LaterOn

LaterOn Privacy Policy

Last Updated: 2026-09-16

Welcome to LaterOn! This Privacy Policy explains how LaterOn ("we," "us," or "our") collects, uses, discloses, and protects information about you when you use our website at https://uselateron.com and all related services (collectively, the "Service"). By accessing or using the Service, you agree to this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

  • Account Information: When you create an account, we collect your name, email address, and encrypted password. If you sign in through a third-party provider (e.g., Google), we receive your name, email address, and profile picture from that provider.
  • Mailbox Content: We host a mailbox at an address we issue you (@uselateron.com). We store the messages sent to and from that mailbox, including their headers, bodies, attachments, and the contacts you correspond with.
  • Workflow Configuration: When you create a workflow, we store the trigger conditions, the instructions you write, the goal you set, and the limits you choose.
  • Agent Activity: For each workflow run we store the decisions taken, the reason recorded for each one, the messages sent or drafted, and facts the agent remembers about your work to write in your voice.
  • Payment Information: If you subscribe to a paid plan, payment is processed by our third-party payment processors (Polar, Gumroad, or Xendit). We do not store your full credit card number; we only receive a tokenized reference, billing details, and transaction history from them.
  • Communications: When you contact us for support or provide feedback, we collect the content of your messages and any attachments.

1.2 Information Collected Automatically

  • Device & Browser Information: We collect device type, operating system, browser type and version, screen resolution, and unique device identifiers.
  • Log Data: Our servers automatically record information including your IP address, access times, pages viewed, referring URL, and actions taken within the Service.
  • Usage Analytics: We use analytics services to understand how users interact with the Service, including feature usage patterns, session duration, and navigation paths.
  • Cookies & Similar Technologies: We use cookies, local storage, and similar technologies to maintain your session, remember preferences, and analyze usage. See Section 7 for details.

1.3 Information from Third Parties

  • OAuth Providers: If you authenticate via Google or other OAuth providers, we receive your basic profile information as authorized by you.
  • Correspondents: We receive and process any email sent to the LaterOn address we issue you, including mail you forward there from another provider. That means we also process the personal data of the people who write to you.

2. How We Use Your Information

We use the information we collect to:

  • Provide the Service: Deliver, maintain, and operate the core functionality: hosting your mailbox, summarizing and answering questions about your mail, and running the workflows you configure — which includes sending email from your LaterOn address on your behalf.
  • Personalize Your Experience: Tailor content, recommendations, and features based on your preferences and usage patterns.
  • Improve the Service: Analyze usage trends, diagnose technical issues, and develop new features.
  • Communicate with You: Send service-related notifications, security alerts, and (with your consent) promotional communications. You can opt out of promotional emails at any time.
  • Ensure Security: Detect, prevent, and address fraud, abuse, and security issues.
  • Comply with Legal Obligations: Fulfill our legal and regulatory requirements.

3. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party vendors who perform services on our behalf, including hosting (cloud infrastructure), payment processing (Polar, Gumroad, Xendit), email delivery, and analytics. These providers are contractually obligated to use your information only to provide services to us and to maintain its confidentiality.
  • AI Processing: Message content, your workflow instructions, and the agent's memory may be sent to Anthropic to produce summaries, answers, suggested replies, and the replies a workflow sends. We send only what a given request needs. Business plans can be deployed with zero data retention.
  • Legal Requirements: When required by law, regulation, legal process, or governmental request. We will notify you of such disclosures unless prohibited by law.
  • Protection of Rights: To enforce our terms, protect the safety of our users, or defend our legal rights.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
  • With Your Consent: When you explicitly authorize us to share your information.

4. Data Retention

  • Account Data: We retain your account information for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.
  • Mailbox and Workflow Content: Stored messages, workflow configuration, and agent run history are retained while your account is active and deleted upon account termination.
  • Log Data: Server logs and analytics data are retained for up to 12 months for security and service improvement purposes, then anonymized or deleted.
  • Backup Data: Encrypted backups may retain your data for up to 90 days after deletion from production systems.

5. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and at rest.
  • Secure password hashing using modern cryptographic algorithms.
  • Regular security assessments and monitoring.
  • Access controls limiting employee access to user data on a need-to-know basis.

No method of electronic storage or internet transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights & Choices

Depending on your location, you may have the following rights:

6.1 All Users

  • Access & Portability: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal data.
  • Deletion: Request deletion of your account and associated data by contacting us at [email protected] or through your account settings.
  • Opt-Out of Communications: Unsubscribe from promotional emails using the link in each email or through account settings.

6.2 European Economic Area (GDPR)

If you are in the EEA, you additionally have the right to:

  • Restrict Processing: Request that we limit how we use your data.
  • Object to Processing: Object to processing based on legitimate interests.
  • Data Portability: Receive your data in a structured, machine-readable format.
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent.
  • Lodge a Complaint: File a complaint with your local data protection authority.

Our legal bases for processing include: performance of our contract with you, your consent, our legitimate interests (service improvement, security), and compliance with legal obligations.

6.3 California Residents (CCPA/CPRA)

California residents have the right to:

  • Know what personal information we collect, use, and disclose.
  • Delete personal information we hold about you.
  • Opt-Out of Sale: We do not sell personal information.
  • Non-Discrimination: We will not discriminate against you for exercising your rights.

To exercise any of these rights, contact us at [email protected].

7. Cookies & Tracking Technologies

We use the following types of cookies:

  • Essential Cookies: Required for authentication, security, and core functionality. Cannot be disabled.
  • Analytics Cookies: Help us understand usage patterns and improve the Service. You can opt out through your browser settings.
  • Preference Cookies: Remember your settings and preferences for a better experience.

We do not use advertising or tracking cookies.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Service functionality.

8. Mobile Application

When you use the LaterOn mobile app, we may additionally collect:

  • Device Identifiers: A unique identifier for your device to provide the Service and for analytics.
  • App Usage Data: Interaction data within the app, including screens visited, features used, and session information.

The mobile app uses a WebView to display the LaterOn web dashboard. The same data practices described in this policy apply within the mobile app. External links opened within the app use an in-app browser (Safari View Controller), which has its own session separate from the main app.

We do not collect or access:

  • Your device contacts or address book.
  • Your photos, camera, or microphone.
  • Your precise or coarse location data.
  • Health, fitness, or financial data from your device.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your own. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy, including the use of Standard Contractual Clauses where applicable.

10. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to promptly delete such information. If you believe a child under 16 has provided us with personal information, please contact us at [email protected].

11. Third-Party Links & Services

The Service may contain links to third-party websites and services not operated by us. We are not responsible for the privacy practices of these third-party services. We encourage you to review the privacy policies of any third-party services you access through our Service.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated Privacy Policy on this page with a revised "Last Updated" date.
  • Sending you an email notification for significant changes.

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, you may also contact your local data protection authority.