What we collect
We collect the minimum we need to run the service: your email address, the flight numbers and dates you ask us to watch, the recipients you name for each letter, and your delivery preferences such as the confirmation window you choose.
Payment details are handled by our payment processor and never touch our servers.
Your letters
Letters are encrypted on your device the moment you save them. We store only the encrypted version, and we cannot read it. No employee, contractor, or system at busul has access to the contents of a letter at any point, including at delivery time.
A letter is decrypted only when it is delivered to the recipient you chose, and only if you did not confirm your landing within your window.
Flight data
To track your flights we share the flight number and date with our flight data providers. We never share your name, your email, your recipients, or anything about your letters with them.
What we never do
Some things are simply off the table:
- We never read your letters, because we cannot.
- We never sell or rent your personal data to anyone.
- We never use your data for advertising.
- We never contact your recipients unless a letter is being delivered.
How long we keep it
Letters stay stored while your account is active. If you delete a letter, it is removed permanently within 30 days. If you delete your account, all your letters, recipients, and flight history are deleted with it.
We keep basic billing records for as long as tax law requires.
Your rights
You can export or delete your data at any time from your account settings. If you are in a jurisdiction with data protection laws such as the GDPR or CCPA, you also have the right to access, correct, and port your data, and to complain to your local authority.
Contact
Questions about this policy or your data? Write to privacy@busul.com and a human will answer.