Privacy

Letters hold people's most personal moments, so we collect as little as we can, use it only for the reason we collected it, and protect it carefully. Dearli Technologies LTD. is responsible for your information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act. Our Privacy Officer answers for it and can be reached at privacy@dearli.ca.

What we collect, and why

• From you, when you buy a letter here: your first and last name (shown to the receiver as who it's from), your email (your receipt, your letter's private page, a forgotten code) and your phone number (only for the reminders you ask for).
• A letter bought in a shop: your first and last name and your phone number, written on the letter's signing sheet, so we can tell you when it is opened.
• About the receiver: their first name, if you give it; their email only if you ask us to deliver the letter, used once for that; their name and address only for a letter by mail.
• The letter: the photo or video, voice message and note you add, and the lock you choose.
• If you ask to hear from us: your email, used only to tell you what you asked about. Every such email lets you stop them.
• Payment: handled by our payment provider. We receive whether it succeeded, never your card number.
• Keeping letters safe: the internet address a request comes from, used for a short while to stop anyone guessing at links or lock codes.
• Cookies: one to keep the letter you are making in your browser until you buy it, one to remember a letter you have unlocked, and one to remember a partner's link or a promotion for 30 days. No advertising or tracking cookies.

Who else handles it

• Amazon Web Services, which runs our server and sends our email, in Canada.
• Our payment provider, for payments.
• A text message service, for the reminders you ask for by text.
• Canada Post or another carrier, for letters by mail.

Each receives only what it needs to do that one thing. Some of them, our payment provider in particular, may process information outside Canada, where it is subject to the laws of that country. We never sell personal information and never share it for advertising.

How long we keep it

• A letter you only tried: deleted a few minutes after you leave, or after an hour without activity.
• An order started but not paid for: deleted after a day.
• A letter bought here: kept for the time you chose — three months or a year from the day it is first opened, or a year from purchase if it is never opened. Then its photo or video, voice and words are deleted for good, along with your phone number and anything about the receiver. You can ask us to delete it sooner.
• A letter from a shop: kept while the card is in use, until shops sell a set term; you can ask us to delete it at any time.
• Records of a purchase (your name, email, what you bought and what you paid): as long as Canadian tax law requires, then deleted.
• Addresses used to stop guessing: deleted within a day.

How it's protected

Letters are never listed or indexed by search engines. Photos, videos and voices are stored privately and open only through links that expire, handed out by a letter to someone allowed to see it. Locks are stored encrypted, and wrong answers are limited. Everything travels encrypted between your phone and our server, which is in Canada.

Letters are not end-to-end encrypted: that would make it impossible for us to send you a forgotten code. Only the few people who run Dearli can access stored letters, and only to operate the service, when you ask us to, or when the law requires it. If a breach ever puts your information at real risk, we will tell you and the Privacy Commissioner of Canada.

Your choices

You can ask to see, correct or delete your information, or to delete a letter, by writing to privacy@dearli.ca. We answer within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or, in British Columbia, the Office of the Information and Privacy Commissioner for British Columbia.

Children

Dearli is not meant for children under 13, and we don't knowingly collect their information. Letters for children are made and sent by adults.