Privacy policy

Effective November 30, 2026

This policy explains how LetoQuant handles personal data when you use this website, sign in, connect an AI client or call the API. It covers the Data section; the Academy will add data of its own, and this policy gains a section for it before the Academy opens.

Who runs LetoQuant

LetoQuant is run by Proairos Pte. Ltd., a company registered in Singapore, at 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051 (“we”, “us”). We decide why and how your personal data is processed. You can reach us at the address under Contact.

What we collect

We collect only what running the service needs:

• Your account: your email address, and an account ID we create.
• How you sign in: if you sign in with Apple or Google, the identifier Apple or Google gives us for your account and the email address it shares with us. If you sign in with an email code, the code, which is valid for ten minutes and kept only in a form we cannot read back.
• Sessions: a cookie on api.letoquant.com that keeps you signed in for up to 30 days, and our record of that session.
• AI clients you connect: for each AI client you allow, such as Claude or ChatGPT, its name and an access token, kept only as a hash.
• API keys: each key’s name and a short hint of it. The key itself is kept only as a hash and shown to you once.
• Usage: for each query, the tool or route used, its SQL text and parameters, when it ran, how long it took, how many rows it returned and any error; and daily totals of your queries and query time, for quotas.
• Query results: the files your queries produce, for up to 30 days, reached through download links that expire after 24 hours.
• Your plan: which plan you have and the status of any subscription. When paid plans open, Airwallex handles payment; we receive the status of your subscription, never your card number.
• Network data: rate limits use a hash of your IP address, which is not stored with your account. Our hosting providers keep their own request logs, which include IP addresses.
• On this website: a lang cookie that remembers the language you chose, and an entry in your browser’s local storage that remembers whether you are signed in, so the header can show Account. The cookie reaches only our website’s host, which uses it to choose the language of a page; the local-storage entry never leaves your browser.

This website uses no analytics, no advertising and no tracking cookies, and loads nothing from third parties.

What we use it for

We use personal data to run the service: to sign you in, answer your queries, apply your plan’s quotas, keep the service secure and prevent abuse, handle billing once paid plans open, answer your requests for support, and meet our legal obligations. We do not sell personal data, use it for advertising, or build profiles of you.

Google user data

If you sign in with Google, we receive your Google account’s identifier and email address and use them only to sign you in and to write to you about your account. We ask for no other Google data. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

AI clients

An AI client you connect calls our tools on your behalf. We receive what it sends us, such as the tables it asks about and the SQL it runs, and keep it as usage records. We never see your conversation with the AI: that conversation is between you and the AI’s provider, under the provider’s own privacy policy, which also governs what the AI does with our answers. You can disconnect an AI client at any time on your account page.

Who processes data for us

• Cloudflare runs the API, stores account data and query results, and sends sign-in emails.
• Vercel hosts this website.
• Airwallex will process payments, once paid plans open.
• Apple and Google sign you in, if you choose them.

Queries run on computers we operate ourselves. Each provider processes data only to provide its service to us, under its own terms.

Where your data is processed

Our providers process data in the United States and in other countries where they operate, and queries run on computers we operate ourselves. Your data may therefore be processed outside your own country, including when you use the service from mainland China. We are in Singapore, and you send your data to us directly when you use the service.

How long we keep it

• Sign-in codes: valid for 10 minutes.
• Sessions: up to 30 days; we delete a session once it expires or you sign out.
• Query results: up to 30 days.
• Usage records: the record of each query, its SQL text included, for 30 days; the daily totals of your queries and query time, for 12 months.
• Your account, keys and connected AI clients: until you delete them, or your account.
• Our hosting providers’ logs: as their own policies set.

When your account is deleted, we delete the account, its sign-in identities, sessions, keys, connected AI clients and usage records, except what the law requires us to keep, and its query results expire within 30 days. Until deletion is part of the product, you ask for it by email, as the support page describes, and we carry it out by hand within 30 days.

Your rights

You may ask us for a copy of your personal data, to correct it, to delete it, or to give it to you in a form you can take elsewhere, and you may object to how we use it or ask us to restrict it. Depending on where you live, the law may give you further rights, including to complain to a data protection authority. To use them, write to us and quote your account ID. We confirm each request by writing to your account’s own email address before we act on it, and answer within 30 days.

Security

Connections to this website and to the API are encrypted. API keys, access tokens and sign-in codes are kept only as hashes, so we cannot read them back. Only the people who run the service can reach our systems. No system is perfectly secure; if a breach affects your personal data, we will tell you as the law requires.

Children

The service is not for children: you must be at least 18 years old to use it. If we learn that we hold personal data of someone younger, we delete it.

Changes to this policy

We may update this policy; the date at the top says when this version took effect. We announce a material change on this website and, if you have an account, by email before it takes effect. This policy may be offered in other languages for convenience; the English version governs.

Contact

Write to Proairos Pte. Ltd. at leto@proairos.com, or by post to 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051; or see the support page.