You're handing LetterScript some of the most sensitive paperwork in a real estate transaction — purchase agreements, disclosures, and your clients' personal details. Here's how that data is protected, in plain language. There's also a public Security & privacy overview you can share with a brokerage.
Your documents are encrypted
Every file is encrypted the moment it leaves your browser and stays encrypted the entire time we hold it — both in transit and at rest in storage. Nobody can read a document off a disk or intercept it on the way to us.
The AI never trains on your data
LetterScript reads your documents with Amazon Bedrock, Amazon's enterprise AI service, which can run that processing in any AWS region, inside or outside the United States. Bedrock does not store your documents or use them to train its models, and neither do we. Your contracts and client details are processed only to build your transaction — never used to train any AI model, and never shared with anyone to improve theirs.
There is one exception, and it only exists if you create it yourself: if you connect an AI assistant — Claude, ChatGPT or another — the excerpts it asks for do leave LetterScript, as does your account email address if the assistant asks for it and you approve that too. What that provider stores or retains is governed by its terms, not ours. Nothing leaves until you approve a specific assistant for specific transactions on the approval screen; your email address is shared only when that screen lists Your email address. Disconnecting the assistant in Settings → Integrations → Connected apps ends all of it. The promise above is unchanged for everything else.
Only you can see your workspace
Everything you upload is private to your workspace. Sign in with your Google, Microsoft, or Apple account — or with an email and password. If you use a password, we store only a salted bcrypt hash of it, never the password itself. Access to the systems that hold customer data is tightly restricted and used only to run and support the product.
You're in control of your data
- Delete a document anytime from its own page (⋮ → Delete Document, then confirm) — it's removed from the transaction and deleted from storage, and its short-lived encrypted recovery copy is purged within 14 days.
- Delete your account from settings to remove your data. It's removed from the app immediately, and encrypted recovery copies and routine backups are purged within 14 days.
- We never sell your data or share it with agents, lenders, or other parties to your transactions. You have privacy rights under the California Consumer Privacy Act (CCPA).
Payments are handled by Stripe
Billing runs through Stripe — you pay per transaction, one at a time with no plan or through an optional monthly plan. Card details go straight to Stripe; LetterScript never sees or stores your card number.
Still have a question?
Email privacy@letterscript.com or use the contact page. If your brokerage needs documentation for a compliance review, just ask.