Privacy
Last updated 14 October 2026
The short version
- Submissions are sealed. Other people on a case see that you submitted, never what you sent. You can't read it back either.
- No AI reads your case until someone pays, apart from live transcription when you speak into a text box.
- Uploads are deleted after processing. Reports are deleted 24 hours after delivery. Unpaid cases are deleted after 24 hours.
- Case content is stored only as files, never in our database, so deleting the files deletes the case.
- Notifications never contain what your case is about.
What we collect
Case content
The evidence you upload (screenshots, photos, voice notes, recordings, chat exports), what you type or say in text boxes, the names of the people in the case, and the report we write. We strip location and other metadata from photos in your browser before they upload.
Account and payment details
Your email or phone number if you sign in, the WhatsApp numbers you enter when inviting others, payments and refunds, your wallet balance and history, and gift and referral records.
Consent records
Which consent boxes were ticked, by whom and when.
Technical data
Basic request logs and a bot check. We don't run analytics or advertising trackers, and there are no third-party scripts on this site apart from the bot check and the payment page.
Providers and what they keep
Every company that touches your case, what it does, and what it keeps. We never claim that our AI providers keep nothing.
Anthropic (Claude)
Reads screenshots, then reads the whole case and writes the verdict.
Keeps: We use Anthropic's zero data retention option, so inputs and outputs aren't stored after the request. One exception: content Anthropic's safety systems flag can be kept for up to 2 years, even under zero retention.
OpenRouter (test mode only)
While the site is in test mode, free stand-in models reached through OpenRouter screen and read screenshots and write the verdict.
Keeps: Free models may log prompts, so test mode is for made-up cases only. It's switched off before real payments start, and Anthropic takes over.
Sarvam AI
Transcribes voice notes, call recordings and the live mic in text boxes.
Keeps: Nothing. Our contract with Sarvam is zero retention and no training on our data.
Google (Gemini)
Transcribes audio in languages Sarvam doesn't cover, and stands in if Sarvam is down for a long time.
Keeps: Used through Google's paid API, which doesn't train on our requests. Google may keep request logs for a limited time to detect abuse.
Google Cloud Vision
SafeSearch checks every image for nudity before any AI model sees it.
Keeps: Images aren't stored.
Microsoft PhotoDNA
Compares images against known child sexual abuse material before anything else happens.
Keeps: A match is reported to the authorities as Indian law requires. Nothing else is kept.
Supabase (Singapore region)
Stores uploaded files, reports and our account database.
Keeps: Case content lives only in file storage and is deleted on the schedule below. The database holds accounts, payments and case status, never case content, so backups never contain it.
Trigger.dev
Runs the background job that processes a paid case.
Keeps: Job payloads carry IDs only. No case content passes through it.
Dodo Payments
Merchant of record. Takes UPI, card and netbanking payments, issues invoices and refunds.
Keeps: Your name, email or phone, and payment details, as payment and tax law requires. It never sees case content.
Vercel
Hosts the website.
Keeps: Standard request logs for a short period. We don't log case content.
Meta (WhatsApp Cloud API) and Resend (email)
Send login codes, invites and notifications like "your report is ready".
Keeps: Delivery records. Messages never contain case content or case titles.
Cloudflare
DNS, the invisible bot check (Turnstile), and encrypted backups of our database.
Keeps: Turnstile sees technical signals from your browser to tell people from bots. Backups contain no case content.
Sentry
Tells us when something in our code breaks.
Keeps: Error traces with request bodies, AI data and user data switched off.
When things are deleted
- Uploads: deleted once processing finishes.
- Reports, PDFs and share cards: deleted 24 hours after the report is delivered. The case page shows a countdown.
- Unpaid cases: deleted 24 hours after they're created.
- Refused cases: deleted once the refusal and refunds are done.
The one exception is where the law requires us to keep a record, for example reporting child sexual abuse material to the authorities.
What we keep after deletion
- Payment, refund and invoice records, as tax law requires.
- Your account email or phone, your wallet history, and gift and referral records.
- Delivery logs with no content (for example, "report delivered at 9:14 pm"), to handle chargebacks.
- Fingerprints (hashes) of uploaded files for 30 days, with no content, so a case re-filed with the same evidence shows that a related case was judged.
- A content-free record at /verify for one year, so anyone can check whether a PDF is genuine.
Your rights
Under India's Digital Personal Data Protection Act you can ask what personal data we hold about you, ask us to correct or delete it, withdraw consent, and nominate someone to act for you. If you withdraw consent, we stop using your data wherever we can, and anything left on a case is deleted on the normal schedule above. Write to the grievance officer below: we acknowledge within 48 hours and resolve within a month.
Because every side consents to names being used, the report shows real names. The share card never does: it shows Side A, Side B and so on.
Contact
Privacy questions and complaints go to our grievance officer at grievance@letmesettle.com. Details are on the contact page. Please don't send case evidence by email.