Privacy Policy

Version 2026-07-13 · Last updated: 2026-07-13

1. Controller

The controller of personal data is IamLadi s.r.o., with its registered seat at č.p. 332, 739 45 Fryčovice, Czech Company ID (IČO): 09877169, VAT ID (DIČ): CZ09877169, registered in the Commercial Register kept by the Regional Court in Ostrava, Section C, Insert 84636 (the "Operator" or "Controller"). Contact: ladi@amentistudio.com.

The Operator has not appointed a Data Protection Officer (DPO) — given the scope and nature of the processing, this is not required.

2. What Data We Process

Customer data – email address, Google account identifier (login), API key hash.
Order data – the recipient's address and, optionally, the sender's name and address, the Letter's content as a PDF, price, the selected Service, tracking number.
Payment data – payments are handled by Stripe; the Operator never sees card numbers.
Technical data – IP-based rate limiting; analytics data only after Cookie Consent is granted.

Recipient data — and data of any other person mentioned in the Letter's content — is supplied by the customer. The Operator processes it solely to print and deliver the Letter. Given the disproportionate effort individually informing every recipient would require, and because the Letter itself discloses the sender, Article 14(5) GDPR applies.

3. Purposes and Legal Bases

Purpose	Legal Basis	Retention
Printing and delivery of the Letter	Art. 6(1)(b) GDPR (contract performance)	Letter content is deleted 60 days after Handover
Accounting and tax records	Art. 6(1)(c) GDPR (legal obligation)	for the statutory retention period
Service security and claims	Art. 6(1)(f) GDPR (legitimate interest)	order metadata for the claims limitation period
Analytics	Art. 6(1)(a) GDPR (consent)	for as long as consent stands (12 months)

4. Retention and Deletion

The Letter's content (letter_json, including addresses) is automatically deleted 60 days after Handover.

Order metadata (order ID, tracking number, timestamps, price, page count) is retained for as long as needed to handle claims and to meet statutory record-keeping obligations.

Account data is retained for the lifetime of the customer's account.

After the Letter's content is purged, any Carrier claims rely on order metadata and the Carrier's own records.

5. Recipients and Processors

Česká pošta, s.p. – addresses and Letter content, for delivery.
Stripe – payment processing.
Metronome – billing and credit ledger, email.
Google – login; analytics data only after consent.
Cloudflare – hosting and data storage.

Some of these processors are based in the US; transfers of personal data to the US rely on the EU–US Data Privacy Framework and/or standard contractual clauses.

6. Cookies

Cookie	Purpose	Type	Duration
astro-session	login session	strictly necessary	session
pb_lang	language preference	necessary/preference	12 months
pb_consent	stores your cookie choice	strictly necessary	12 months (6 months if refused)
_ga, _ga_*	Google Analytics statistics	analytics — only with consent	up to 24 months

Analytics cookies fire only after you grant consent. You can withdraw consent at any time via "Cookie settings" in the footer — withdrawal is as easy as granting.

7. Your Rights

right of access to your personal data
right to rectification
right to erasure
right to restriction of processing
right to data portability
right to object
right to withdraw consent at any time
right to lodge a complaint with the Office for Personal Data Protection

You can exercise your rights by contacting ladi@amentistudio.com.

8. No Automated Decision-Making

The Operator does not carry out any automated decision-making or profiling, within the meaning of GDPR, that produces legal effects or similarly significantly affects the customer.

9. Changes

The Operator may amend this Privacy Policy to a reasonable extent; the current version is always available on this page.

This Privacy Policy is issued as version 2026-07-13, effective from 2026-07-13.