Privacy

Last updated: October 28, 2026.

The short version

• We don't use accounts, cookies, trackers or third-party scripts.
• We don't save the text of your letters.
• To keep the free beta fair, we keep a few counters tied to a scrambled, one-way version of your IP address (a salted hash), and we delete them daily or sooner.
• Text you type into the description boxes and name fields of dispute and scope-of-work letters is sent to OpenAI; names you enter in the name fields are sent only for the check.
• Payment reminders are never sent to OpenAI.

What we keep, send or log, and for how long

• Daily usage count
  A one-way salted hash of your IP address and a count of how many letters you've made today (up to 3, any type). The salt changes every day, so the hashes can't be linked across days. It's deleted after the UTC day ends.
• Short burst counter
  The same kind of hash, with a start time and a count, used to slow down rapid repeat requests. It lasts about 60 seconds and is then deleted.
• Failed-draft refund count
  When a draft fails on our end, we record it against the same hash. If a draft fails, it usually won't count against your daily limit (up to 3 failed drafts a day are given back). It's deleted after the UTC day ends.
• Monthly AI spend total
  One running total of what the whole service spent on AI this month. It holds no personal data, and we keep it indefinitely.
• Pending request IDs
  A random ID (not based on your IP or your text) held while an AI request is in progress. It's removed when the request finishes, and in any case after the UTC day ends.
• Service-wide usage counters
  Totals of named events across the whole service, such as how often a draft failed or a sentence was removed. They hold no personal data, and we keep them indefinitely.
• Error log line
  If our cost tracking fails twice for one request, we write one log line with a random request ID, a cost figure, a retry count and an error type. It contains no letter text and no IP address. Our host, Cloudflare, keeps it for 3 to 7 days depending on our plan. Normal request logging is turned off.
• Text sent to OpenAI
  Text you type into the description boxes and name fields of dispute and scope-of-work letters is sent to OpenAI; names you enter in the name fields are sent only for the check.
  • For the draft: the letter type, tone, what happened, the agreed scope (scope-of-work letters) and what you're asking for.
  • For the check: the same, plus the recipient's and sender's names and the drafted sentences.
  • The amount, date and reference-number fields are filled into your letter by FilePlainly's own code and are never sent to OpenAI. Anything you type into the description boxes, including any numbers or names, is sent to OpenAI to write and check the explanation. Payment reminders aren't sent at all.
  • FilePlainly doesn't store this text. We ask OpenAI not to store it either, but OpenAI's own policy still applies, including keeping abuse-monitoring logs for up to 30 days. See OpenAI's API data controls. We can't promise what OpenAI deletes.
• Leftovers from deleted records
  When we delete the records above, copies may stay in our host's storage files for a short time until Cloudflare clears them.

Also worth knowing

• Your IP address passes through Cloudflare, our host, on every request. FilePlainly doesn't store it. It's turned into the daily-salted hash before anything is saved.
• We don't use databases or browser storage for your content: no cookies, no local storage, nothing kept in your browser.
• FilePlainly is meant for adults handling business matters. It isn't directed to children under 13, and we don't knowingly collect their information.
• We don't track you across sites, so we treat every visitor the same way whether or not their browser sends a Do Not Track signal. If we change this page, we'll post the new version here and update the date at the top.
• Errors we don't anticipate may also appear in Cloudflare's logs for the same 3–7 days. We've built the service so letter text isn't written to logs.

Questions: steve@autrycapitalgroup.com