Privacy Policy

Last updated: March 29, 2026

1. Who We Are

BreakSilence ("we," "us," or "our") operates the website breaksilence.io and provides a consumer complaint drafting and dispatch service. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. Information We Collect

We collect the following information when you use our service: Information you provide directly: • Complaint text: the description of your incident and the business involved. • Email address: optionally provided to receive tracking updates or for account access. • Name and mailing address: optionally provided when ordering a physical (USPS) letter. • Payment information: processed entirely by Stripe — we never see or store your card details. Information collected automatically: • IP address: collected at submission time for abuse prevention and rate limiting. • Browser and device type: collected via standard web server logs. • Usage data: pages visited and interactions, used to improve the product.

3. How We Use Your Information

We use your information to: • Generate and dispatch complaint correspondence on your behalf. • Provide you with a tracking link and case status updates. • Verify your identity when you log in using our OTP (one-time passcode) system. • Prevent abuse, spam, and fraudulent submissions. • Comply with legal obligations. Disclosure to Target Entities: The core function of BreakSilence is to deliver your grievance to the business or entity you identify. By using our Email Dispatch or Physical Letter services, you expressly direct and authorize us to transmit your complaint text — and your name and email address, if provided — to the target entity. If you wish to remain anonymous, do not provide your name or email address when submitting your complaint; your case will be dispatched without identifying information. We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Third-Party Services

We use the following trusted third-party services to operate BreakSilence: • Supabase — Database and authentication. Your complaint data and email address are stored in a Supabase-hosted PostgreSQL database. • Anthropic (Claude AI) — AI model used to draft complaint letters. Complaint text is sent to Anthropic's API. Please review Anthropic's privacy policy at anthropic.com/privacy. • SendGrid (Twilio) — Used to deliver complaint emails to recipients on your behalf. • Stripe — Secure payment processing. Stripe may collect payment and identity data per their own privacy policy at stripe.com/privacy. • Lob — Used to print and mail physical letters via USPS. Mailing address data is shared with Lob solely for delivery purposes. Each of these providers is contractually bound to handle your data securely and only for the purposes described above.

5. Data Retention

We retain complaint records (including the original text, generated letter, and delivery status) for up to 2 years to allow you to retrieve your tracking history. Email addresses are retained as long as your account is active. You may request deletion of your data at any time by emailing support@breaksilence.io.

6. Cookies & Local Storage

BreakSilence uses browser localStorage (not traditional cookies) to store: • Your active case reference links, so you can return to them without re-entering a URL. • Your login session after OTP verification. We do not use third-party tracking cookies or advertising pixels.

7. Anonymous Submissions

If you choose not to provide an email address, your complaint is submitted anonymously. We still collect your IP address for abuse prevention. No account is created, and your case can only be accessed via the unique tracking link provided at the time of submission.

8. Your Rights

Depending on your jurisdiction, you may have the right to: • Access the personal data we hold about you. • Request correction of inaccurate data. • Request deletion of your data. • Object to or restrict certain types of processing. To exercise any of these rights, contact us at support@breaksilence.io. We will respond within 30 days.

9. U.S. State Privacy Rights

Depending on your state of residence — including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), and others — you may have specific rights regarding your personal data. We comply with these standards nationally by ensuring: • We do not "sell" or "share" your personal information for cross-context behavioral advertising. • We only disclose information to our service providers (listed in Section 4) to perform the exact services you requested, or to the target entities you expressly direct us to contact (as described in Section 3). To exercise your data access, correction, deletion, or opt-out rights, contact us at support@breaksilence.io. We will respond within the timeframe required by your applicable state law and will not discriminate against you for exercising these rights.

10. Children's Privacy

BreakSilence is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has submitted information through our platform, please contact us immediately.

11. Security

We use industry-standard measures to protect your data, including TLS encryption in transit and access controls on our database. However, no system is completely secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top of this page will always reflect the current version.

13. Contact

For privacy-related questions or data requests, contact us at: support@breaksilence.io