LaterOn

LaterOn Privacy Policy

Last Updated: 2026-09-30

Welcome to LaterOn! This Privacy Policy explains how LaterOn ("we," "us," or "our") collects, uses, discloses, and protects information about you when you use our website at https://uselateron.com and all related services (collectively, the "Service"). By accessing or using the Service, you agree to this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

  • Account Information: When you create an account, we collect your name, email address, and encrypted password. If you sign in through a third-party provider (e.g., Google), we receive your name, email address, and profile picture from that provider.
  • Mailbox Content: We host a mailbox at an address we issue you (@uselateron.com). We store the messages sent to and from that mailbox, including their headers, bodies, attachments, and the contacts you correspond with.
  • Workflow Configuration: When you create a workflow, we store the trigger conditions, the instructions you write, the goal you set, and the limits you choose.
  • Agent Activity: For each workflow run we store the decisions taken, the reason recorded for each one, the messages sent or drafted, and facts the agent remembers about your work to write in your voice.
  • Payment Information: If you subscribe to a paid plan, payment is processed by our third-party payment processors (Polar, Gumroad, or Xendit). We do not store your full credit card number; we only receive a tokenized reference, billing details, and transaction history from them.
  • Communications: When you contact us for support or provide feedback, we collect the content of your messages and any attachments.

1.2 Information Collected Automatically

  • Device & Browser Information: We collect device type, operating system, browser type and version, screen resolution, and unique device identifiers.
  • Log Data: Our servers automatically record information including your IP address, access times, pages viewed, referring URL, and actions taken within the Service.
  • Usage Analytics: We use analytics services to understand how users interact with the Service, including feature usage patterns, session duration, and navigation paths.
  • Cookies & Similar Technologies: We use cookies, local storage, and similar technologies to maintain your session, remember preferences, and analyze usage. See Section 8 for details.

1.3 Information from Third Parties

  • OAuth Providers: If you authenticate via Google or other OAuth providers, we receive your basic profile information as authorized by you.
  • Connected Google Accounts: If you choose to connect a Google account, we access your Gmail and Google Calendar data as described in Section 4.
  • Correspondents: We receive and process any email sent to the LaterOn address we issue you, including mail you forward there from another provider. That means we also process the personal data of the people who write to you.

2. How We Use Your Information

We use the information we collect to:

  • Provide the Service: Deliver, maintain, and operate the core functionality: hosting your mailbox, summarizing and answering questions about your mail, and running the workflows you configure — which includes sending email from your LaterOn address on your behalf.
  • Personalize Your Experience: Tailor content, recommendations, and features based on your preferences and usage patterns.
  • Improve the Service: Analyze usage trends, diagnose technical issues, and develop new features.
  • Communicate with You: Send service-related notifications, security alerts, and (with your consent) promotional communications. You can opt out of promotional emails at any time.
  • Ensure Security: Detect, prevent, and address fraud, abuse, and security issues.
  • Comply with Legal Obligations: Fulfill our legal and regulatory requirements.

3. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party vendors who perform services on our behalf, including hosting (cloud infrastructure), payment processing (Polar, Gumroad, Xendit), email delivery, and analytics. These providers are contractually obligated to use your information only to provide services to us and to maintain its confidentiality.
  • AI Processing: Message content, your workflow instructions, and the agent's memory may be sent to Anthropic to produce summaries, answers, suggested replies, and the replies a workflow sends. We send only what a given request needs. Business plans can be deployed with zero data retention.
  • Legal Requirements: When required by law, regulation, legal process, or governmental request. We will notify you of such disclosures unless prohibited by law.
  • Protection of Rights: To enforce our terms, protect the safety of our users, or defend our legal rights.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
  • With Your Consent: When you explicitly authorize us to share your information.

4. Google User Data

Connecting a Google account is optional. You start it from Settings → Accounts, and Google asks for your consent before sharing any data with us.

4.1 Data We Access

  • Basic profile (openid, userinfo.email, userinfo.profile): your Google account ID, email address, name and picture, so we can identify the account you connected.
  • Gmail (gmail.modify): the messages, threads and labels in your Gmail account, including headers, bodies and attachments from the last 12 months and new mail as it arrives, plus the ability to send mail and change labels.
  • Google Calendar (calendar.events, calendar.calendarlist.readonly): the list of your calendars and the events on them, plus the ability to create, edit, delete and respond to events.

4.2 How We Use It

We use Google user data only to provide and improve user-facing features that you can see in LaterOn:

  • Showing your Gmail messages in your LaterOn mailbox and your Google calendars in your LaterOn calendar.
  • Keeping both in sync: when you read, star, archive, label, move to spam or delete a message, or create, edit, move, delete or respond to an event in LaterOn, we make the same change in your Google account.
  • Sending the emails you write, or that a workflow you turned on writes, from your Gmail address.
  • The AI features you use on your mailbox, such as summaries, asking questions about your mail, suggested replies, and workflows you configure. For these, the relevant message content is sent to our AI provider, Anthropic, only to produce that result for you.

4.3 What We Do Not Do

  • We do not sell Google user data.
  • We do not use or transfer Google user data for advertising, including personalized, retargeted or interest-based ads.
  • We do not use Google user data to train or improve generalized or non-personalized AI or machine learning models, and our AI provider does not train on it.
  • We do not use it to determine credit-worthiness or for lending purposes.
  • No person at LaterOn reads your Google user data, except with your explicit consent for a specific message, when needed for security (such as investigating abuse), to comply with the law, or when it is aggregated and anonymized for internal operations.

We transfer Google user data to third parties only as needed to provide the features above (our hosting provider and Anthropic), to comply with applicable law, or as part of a merger or acquisition with notice to you.

LaterOn's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4.4 Storage, Security and Deletion

  • OAuth tokens are encrypted at rest. Mirrored mail and events are stored with the same protections as the rest of your mailbox (Section 6).
  • You can disconnect a Google account at any time from Settings → Accounts. We then revoke our access token and delete the mail and calendar events we mirrored from that account, except messages that also arrived in your LaterOn mailbox by other means. You can also revoke access from your Google Account permissions.
  • Deleting your LaterOn account deletes all connected Google accounts and their mirrored data, as described in Section 5.

5. Data Retention

  • Account Data: We retain your account information for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.
  • Mailbox and Workflow Content: Stored messages, workflow configuration, and agent run history are retained while your account is active and deleted upon account termination.
  • Google Data: Mail and calendar events mirrored from a connected Google account are retained while it stays connected and deleted when you disconnect it or delete your account.
  • Log Data: Server logs and analytics data are retained for up to 12 months for security and service improvement purposes, then anonymized or deleted.
  • Backup Data: Encrypted backups may retain your data for up to 90 days after deletion from production systems.

6. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and at rest.
  • Secure password hashing using modern cryptographic algorithms.
  • Regular security assessments and monitoring.
  • Access controls limiting employee access to user data on a need-to-know basis.

No method of electronic storage or internet transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights & Choices

Depending on your location, you may have the following rights:

7.1 All Users

  • Access & Portability: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal data.
  • Deletion: Request deletion of your account and associated data by contacting us at [email protected] or through your account settings.
  • Opt-Out of Communications: Unsubscribe from promotional emails using the link in each email or through account settings.

7.2 European Economic Area (GDPR)

If you are in the EEA, you additionally have the right to:

  • Restrict Processing: Request that we limit how we use your data.
  • Object to Processing: Object to processing based on legitimate interests.
  • Data Portability: Receive your data in a structured, machine-readable format.
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent.
  • Lodge a Complaint: File a complaint with your local data protection authority.

Our legal bases for processing include: performance of our contract with you, your consent, our legitimate interests (service improvement, security), and compliance with legal obligations.

7.3 California Residents (CCPA/CPRA)

California residents have the right to:

  • Know what personal information we collect, use, and disclose.
  • Delete personal information we hold about you.
  • Opt-Out of Sale: We do not sell personal information.
  • Non-Discrimination: We will not discriminate against you for exercising your rights.

To exercise any of these rights, contact us at [email protected].

8. Cookies & Tracking Technologies

We use the following types of cookies:

  • Essential Cookies: Required for authentication, security, and core functionality. Cannot be disabled.
  • Analytics Cookies: Help us understand usage patterns and improve the Service. You can opt out through your browser settings.
  • Preference Cookies: Remember your settings and preferences for a better experience.

We do not use advertising or tracking cookies.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Service functionality.

9. Mobile Application

When you use the LaterOn mobile app, we may additionally collect:

  • Device Identifiers: A unique identifier for your device to provide the Service and for analytics.
  • App Usage Data: Interaction data within the app, including screens visited, features used, and session information.

The mobile app uses a WebView to display the LaterOn web dashboard. The same data practices described in this policy apply within the mobile app. External links opened within the app use an in-app browser (Safari View Controller), which has its own session separate from the main app.

We do not collect or access:

  • Your device contacts or address book.
  • Your photos, camera, or microphone.
  • Your precise or coarse location data.
  • Health, fitness, or financial data from your device.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your own. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy, including the use of Standard Contractual Clauses where applicable.

11. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to promptly delete such information. If you believe a child under 16 has provided us with personal information, please contact us at [email protected].

12. Third-Party Links & Services

The Service may contain links to third-party websites and services not operated by us. We are not responsible for the privacy practices of these third-party services. We encourage you to review the privacy policies of any third-party services you access through our Service.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated Privacy Policy on this page with a revised "Last Updated" date.
  • Sending you an email notification for significant changes.

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, you may also contact your local data protection authority.