Privacy Policy

CeaseAndDesist.pro ("we," "us," "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. IMPORTANT: CeaseAndDesist.pro is a document template generator, not a law firm. We do not provide legal advice or legal representation. Use of this platform does not create an attorney-client relationship. By creating an account or using our platform, you agree to the practices described in this Privacy Policy.

We collect the following types of information: Account Information • Your name and email address when you create an account • Your hashed (encrypted) password — we never store passwords in plain text Payment Information • We process payments through Stripe, a secure third-party payment processor • We store only your payment status, plan type, and Stripe session IDs — never your full card number or banking details Letter Content • The information you provide through our AI wizard to generate your letter (names, addresses, descriptions of your situation) • The full text of generated letters, saved to your account for future access • Letter category (copyright, trademark, defamation, etc.) • Timestamps of letter creation Usage Data • IP address (for security and fraud prevention) • Browser type and version • Device information • Pages visited and features used • Time and date of access • Session duration

We use your information only to: • Provide, maintain, and improve the CeaseAndDesist.pro platform • Generate and store your cease and desist letters • Process payments and manage your subscription • Respond to support requests • Send essential account-related emails (receipts, security alerts, password resets) • Monitor for fraudulent or abusive activity • Analyze usage patterns to improve user experience We do NOT: • Use your information for advertising • Sell or rent your data to third parties • Share your letter content with third parties (except as required by law) • Use tracking pixels or advertising trackers

Your data is stored in a secure PostgreSQL database hosted on Neon (neon.tech), a SOC 2 compliant cloud database provider. All data is encrypted at rest and in transit using industry-standard TLS/SSL encryption. Passwords are hashed using Argon2, a best-in-class cryptographic hashing algorithm. We never store your password in a recoverable format. While we take reasonable precautions to protect your data, no method of electronic transmission or storage is 100% secure. We encourage you to use a strong, unique password for your account.

We use the following trusted third-party services to operate our platform: • Stripe (stripe.com) — Payment processing. Stripe's privacy policy governs any data you share directly with Stripe during checkout. • OpenAI (openai.com) — AI text generation for the letter wizard. Information you provide during the conversation may be processed by OpenAI's API in accordance with their privacy policy. • Neon (neon.tech) — Secure cloud database hosting. • Vercel / AWS — Application hosting and content delivery. We do not use Facebook Pixel, Google Ads tracking, or any third-party advertising trackers.

The information you share with Alex (our AI guide) is used solely to generate your letter. It is stored in your account so you can access, edit, and re-download your letters at any time. We strongly recommend using only the minimum information necessary to build your letter. You do not need to include Social Security numbers, financial account details, or other highly sensitive information in a cease and desist letter. Your letters are private and accessible only to you (and admin staff for support purposes only when you submit a support ticket).

We retain your account and letter data for as long as your account is active. If you wish to have your account and all associated data deleted: 1. Contact us through the support ticket system in your dashboard, or 2. Email support@ceaseanddesist.pro We will process deletion requests within 30 days. Payment transaction records may be retained for 7 years for tax and legal compliance purposes. Stripe may retain payment records independently in accordance with their own retention policies and applicable law.

Depending on your jurisdiction (e.g., GDPR for EU users, CCPA for California residents), you may have the right to: • Access the personal data we hold about you • Request correction of inaccurate data • Request deletion of your account and associated data ("right to be forgotten") • Request a copy of your data in a machine-readable format (data portability) • Withdraw consent to processing (where applicable) • Object to processing for specific purposes • Lodge a complaint with a supervisory authority To exercise any of these rights, contact us via the support ticket system in your account dashboard or email support@ceaseanddesist.pro.

CeaseAndDesist.pro is intended for users who are 18 years of age or older. We do not knowingly collect information from children under 18. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

Our services are hosted in the United States. If you access our platform from outside the U.S., your information may be transferred to, stored, and processed in the United States, which may have different data protection laws than your country. By using our platform, you consent to this transfer.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by: • Email to your registered email address, and/or • A prominent notice in your dashboard Continued use of the platform after changes constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests regarding your privacy or this policy: Email: support@ceaseanddesist.pro Support Tickets: Available in your account dashboard after signing in We will respond to privacy requests within 30 days.