What we do with your letter

• The letter you give us — a photo, PDF, or pasted text of the collection notice you upload, so we can read it.
• The facts you confirm or correct — details like the collector's name, the amount claimed, and your account number, either read from your letter or typed in by you.
• Your name and mailing address, if you provide them, so your response letter can be addressed correctly.
• Your email address, so we can send you a receipt and a copy of your finished letter.
• Payment details — handled entirely by Stripe, our payment processor. We never see or store your full card number.
• Your IP address, used only to apply a daily limit on how many letters can be submitted from one connection, so the service isn't abused.
• Basic usage events (for example, that a session reached the preview screen, or that a payment succeeded or failed). These aren't tied to your name or your letter's contents — we never send the contents of your letter, any extracted facts, or your name into analytics — but because they're linked to your session, they aren't fully anonymous either.

To read your letter and draft your response; to show you a preview before you pay; to generate and deliver your final document; to email you a copy and receipt once you've paid; to process your $29 payment; to apply the daily submission limit described above; and to understand, in aggregate, where people drop off, so we can improve the product.

• Anthropic (Claude) — reads your uploaded letter and the facts you confirm to extract information and draft your letter's wording. This is the only place your letter content is sent outside PUSHBACK's own systems. Anthropic keeps it on their systems for up to 30 days under their standard processing terms, then deletes it, and doesn't use it to train their models.
• Stripe — processes your payment. We never receive or store your card number.
• Resend — sends your receipt and download-link email.
• Supabase (Postgres) — hosts the database that stores your session while your order is fulfilled.
• Google Analytics and Microsoft Clarity — analytics tools that tell us which pages get used and where people drop off. They never see your letter, your extracted facts, or payment details — see Cookies & session data for what they collect and how to control them.

Each of these processes data only as needed to provide their part of the service, under their own privacy terms.

Not the collector. Not credit bureaus. Not data brokers or lead buyers, and not for anyone to sell you anything.

• The file or photo you upload is used only in memory to read your letter — we don't save the original image or PDF to disk or to a database. It's discarded automatically once your letter has been read.
• The facts extracted or confirmed from your letter, and the letter we generate for you, are used to show you your preview, complete your payment, and make your finished document available to download or re-download from your emailed link. We don't yet run automatic deletion of this data on a fixed schedule — it's kept until we build that, or until you ask us to remove it.
• If you'd like your session data deleted sooner, email us (see Contact below) and we'll remove it.

We use one small, functional cookie to identify your in-progress session — which letter and payment belong to you — so you don't need to create an account. That one always runs; it's required for the product to work.

We also use Google Analytics and Microsoft Clarity to understand which pages get used and where people drop off in the process. These see page views and general usage patterns — never your letter, the facts extracted from it, your payment details, or (thanks to explicit safeguards we've built in) the text you type into the upload or fact-confirmation screens.

If you're visiting from the EU, EEA, or UK, these analytics tools don't load at all until you explicitly accept them in the banner shown on your first visit — declining, or just not answering, means nothing loads. Elsewhere, they run by default, consistent with standard practice for this kind of first-visit usage analytics; you can ask us to exclude your sessions from analytics at any time by emailing us (see Contact below).

We don't sell your data to anyone, and we don't use it for ad targeting.

You can ask us what personal information we hold tied to your session, and ask us to delete it, by emailing us at hi@usepushback.com. We only send transactional email — your receipt and download link — so there's no marketing list to unsubscribe from.

PUSHBACK isn't directed at, or intended for use by, anyone under 18.

If we update this policy, we'll change the date at the top. Continuing to use PUSHBACK after a change means you accept the update.