and secure the Services), and legal obligation.
5. AI and your data
Cosmic Letter uses AI models to compose your daily letter from your cosmic profile and today's sky. Your personal data is sent to our AI providers under data processing agreements that prohibit using your data to train their general-purpose models. We never sell your personal data.
6. Sharing your information
We share data only with vetted service providers acting on our behalf — hosting and database, email delivery, payment processing, analytics, and AI providers — under appropriate contracts. We may disclose information if required by law, or to protect our rights and the safety of our users.
7. International transfers
Our Services are hosted in the United States, United Kingdom and European Union. By using the Services you consent to your data being transferred to and processed in these locations. Transfers are protected by appropriate safeguards such as Standard Contractual Clauses.
8. Data retention
We retain your data while your account is active and as long as needed to provide the Services. Free Preview readings are retained for a short window (typically 3 days of history); Cosmic Letter+ retains up to 365 days of letters by default. When you delete your account we remove your personal data within 30 days, except where we are required to retain it for legal, accounting or fraud prevention purposes.
9. Your rights
Depending on your location, you have rights to access, correct, delete, restrict or object to processing, and to data portability. You also have the right to withdraw consent at any time and to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office).
To exercise any of these rights, email hello@cosmicletter.to.
10. Children
The Services are not intended for children under 18. Lifetime Keepsakes for a baby or child are parent-managed: the responsible adult is the account holder, controls visibility (private by default), and may delete the keepsake at any time.
11. Cookies
We use cookies and similar technologies as described in our Cookie Policy.
12. Security
We use industry-standard security controls — encryption in transit, access controls, audit logging and principle-of-least-privilege — to protect your data. No system is perfectly secure; please use a strong, unique password and notify us promptly of any suspected unauthorised access.
13. Changes
We may update this policy from time to time. We will post the updated version on this page and update the "last updated" date above.
14. Contact
Smalltalk Group Ltd
Henstaff Court, Llantrisant Road
Cardiff, Wales CF72 8NG, United Kingdom
hello@cosmicletter.to