Privacy & Data
The Letter Vault is operated by A DIGITAL, obrt za usluge i izdavaštvo, vl. Anita Kaštelančić under the Becoming 366 brand.
For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR), A DIGITAL, obrt za usluge i izdavaštvo, vl. Anita Kaštelančić is the data controller responsible for the processing described in this Privacy & Safety information for The Letter Vault.
The Letter Vault is designed for private, personal future correspondence. We process personal data only as necessary to provide, protect, manage and deliver the service, comply with legal obligations, prevent misuse and respond to privacy or security requests.
What information we may process
Depending on how The Letter Vault is used, we may process:
- purchaser email address and purchase or entitlement reference
- recipient email address
- recipient name, where provided
- a sender-selected display name for non-Myself letters, used to identify the source of recipient information at delivery (this is not necessarily the purchaser’s legal name)
- limited recipient relationship or event information where required for a Letter Vault feature
- chosen delivery date and time zone
- encrypted letter content
- delivery, cancellation, bounce and failure status
- limited security, audit and anti-abuse information
- required declarations and their acceptance date and version
- support and privacy-request correspondence
We do not use recipient information or private letter content for advertising, behavioural profiling, resale or recipient marketing.
How letter content is handled
Before a letter is sealed, an unfinished draft may be stored locally in the purchaser’s browser on that device.
When a letter is sealed, the content is transmitted securely to The Letter Vault and encrypted for storage.
The Letter Vault is not a zero-knowledge or end-to-end encrypted service. Our systems must be technically capable of processing the letter when it is sealed and again when it is prepared for delivery. The email delivery provider receives the content necessary to deliver the letter.
Access to production systems is restricted. Private letter content is not used for advertising, profiling, AI training or unrelated commercial purposes.
Why we process purchaser data
When you purchase or directly use The Letter Vault, we process information as necessary to provide and manage the service you requested, protect the service and comply with applicable legal obligations.
Why we may process recipient data
When a purchaser provides information about another person, that information has not been collected directly from the recipient.
For ordinary personal recipient information, A DIGITAL relies on legitimate interests under Article 6(1)(f) GDPR.
Those interests are:
- the purchaser’s interest in arranging a private future communication with a person they personally know; and
- A DIGITAL’s interest in securely providing that requested private delivery service.
We limit Surprise delivery to private, one-to-one communication and apply safeguards including purpose limitation, encryption, access controls, cancellation, recipient objection, suppression, defined deletion periods and restrictions against marketing, bulk communication and abuse.
Keep It a Surprise
Some purchasers choose to keep the existence of a future letter secret until its selected delivery date.
Contacting the recipient in advance would itself reveal that a specific private future communication exists.
For this limited purpose, A DIGITAL relies on the serious-impairment provision in Article 14(5)(b) GDPR where and for as long as providing individual advance information would seriously impair the specific purpose of keeping the existence of that private future communication secret until the sender-selected date.
Public privacy information for recipients remains available during that period.
When the reason for delayed individual notice ends, including when the letter is delivered, privacy information is provided to the recipient.
This approach is applied narrowly and is kept under review.
Your rights
Depending on the circumstances and applicable law, you may have rights including access, correction, erasure, restriction and objection.
Privacy requests can be sent to: hello@becoming366.com
We may need to verify your identity before acting on a request.
You also have the right to lodge a complaint with the competent data protection supervisory authority. For A DIGITAL in Croatia, this is the Croatian Personal Data Protection Agency (AZOP).
Recipient Privacy
Information for people who receive — or believe they may be the intended recipient of — a Letter Vault letter.
Why might The Letter Vault have information about me?
Someone who personally knows you may have used The Letter Vault to arrange a private letter for future delivery.
That person may have provided limited information needed to store and deliver the letter, such as your email address, optional name, a delivery date and limited information required by the selected Letter Vault product.
A private encrypted letter may also relate to you.
Where did my information come from?
The information was supplied by someone who used The Letter Vault and stated that they personally know the intended recipient.
At delivery, we identify the source using the sender-selected display name they provided when creating the letter. That name is chosen by the sender for delivery disclosure and is not necessarily their legal name.
The purchaser’s email address is not disclosed to recipients for source identification.
Why wasn’t I contacted earlier?
If the sender selected Keep It a Surprise, contacting you earlier would have revealed that a specific private future communication existed.
Keeping the existence of that communication secret until the sender-selected date is part of the purpose of Surprise delivery.
During that period, this Recipient Privacy information is publicly available.
When the letter is delivered, you receive privacy information directly.
What is the legal basis?
For ordinary recipient information that was not obtained directly from you, A DIGITAL relies on legitimate interests under Article 6(1)(f) GDPR.
The interests are the sender’s interest in arranging a private timed communication with someone they personally know and A DIGITAL’s interest in securely providing that service.
For Surprise delivery, A DIGITAL relies on Article 14(5)(b) GDPR only where and for as long as individual advance notice would seriously impair the specific purpose of keeping the existence of that private future communication secret.
What information may be involved?
Depending on the product, this may include:
- your email address
- your name, where provided
- the scheduled delivery date
- limited relationship or event information required by the product
- encrypted letter content relating to you
- delivery and complaint status
- minimal security and audit records
What do we not do with it?
We do not use recipient information or letter content to:
- advertise to you
- create a marketing profile about you
- sell your information
- enrol you in a newsletter
- send promotional Letter Vault offers
- train AI systems on your private letter
- track whether you open the private letter for advertising purposes
Who helps us provide the service?
The Letter Vault uses carefully selected infrastructure and email-delivery providers to host, protect and deliver the service.
Those providers may process information only as required for their respective service functions and under applicable data-protection arrangements.
Current provider information and applicable international-transfer safeguards are maintained as part of our privacy documentation and can be requested at: hello@becoming366.com
Information may also be disclosed where required by applicable law or a valid legal order.
How long is information kept?
A pending letter is retained as necessary to provide the requested future-delivery service.
After successful delivery, cancellation or terminal delivery failure, encrypted letter content and unnecessary recipient information are normally deleted within 30 days.
Certain minimal records may be retained where required for security, suppression, legal obligations, accounting or disputes.
Can I object before a letter is delivered?
Yes.
If you believe The Letter Vault may hold information about you, you can contact us without waiting for a letter to arrive.
After appropriate identity verification, you may exercise applicable privacy rights.
Where a valid objection applies to a pending Surprise letter, future delivery may be cancelled and the relevant pending content and unnecessary personal information erased.
The sender’s wish to preserve a surprise does not remove your privacy rights.
A minimal protected suppression record may be retained where necessary to honour your objection and prevent your address from being re-added for future Surprise delivery.
Contact: hello@becoming366.com
Surprise Delivery Rules
The Letter Vault’s Keep It a Surprise option exists for genuine private correspondence between people who personally know each other.
It is not a tool for anonymous outreach or unsolicited campaigns.
A Surprise letter must be:
- a private personal communication
- intended for one natural person
- sent by someone who personally knows that person
- scheduled for a genuine future delivery
- unrelated to marketing, advertising or commercial prospecting
The Letter Vault must not be used for:
- marketing or sales outreach
- bulk messaging
- lead generation
- political campaigning or political outreach
- recruitment outreach
- debt collection
- scraped or purchased contact lists
- unsolicited commercial communication
- repeated unwanted targeting
- threats, harassment, stalking or intimidation
- impersonation, fraud or unlawful activity
- deliberately harmful or rights-infringing communication
Before using Surprise delivery, the purchaser must confirm:
“I am sending this private letter to one person I personally know. This is a personal message, not marketing, advertising, bulk email, or unsolicited commercial outreach.”
A recipient may exercise their privacy rights regardless of this declaration.
If a verified recipient objects to a pending Surprise delivery, The Letter Vault may cancel the delivery and erase the relevant data.
Children & Minor Recipients
The Letter Vault can have a deeply personal use for parents and guardians who want to leave words for a child to receive in the future.
Because children’s personal information deserves additional protection, special rules apply.
Who may create a letter for a minor?
For the current Letter Vault service, a Surprise letter addressed to a minor may only be created by that child’s parent or legal guardian.
The purchaser must be 18 or older.
When a recipient is identified as a minor, the purchaser must confirm:
“I confirm that I am this child’s parent or legal guardian and that the information I provide is accurate.”
This declaration does not remove the child’s own privacy rights and is not treated as consent given by the child.
What information should be provided?
Only information reasonably necessary to provide the Letter Vault service should be entered.
Do not provide identification documents, birth certificates or other official records unless The Letter Vault specifically and lawfully requests them. The current Letter Vault service does not require these documents.
Sensitive information about a child
Private letters can naturally be emotional and personal.
However, purchasers should avoid including unnecessary sensitive personal information about a child or another person.
The Letter Vault must not be used to create a hidden record about a child for unrelated purposes, monitoring, profiling, assessment or future commercial use.
Children’s rights
A child’s privacy interests and rights remain relevant even where a parent or guardian created the letter.
Where required, privacy information and rights handling should be provided in language appropriate to the child’s age and understanding.
Requests concerning a child’s information can be sent to: hello@becoming366.com
Letter Content Rules
The Letter Vault is built for private personal correspondence, not public publishing.
You are responsible for the words and information you choose to place in your letter.
You must not use The Letter Vault to store or deliver:
- unlawful content
- threats or intimidation
- harassment or stalking
- fraudulent or deceptive communications
- content intended to facilitate a crime
- content that unlawfully violates another person’s privacy or rights
Sensitive personal information
Please think carefully before including highly sensitive information about another person.
Do not include sensitive personal information about the recipient or another person unless you have a lawful reason to provide and use that information.
This may include information concerning health, racial or ethnic origin, religious or philosophical beliefs, political opinions, trade-union membership, genetic or biometric identification data, sex life, sexual orientation, criminal convictions or alleged offences.
A purchaser cannot create a legal right to process another person’s sensitive information simply by accepting these Terms.
Third-party information
Avoid including unnecessary personal information about people other than you and the intended recipient.
Private content
The Letter Vault does not use private letter content for advertising, recipient marketing, profiling or AI training.
We do not add automated content scanning merely for advertising or profiling purposes.
These rules do not prevent The Letter Vault from taking proportionate action where required by law, security obligations, a valid complaint or the protection of another person’s rights.
Storage & Deletion
Before you seal
An unfinished draft may be automatically saved in your browser on the same device.
That draft is not a server-side Letter Vault backup.
Changing device or browser, clearing browser data or removing local storage may cause an unfinished draft to be lost.
For especially long or important letters, you may wish to keep your own draft in Notes, Word or another private document until you are ready to seal it.
After you seal
Once sealed, your letter is transmitted to The Letter Vault and encrypted for storage.
The words inside a sealed letter cannot be edited.
Permitted delivery details may still be managed before delivery where the product supports them.
A pending letter may also be cancelled before delivery.
Pending letters
Pending letters are stored for as long as necessary to provide the future-delivery service selected by the purchaser, subject to applicable law, recipient rights and service policies.
After delivery
After successful delivery, encrypted letter content and unnecessary recipient personal information are normally retained for no longer than 30 days to allow limited operational handling and then deleted from the active Letter Vault system.
Cancelled letters
When a pending letter is cancelled, its content and unnecessary recipient information are normally deleted within 30 days.
Terminal delivery failure
Where delivery fails but recovery remains possible, the letter may be retained while the delivery issue can reasonably be resolved.
When the failure becomes terminal, the applicable deletion period begins and the content is normally deleted within 30 days.
Privacy erasure
A verified privacy request may require relevant information to be deleted sooner.
Where erasure of a pending letter is required, that deletion may make future delivery permanently impossible.
Minimal records
Deletion of letter content does not necessarily require deletion of every business record.
Minimal information may be retained where genuinely necessary for:
- accounting or tax obligations
- security
- fraud or abuse prevention
- honouring a recipient suppression request
- establishing, exercising or defending legal claims
- demonstrating that a privacy or deletion request was completed
Backups
Operational backups are protected and managed separately from active Letter Vault data. Deleted information may remain temporarily in protected backup media until the applicable backup lifecycle removes or overwrites it, unless applicable law requires a different treatment.
Your Privacy Rights
Depending on the circumstances and applicable data-protection law, you may have the right to:
- ask whether we process personal information about you
- request access to your personal information
- correct inaccurate information
- request deletion
- request restriction of processing
- object to processing based on legitimate interests
- receive certain information in a portable form where the legal conditions for portability apply
- lodge a complaint with a supervisory authority
How to make a request
Email: hello@becoming366.com
Tell us that your request concerns The Letter Vault and explain what you are asking us to do.
Please do not send passwords, access codes, encryption keys or unnecessary identity documents by ordinary email when contacting us for general privacy requests.
If you use the purchaser-initiated Forgot your access code? recovery on the Vault entry screen, we will email a newly generated access code to your purchase email after you verify control of that inbox. That operational message is limited to restoring your access to your own purchases.
Identity verification
Because Letter Vault information may involve private correspondence, we must take reasonable steps to make sure we are responding to the correct person.
We will request only the information reasonably necessary to verify the request.
Recipient objection
If you are the intended recipient of a pending Surprise letter and you object to the processing, we will assess the request under applicable law.
Where the objection is valid and no overriding lawful ground requires continued processing, future delivery will be stopped and relevant pending information erased or restricted.
We may retain a minimal protected suppression record where necessary to ensure your objection is respected in the future.
After delivery
An email that has already been delivered cannot be recalled from the recipient’s email provider.
However, a valid privacy request may still affect information that remains within The Letter Vault after delivery.
Complaint
You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or, where applicable, another competent supervisory authority.
Letter Vault Terms of Service
Last updated: September 2026
1. About The Letter Vault
The Letter Vault is a digital future-letter storage and delivery service operated by A DIGITAL, obrt za usluge i izdavaštvo, vl. Anita Kaštelančić under the Becoming 366 brand.
Business address:
Sv. Martina 105
Podstrana – Sveti Martin
Croatia
Contact: hello@becoming366.com
These Terms apply specifically to The Letter Vault.
2. The service
The Letter Vault allows an eligible purchaser to write a private letter, choose permitted delivery details, seal the letter and arrange future digital delivery.
The Letter Vault is a digital service. No physical letter or physical delivery is provided unless a specific product expressly says otherwise.
Product-specific limits, including the number of letters, recipients and available scheduling options, are described at purchase.
3. Purchaser age
You must be at least 18 years old to purchase or use The Letter Vault as a purchaser.
4. Personal use
The Letter Vault is intended for private personal correspondence.
You may only use Surprise delivery for a natural person you personally know.
You must not use The Letter Vault for marketing, advertising, bulk messaging, lead generation, political outreach, recruitment outreach, debt collection, unsolicited commercial communication, harassment, stalking, threats, fraud or unlawful activity.
5. Your responsibility for information you provide
You are responsible for ensuring that information you provide is accurate and that your use of it is lawful.
Providing another person’s information does not give you unlimited authority over that person’s privacy rights.
Recipients may exercise their own rights under applicable law.
6. Minor recipients
A purchaser must be 18 or older.
Where the intended recipient is a minor, a Surprise letter may only be created by that child’s parent or legal guardian under the current Letter Vault service.
You may be required to confirm that relationship before proceeding.
That declaration does not remove the child’s independent privacy rights.
7. Letter content
You are responsible for the content you choose to write.
You must not use The Letter Vault for unlawful, threatening, harassing, fraudulent or deliberately harmful content.
You should not provide sensitive personal information about another person unless you have a lawful reason to do so.
Accepting these Terms does not create a legal basis for processing another person’s sensitive personal information where applicable law requires a separate legal basis.
Avoid unnecessary personal information about third parties.
8. Drafts
Before sealing, a draft may be stored locally in your browser on the device you are using.
Local draft storage is provided for convenience and is not a guaranteed backup service.
You are responsible for keeping your own copy of an unfinished letter where loss would be significant to you.
9. Sealing a letter
Once a letter is sealed, the words inside it cannot be edited through the ordinary Letter Vault customer flow.
This is an intentional part of the sealing experience.
Where supported, permitted delivery details may still be updated before delivery.
10. Cancellation, withdrawal and refunds
A pending letter may be cancelled through the available Letter Vault management controls.
Collections may also provide cancellation of individual pending letters or all remaining pending letters.
Cancellation does not recall a letter that has already been delivered.
Cancellation does not automatically create a replacement letter.
Cancelling a sealed or pending letter inside the Vault is not the same as withdrawing from the purchase contract, and it does not by itself create a financial refund.
To withdraw from the purchase, give notice using Withdraw from this contract. Submitting that form gives notice; it does not wait for our approval before the notice is treated as given.
If you give notice within 14 days of purchase, we refund 100% of the amount paid, with no deduction for partial use. The refund is processed manually through Stripe within the period required by applicable law. There is no automatic refund. After that 14-day period we do not offer voluntary refunds for a change of mind. Other statutory rights remain, including remedies for a defective or non-conforming service.
If the Letter Vault service is defective or does not conform to the contract, contact hello@becoming366.com. That path is separate from change-of-mind withdrawal and separate from cancelling a letter.
Letter Vault purchases on becoming366.com are not Etsy download purchases. After a valid withdrawal, we securely stop Vault access and future letter delivery and handle related personal data as described in this notice. The withdrawal form does not by itself wipe letter content or send cancelled letters.
Sending an access code, or your use of the Vault, does not by itself waive rights that cannot legally be waived.
11. Delivery
The Letter Vault is designed to attempt delivery on the selected future date according to the applicable product and scheduling rules.
We do not guarantee that an email can always be successfully delivered.
Delivery may be affected by circumstances outside our reasonable control, including:
- an invalid or outdated email address
- recipient mailbox settings
- spam or security filtering
- email-provider failure
- provider or network outages
- changes in technology
- legal restrictions
- circumstances that arise over very long scheduling periods
Where the service permits it, purchasers should keep future delivery information current.
The Letter Vault tracks relevant operational delivery states and is designed to identify delivery failures rather than silently treating every send attempt as successful.
12. Long-term service
Future delivery can involve long periods of time.
No online business can truthfully guarantee that every company, email provider, technology or email address will exist indefinitely.
A DIGITAL maintains operational, security, backup and recovery measures intended to support the service responsibly.
If The Letter Vault is ever permanently discontinued, A DIGITAL will take reasonable steps, where technically and legally possible, to protect affected users and provide appropriate information or options.
This clause is not a guarantee of perpetual operation.
13. Keep It a Surprise
If you select Keep It a Surprise, The Letter Vault will not normally contact the recipient before the selected delivery date because doing so would reveal the existence of the future communication.
This does not prevent The Letter Vault from acting where required by law, a valid privacy request, safety considerations or another overriding legal obligation.
A valid recipient objection may result in cancellation and deletion of a pending letter without revealing unnecessary details about the recipient’s request to the purchaser.
14. Privacy and security
Personal information is processed as described in the Letter Vault Privacy & Safety information.
Sealed letter content is encrypted while stored.
The Letter Vault is not a zero-knowledge or end-to-end encrypted service.
Our systems process the content where technically necessary to seal and deliver the letter, and the relevant email provider receives the content necessary for delivery.
We do not use private letter content for advertising, recipient marketing, behavioural profiling or AI training.
15. Retention and deletion
Pending letters are retained as necessary to provide the future-delivery service.
After successful delivery, cancellation or terminal failure, letter content and unnecessary recipient information are normally deleted within 30 days.
Privacy rights may require earlier deletion.
Certain minimal records may be retained where genuinely required for legal, accounting, security, suppression or dispute purposes.
16. Recipient rights
Recipients retain their applicable privacy rights even though they did not purchase the service.
A verified recipient may request access, correction, restriction, erasure or object to processing where applicable.
A valid pre-delivery objection may prevent future delivery.
17. Service availability
We aim to maintain a reliable service but cannot promise uninterrupted or error-free availability.
Maintenance, security incidents, provider outages, legal requirements and circumstances beyond our reasonable control may temporarily affect the service.
Nothing in these Terms excludes or limits rights that cannot lawfully be excluded under applicable consumer or data-protection law.
18. Changes to the service or terms
The Letter Vault may be updated over time for security, legal, operational or product reasons.
Where a material change affects existing future letters or customer rights, we will take reasonable steps to provide appropriate information.
Acceptance records may include a policy version and timestamp so we can identify which version applied when the service was used.
19. Contact
For Letter Vault support: hello@becoming366.com
For privacy requests: hello@becoming366.com
A DIGITAL, obrt za usluge i izdavaštvo, vl. Anita Kaštelančić
Operating The Letter Vault under the Becoming 366 brand
Sv. Martina 105
Podstrana – Sveti Martin
Croatia
Help / Privacy Requests
If you are a recipient and wish to exercise your privacy rights — including access, correction, deletion, restriction, or objection to future delivery — contact us at:
Please include enough information for us to identify the relevant delivery (for example, the email address that received the letter, approximate delivery date, and whether you wish to stop future delivery). We will verify your request before taking action.
Already delivered email cannot be recalled. Where appropriate, we can stop pending future delivery and apply minimal suppression to prevent the same address from being re-added for Surprise delivery.
If you are a purchaser using the Vault, you may also use the in-app contact form or email hello@becoming366.com.