ailetterbox is a letterbox. Humans paste an AI output; agents call our MCP endpoint. Either way we package the brief, route it to a human expert, and delete the private content once the verdict has been delivered. The expert’s reply flows directly — email inbox to email inbox, or MCP callback to the calling agent — we never store the reply. We collect the minimum metadata needed to run the routing service and to write hash-only records to the Letterboxledger (a send-timestamp for every Agent MCP send and, when the matched expert chooses to seal, a verdict-timestamp). We never sell your data.
Who we are
ailetterbox is a service operated by WeLINKanything Ltd, a company registered in England & Wales (the “Data Controller”). References to “we”, “us” and “our” mean WeLINKanything Ltd.
What we collect from seekers (humans and agents)
Your brief content: the AI output you paste (human) or transmit via MCP (agent), and any additional context. Held on our servers only long enough to package the brief and route it to the matched expert. Deleted as soon as delivery is confirmed (up to 48 hours if delivery must be retried).
Your email address (humans) or agent identity + accountability chain (agents): used to route the reply and to record the declared seeker type on the Letterboxledger (human, AI-human, or AI-autonomous) if a seal is requested.
Filter selections: category, star floor, max fee — used by Expert Match to route to a qualifying expert.
Payment metadata: transaction identifiers required to collect the monthly expert subscription via Stripe. No fee flows through ailetterbox for brief sends or expert replies. We do not store card numbers.
What we do NOT collect
Expert replies / opinions: we never see or store them. Because we set your email as the Reply-To, the expert’s reply flows expert-inbox → your-inbox, bypassing our servers.
Your brief content after delivery: we delete it as soon as the expert’s email is confirmed delivered.
Anything about the substance of your matter beyond the brief metadata (category, jurisdiction, timestamp).
What we collect from experts
Profile information: name, firm, headline, skills, location, service areas, jurisdiction — provided by you at sign-up or imported from LinkedIn with your consent.
Contact details: email address so briefs and platform notifications reach you. Publicly displayed contact information on your profile enables off-platform engagement with seekers.
Subscription (Stripe): a monthly card payment for subscription access. We never store card PANs; Stripe holds them. We store only the payment result and Stripe customer identifier.
Knowledge Base entries: your reasoning captured from replies you sign, held in your private Knowledge Base to feed your Expert AI drafting layer. Not shared with other users.
Response records: your reply with four fields (sense-check, comments, estimate, paid review) and reasoning, delivered to the seeker.
What we collect and publish to the Letterboxledger
We publish two kinds of hash-anchored record to a public blockchain: (a) a send-timestamp for every brief sent through the platform — whether from the human paste-box or an agent MCP call — and (b) a reply-timestamp when the matched expert chooses to seal their reply. Send-records contain: declared seeker type, category, and timestamp. Reply-records contain: expert identity + star level, and timestamp. No private content is ever published to the ledger. Once written, records are immutable and cannot be edited or removed.
How long we keep it
Brief content (AI output): deleted immediately once delivery to the expert is confirmed. Held up to 48 hours only if delivery must be retried.
Brief metadata (sender identity, expert id, timestamp, category, delivery status): retained for 24 months for our own records and any support disputes.
Expert replies / opinions: not held on our servers for humans (email flows direct) or in-Agent-flow beyond delivery to the calling agent. Copies retained by the expert in their own Knowledge Base remain the expert’s responsibility.
Expert profile data: kept while the expert has an active account, then deleted within 90 days of account closure. Publicly sealed replies on the Letterboxledger are permanent by design and are not removed on account closure.
Who we share with
The specific expert you (the seeker) select to receive your brief. No other expert sees it.
Our sub-processors: Supabase (database), Netlify (hosting), Cloudflare (edge/DNS), Resend (transactional email), Anthropic (routing brain — no personal identifiers passed).
We do not sell your data. We do not use it for advertising.
AI Chats (how your brief reaches the expert)
When a seeker sends a brief via an AI chat (Claude, ChatGPT, or any MCP-aware tool), the AI chat is a formatting layer only. We receive the packaged brief exactly as if it had been submitted on ailetterbox.com. We do not share your identity or brief content with the AI chat provider; the AI chat provider is not a sub-processor.
The expert’s Agentic Address (@username) and their MCP endpoint URL (mcp.ailetterbox.com/username) are public identifiers. We do not share the expert’s email address or any other contact information with AI chat providers.
AI-Agents waiting list
If an expert joins the AI-Agents waiting list (via Settings → Reachability → AI-Agents), we store only the expert’s user id and the time they joined. We send one email when AI-Agents becomes available for their profession. The waiting list is deleted when AI-Agents goes live or when the expert deletes their account, whichever is sooner.
PIN
If an expert sets a 6-digit PIN, we store it as a one-way salted hash. We do not log successful PIN matches with personal identifiers; we do rate-limit failed PIN attempts to prevent brute force. Experts may regenerate their PIN at any time; the prior PIN is immediately invalidated.
Data export and deletion
You can export all your ailetterbox data at any time from Settings → Account → Export all data (and your Expert AI library separately from Settings → Expert AI). Exports are generated as one-time, signed download URLs valid for ten minutes, rate-limited to one download per hour, and logged for audit. We do not retain copies of the export file after the URL expires.
You can permanently delete your account from Settings → Account → Delete account. Deletion is confirmed by typing “DELETE”. On confirmation, all account data (profile, brief metadata, Expert AI library, PIN hash, waiting list entry, settings) is deleted within 30 days. Public ledger anchor transaction hashes are permanent by their nature; they contain no personal data (see Data security).
Your rights (GDPR)
You have the right to access, correct, port, or delete the personal data we hold about you, and to lodge a complaint with the UK Information Commissioner’s Office. Written requests should be sent to the postal address below.
Contact (data controller)
WeLINKanything Ltd
21 Church Road
Poole
Dorset BH14 8UF
United Kingdom