Privacy and your drafts.

DishLetter helps independent restaurants create, edit and export email drafts. It does not send email, collect customer lists, create user accounts or take payments. The studio identifies template examples and AI-assisted drafts separately.

Drafts and optional browser storage

The open form and draft are held in the page. “Save on this device” writes one copy of the current form and draft to this browser’s local storage. “Restore saved” reopens that copy; “Clear saved” removes it. Clearing browser data, changing devices or using a private browser session may remove access. Closing or refreshing the page discards unsaved changes.

AI requests

Creating an AI draft sends the offer context, campaign type and tone through our server to KIE.ai and its selected model provider. Restaurant-name, conditions, date, call-to-action and contact fields are inserted separately by our server rather than included as separate fields in that model prompt. Information typed into the offer itself is part of the offer context, so do not include customer lists or sensitive personal information there. Loading and editing a fictional template example does not make a paid AI request.

Third-party providers process requests under their own policies. KIE.ai’s published service guide lists a two-month retention period for text and metadata logs. That is the provider’s published policy, not a promise that DishLetter can immediately delete provider or upstream copies.

Verification and usage limits

The hosted studio uses Cloudflare Turnstile to check generation requests. Cloudflare processes browser and network signals; our server sends the single-use token to Cloudflare for validation. Campaign details are not included in the verification request. Upstash Redis stores a daily salted network identifier, request identifiers, attempt counts and fixed trial dates to enforce usage limits. It does not store restaurant offers, email drafts, contact details or raw IP addresses in that quota ledger. Service logs may include numeric usage and error information; credentials are not included in the public configuration endpoint.

Optional analytics

Google Analytics loads only after you choose “Allow analytics”. It measures page visits, draft generation, copying and downloads. We do not send form values, restaurant names, offers, contact details or email text as analytics events. Page URLs have query strings and fragments removed; referrers are reduced to their origin. Advertising storage and personalization remain disabled. Google processes usage, browser, device and network information when analytics is enabled. You can change your choice using “Analytics settings” in the footer. Declining analytics does not affect the drafting tools.

Hosting

Vercel hosts this website and processes network requests, including IP addresses and technical request information, to deliver pages and run the generation endpoints. Hosting and diagnostic logs are handled under Vercel’s policies.

Other network requests

The interface may request Google Fonts; system-font fallbacks are available. The generated email layout does not load third-party images. Restaurant links and other contact details in the draft are supplied by you. Check their destinations before using them.

Before sending an exported email

Review every price, date, condition and link. Fictional examples use example.com and must be replaced. Formatted copying transfers a visible HTML layout and a plain-text alternative to the clipboard; subject lines are copied separately. Your email editor may change the styling. HTML import and final rendering depend on the sending platform, plan and email client, so test the result in your own workflow. Add your actual postal address and a working unsubscribe option in your sending platform before sending.

Availability and limits

AI generation is subject to verification, usage limits and service availability. If generation fails or the allowance is exhausted, the studio reports the problem and preserves your current draft. Saved browser drafts are not synchronized across devices.