Privacy Policy

Lettout is operated by Vesperlabs (OPC) Private Limited ("Lettout", "we", "us"), a company registered in India (CIN U66301PN2026OPC258259). Our full registered address is in section 14. We decide how your personal data is used, which makes us the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023 ("DPDPA") and the "controller" under laws such as the EU and UK GDPR.

We don't ask for your real name, phone number, location or contacts. Your IP address can show your approximate area; we use it only for security and to deliver the app. We never see or store your card or UPI details; Dodo Payments handles those.

Before a vent or reply is published, its text is checked by an automated system powered by Anthropic's Claude AI. The check looks for two things only: signs that someone may be in immediate danger, and threats or personal attacks against others.

• If a post shows signs of crisis, it is kept off the public feed. You can still see it, and we show you support resources.
• If a post contains threats or personal attacks, it is not published and your text is returned to you.
• Lettout's own safety log records only the post's ID and the time it was flagged, never your words. The post itself follows the same deletion rules as any other vent. If you think a post was held back by mistake, email grievance@lettout.com and we'll review it.

Anthropic processes this text only to provide the check. Under its commercial terms, it does not use it to train its AI models, and keeps it only for a limited period under its own retention policy, separate from Lettout's records. The check never decides anything about your account on its own; people can review reports and decisions.

We use your data because you consent to it when you create an account, and because we need it to provide the service you subscribed to. We also use it where the law requires (for example, tax records or lawful requests from authorities) and to run the safety checks that keep crisis posts off the public feed and show support resources. These checks are not used to locate anyone or to contact emergency services. You can withdraw your consent at any time by deleting your account; this doesn't affect anything we did before.

We use trusted service providers who process data only on our instructions or to deliver their part of the service:

Dodo Payments is the seller of record for your subscription and also acts under its own privacy policy for payment data.

We never sell or rent your data, and we never share it for advertising. We share it only:

• with the providers listed above;
• when the law requires it, for example a valid order from a court or a lawful request from a government agency in India or elsewhere; and
• with a buyer or successor if Lettout is sold or merged, under the same promises as this policy.

Lettout doesn't monitor posts in real time, can't send emergency help, and doesn't contact emergency services on anyone's behalf. If you're in danger, contact your local emergency number or find a helpline at findahelpline.com.

If we find sexual content involving anyone under 18, we remove it and report it to the police or India's National Cybercrime Reporting Portal (cybercrime.gov.in), as the law requires. We never only delete it.

We may keep specific data longer if the law requires it or if it's needed for an ongoing legal matter.

Wherever you live, you can ask us to:

• give you a summary of the personal data we hold about you and who we've shared it with;
• correct or update it;
• delete it (you can also delete vents, replies and your whole account yourself in the app);
• stop using it, by withdrawing your consent; and
• name someone to exercise these rights for you if you die or become unable to (a DPDPA nominee), by emailing us their name and contact details.

If you're in the EU, UK or a similar jurisdiction, you can also ask for a copy of your data in a portable format, object to certain uses, and complain to your local data protection authority.

Email grievance@lettout.com from the address on your account. We may ask you to confirm it's you. We'll acknowledge your request within 24 hours and respond within 15 days. If you're in India and unhappy with our answer, you can complain to the Data Protection Board of India.

We use encrypted connections, database access rules so members can only reach their own private data, bot protection at sign-in, and limits on how fast accounts can post. No system is perfectly secure. If a breach affects your personal data, we'll tell you without delay, explain what happened and what you can do, and report it to the Data Protection Board of India within 72 hours of becoming aware of it, as the law requires.

Lettout stores a few things in your browser so the app works: your sign-in session, your preferences, vents and replies you've started writing but not yet sent, vents waiting to post while you're offline, and your last known account status. We don't use advertising or analytics cookies. Cloudflare's bot check may set its own security cookie at sign-in.

Our providers may process data outside India, including in the United States and the EU. We only use providers that protect data to a standard consistent with this policy and with the laws that apply to us.

Lettout is only for people aged 18 and over. We don't knowingly collect data from anyone younger. If we learn that an account belongs to someone under 18, we will delete it.

If we make a significant change, we'll tell you by email or in the app before it takes effect. The effective date at the top shows when this policy last changed.

Grievance Officer: Ishan Kharat
Email: grievance@lettout.com
Address: Vesperlabs (OPC) Private Limited, C-14, Shree Chembars, 379/B Guruwar Peth, Karad, Satara 415110, Maharashtra, India

We reply to general questions Monday to Saturday, 10:00 to 18:00 IST. Complaints about posts showing someone nude or sexually, or impersonating them, and legal orders, are handled at any time, every day, from the moment they arrive. For anything else, write to hello@lettout.com.