Privacy
What we collect, and what we do with it.
Short version: your email address so you can sign in, your letters so we can deliver them, and your recipients' addresses so they arrive. We do not sell any of it, and we do not advertise.
Last updated 10 August 2026. MyWishLetter is operated by AiAstra Innovations Private Limited.
What we collect
Your email address
It is how you sign in, and how we tell you about deliveries. We have no other identifier for you.
Kept: Until you delete your account.
Your letters and their titles
They are the product. We store them so we can deliver them on the date you chose.
Kept: Until you delete them, or delete your account.
Your recipients' names and email addresses
So we can deliver the letter you addressed to them.
Kept: Until you remove the recipient or delete the letter.
Delivery records
So you can see that a letter was queued, sent, opened or failed, and so a failure can be retried instead of vanishing.
Kept: Two years after the delivery, then removed.
Payment records
Order identifiers and amounts, so we can prove what you paid for and honour it. We never receive your card number.
Kept: Eight years, because tax law requires it.
Basic technical logs
Request paths, timestamps and error traces, so we can keep the service up and investigate faults.
Kept: Thirty days.
What we never do
- We do not sell, rent or share your personal data with anyone for their own purposes.
- We do not send your letter content to analytics, advertising or any third-party tool. Nothing you write is used to train a model.
- We do not read your letters. Support staff can see that a letter exists and whether delivery succeeded, not what it says.
- We do not use tracking cookies. The only cookie we set is the one that keeps you signed in.
- We do not charge you to delete your data, and we do not make you contact support to do it.
Who else processes your data
We keep this list short deliberately — every name here is another company that can technically touch your data.
Amazon Web Services (Mumbai region, ap-south-1)
Hosting, database and email delivery. Your letters are stored here, in India.
Razorpay
Payment processing. They receive your payment details directly; we receive only the result.
Your rights
- Ask for a copy of everything we hold about you.
- Correct anything that is wrong.
- Delete any letter, or your whole account, at any time and without giving a reason.
- Withdraw consent to marketing email without losing access to the product.
- Complain to a data protection authority if we get this wrong.
To exercise any of these, email support@mywishletter.com. We will respond within thirty days, and usually much sooner.
A word about letters delivered after death
If you schedule a letter to be released under a condition — such as confirmation by your trust circle — that release is a delivery of a message and nothing more. It grants no legal authority, and it is not a will. Your trust circle can confirm a condition; they cannot read your letters, and they cannot change who receives them.
Changes to this policy
If we change anything that materially affects you, we will email you before it takes effect rather than quietly editing this page. The date at the top always reflects the last revision.
For how the data is protected, see security.