Privacy Policy

Last updated: August 18, 2026

Introduction

Welcome to L8TR. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application L8TR and our website.

Information We Collect

We may collect information about you in a variety of ways, including:

  • Personal Data: Personally identifiable information, such as your name, email address, and demographic information, that you voluntarily give to us when you register with the App.
  • Derivative Data: Information our servers automatically collect when you access the App, such as your IP address, browser type, operating system, access times, and pages viewed directly before and after using the App.
  • Device Data: Information about your mobile device, such as your device ID, model, manufacturer, and location data, if enabled.

How We Use Your Information

Having accurate information permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use collected information to:

  • Create and manage your account.
  • Deliver targeted services, products, or feature updates.
  • Monitor and analyze usage and trends to improve user experience.
  • Notify you of updates, security alerts, and administrative messages.
  • Prevent fraudulent transactions and protect against theft or illegal activity.

Disclosure of Your Information

We do not sell your personal data. We may share information in certain situations:

  • By Law or to Protect Rights: If disclosure is necessary to respond to legal process, investigate potential violations, or protect the rights, property, and safety of others.
  • Third-Party Service Providers: We may share your data with third parties that perform services for us (e.g., payment processing, data analysis, email delivery, hosting services).
  • Advertising Measurement: Our website uses the Meta Pixel, provided by Meta Platforms, Inc., and the TikTok Pixel, provided by TikTok, to measure visits to our site and the effectiveness of our advertising. These pixels collect information about your browser and device and the pages you visit, and share it with Meta and TikTok for measurement and ad optimization purposes. The pixels are not loaded for visitors in regions that require prior consent for this kind of tracking. You can opt out of this use of your data through your Meta and TikTok ad preferences.

Data Security

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide, please be aware that no security measures are perfect or impenetrable.

Your Rights and Choices

You may at any time review or change the information in your account or terminate your account by contacting us or adjusting your settings in the App. Depending on your location, you may have rights under local laws (such as GDPR or CCPA) to request access to, deletion of, or restriction on processing of your personal data.

Google User Data and Limited Use

L8TR's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google Data We Collect

When you connect your Google account, L8TR may access and process the following Google user data:

  • Account identifiers: Your Google account email address and Gmail connection status, so we can show which account is linked and whether reconnection is required.
  • Authentication tokens: Encrypted OAuth access and refresh tokens used solely to call Google APIs on your behalf.
  • Gmail message content (temporary, request-scoped): When you run a scan, we retrieve matching Gmail messages (including headers and body content) from allowed buy-now-pay-later (BNPL) senders. We may derive parsed fields from those messages for display, such as provider label, payment amounts, and payment dates, and show the related message summaries in the app.

Why We Collect Google User Data

We collect and use Google user data only to provide and improve L8TR's user-facing Gmail features: connecting your Gmail account, searching for BNPL-related emails you choose to scan, and displaying matching message summaries and parsed payment-schedule information in the app. We do not use Google user data for advertising, credit decisioning, or any purpose unrelated to these features.

No AI / Machine Learning Training

L8TR does not use Google user data to train, improve, or develop generalized artificial intelligence or machine learning models.

Human Access to Google User Data

L8TR does not allow human beings to read Google user data (including Gmail content) obtained through Google APIs, except in the following limited cases:

  • We first obtain your affirmative agreement to view specific messages, files, or other data (for example, to troubleshoot an issue you report);
  • It is necessary for security purposes (for example, investigating a bug or abuse);
  • It is necessary to comply with applicable law; or
  • The data (including derivations) is aggregated and used for internal operations in accordance with applicable privacy and other jurisdictional legal requirements.

Third-Party Transfers of Google User Data

Google user data is subject to stricter sharing rules than the general third-party disclosures above. L8TR transfers Google user data to third parties only as needed to provide or improve the core user-facing features of the L8TR app, and only with your consent where required. We do not sell Google user data, and we do not share Google user data for advertising, tracking, retargeting, personalized or interest-based ads, or marketing purposes. We also do not transfer Google user data to data brokers, information resellers, or advertising platforms.

Data Retention and Deletion of Google User Data

Data Retention

L8TR retains Google account connection status and encrypted authentication tokens only while your Google account remains connected and your L8TR account is active. If you disconnect Google or delete your L8TR account, these tokens are immediately deleted or invalidated.

User Control and Account Disconnection

You can revoke L8TR's access to your Google data at any time by disconnecting your Google account inside the L8TR app settings, or by revoking access directly through your Google Account Third-Party Permissions.

Requesting Data Deletion

You have the right to request the permanent deletion of any Google user data stored by L8TR. To submit a deletion request, please contact us at support@joinl8tr.com or tap "Delete Account" in the app settings. Upon receiving your request, we will permanently delete all associated Google data from our active servers within 30 days.

Contact Us

If you have questions or comments about this Privacy Policy, please contact us at: