Get started
Your privacy

Privacy Policy

Last updated July 21, 2026

Phoebe Nova Labs LLC (“Jolly Santa Letters,” “we,” “us,” or “our”) respects your privacy and the privacy of your family. This policy explains what we collect when you use Jolly Santa Letters at jollysantaletters.com, how we use and share it, how long we keep it, and the choices and rights you have.

1. Who this policy covers

This policy applies to jollysantaletters.com and the products and services we offer through it (the “Service”). The Service is intended for and directed to adults (parents, guardians, and other gift-givers). It is not directed to children, and we ask that children not use it or provide information to us directly. Please read this policy together with our Terms & Conditions.

2. A note for parents: children’s privacy and COPPA

Our products are designed to be purchased and set up by adults. We do not knowingly collect personal information directly from children under 13.

When you personalize a letter, certificate, or call, you (the adult) provide the child’s details to us on the child’s behalf. By doing so, you confirm that you are the child’s parent or legal guardian, or that you have their permission, and that you consent to our use of that information to provide the Service. Completing an adult purchase serves as our parent gate and as verifiable parental consent under the Children’s Online Privacy Protection Act (COPPA).

We ask only for the information needed to create the keepsake. As a parent or guardian, you may review the child’s information we hold, ask us to correct or delete it, or refuse further use, at any time, from your account or by emailing support@jollysantaletters.com. For AI-assisted letters or calls that process a child’s details, your order is your consent to that processing.

If you believe a child has provided us personal information directly without your consent, contact us and we will promptly delete it.

3. Information we collect

Information you provide about yourself (the buyer)

  • account details: your name, email address, and password;
  • order and billing details: billing name, and payment information processed by our payment provider (we do not store full card numbers);
  • messages you send us, such as support requests.

Information you provide about a recipient (the child or other person)

  • the recipient’s first name, and details you choose to add such as age, interests, gift wishes, and accomplishments;
  • any photo you choose to upload;
  • for Santa phone calls, the recipient’s telephone number and time zone;
  • the letter, certificate, or call content you create.

Information we generate or collect automatically

  • keepsakes we produce for you, including the recording of any Santa phone call;
  • technical and usage data such as IP address, device and browser type, and how you use the Service, collected through cookies and similar technologies (see “Cookies and tracking”).

4. How we use your information

We use personal information to:

  • create, deliver, and email your letters, certificates, stationery, and Santa calls;
  • process payments and prevent fraud;
  • operate, maintain, secure, and improve the Service;
  • provide customer support and respond to your requests;
  • send you service messages and, where permitted, marketing you can opt out of; and
  • comply with our legal obligations and enforce our Terms & Conditions.

6. How we share information, and our service providers

We do not sell or rent your personal information, and we do not sell or share the personal information of children.

We share information only with service providers who process it on our behalf to provide the Service, under contracts that require them to protect it and use it only for that purpose. Our key providers are:

  • Stripe: payment processing.
  • Microsoft Azure: cloud hosting and storage (our infrastructure runs on Microsoft Azure, primarily in the United States).
  • Azure Communication Services: sending your keepsake and notification emails.
  • Anthropic, via Microsoft’s AI platform (“Foundry”): generating AI-assisted letters and Santa-call scripts.
  • OpenAI: generating AI-designed stationery and certificate artwork.
  • Replicate: enhancing the resolution of generated artwork for print.
  • ElevenLabs: synthesizing the Santa, elf, and Mrs. Claus voices for phone calls.
  • Twilio: placing the Santa phone calls.
  • Google Analytics: aggregated usage measurement (page views and feature usage) so we can understand and improve how the Service is used.

We may also disclose information when required by law or to respond to lawful requests; to protect the rights, safety, or property of Jolly Santa Letters, our users, or the public; and in connection with a merger, acquisition, financing, or sale of assets (in which case we will require the recipient to honor this policy).

7. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, keep the Service secure, and understand how it is used so we can improve it. You can control cookies through your browser settings; some features may not work without them. Because there is no common industry standard for honoring browser “Do Not Track” signals, we do not currently respond to them.

8. Marketing choices

We will only send you marketing email where permitted. You can opt out at any time using the unsubscribe link in our emails or by contacting support@jollysantaletters.com. For any text messages, reply STOP to opt out. We will still send you essential service messages about your account and orders.

9. How long we keep information

We keep personal information only as long as needed for the purposes described in this policy, then delete or anonymize it. In general:

  • account and order records are kept while your account is active and for a reasonable period afterward to meet legal, tax, and accounting obligations;
  • saved keepsakes and the details used to create them are kept until you delete the keepsake or your account;
  • Santa phone-call recordings are kept so you can access your keepsake and are deleted when you delete the keepsake or your account, and in any case within a reasonable retention window;
  • when you delete your account, we remove your personal information and associated keepsake recordings, except for limited records we must retain by law.

10. How we protect information

We use reasonable technical and organizational measures to protect personal information, including encryption in transit (TLS) and limiting access to those who need it. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.

11. Your privacy rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You can manage your profile, your keepsakes, and delete your account directly from your account settings, or contact us at support@jollysantaletters.com to exercise any right. We will not discriminate against you for exercising your rights.

12. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to request access to and deletion of your personal information; to correct inaccurate personal information; and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under California law, and we do not knowingly sell or share the personal information of consumers under 16.

The categories of personal information we collect are described in “Information we collect”; we collect them for the purposes in “How we use your information” and disclose them to the service providers in “How we share information”. To make a request, email support@jollysantaletters.com. We will verify your request and may ask for information to confirm your identity; you may use an authorized agent.

13. EEA and UK privacy rights (GDPR)

If you are in the EEA or the UK, you have the rights described in “Your privacy rights” under the GDPR and UK GDPR, exercised on the legal bases in “Legal bases for processing.” You also have the right to lodge a complaint with your local data-protection supervisory authority. To exercise your rights or ask a question, contact support@jollysantaletters.com.

14. International data transfers

We are based in the United States, and we and our service providers process and store information in the United States and in other countries. These countries may have data-protection laws that differ from those where you live. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers of personal information.

16. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice (for example by email or a notice on the Site). Your continued use of the Service after the changes take effect means you accept the updated policy.

17. Contact us

If you have questions about this policy or how we handle your information, or to exercise a privacy right, contact the data controller:

Phoebe Nova Labs LLC (“Jolly Santa Letters”)
[Add your registered business mailing address], Georgia, United States
Email: support@jollysantaletters.com

Questions? Email support@jollysantaletters.com.Read our Terms & Conditions →