Privacy Policy

Lethe collects the least amount of data needed to run the service. No tracking, no advertising cookies, no profiling, no data sold or shared for marketing.

To exercise your GDPR rights on your behalf, Lethe processes the identity and contact data you enter to compose a request — typically your full name, email addresses, and any phone numbers — together with request metadata such as which brokers you targeted, the request reference, status, and timestamps. Legal basis: performance of our agreement with you to act as your authorised representative in exercising your rights (Article 6(1)(b) GDPR), with your consent where required. Identity and contact data are encrypted at rest and kept only as long as needed to run and evidence the request. By design, a data-erasure (Article 17) or objection (Article 21) request necessarily discloses your identifying details to the data broker it is sent to — that disclosure is the purpose of the request and is what lets the broker find and erase your data. The verifiable receipts Lethe produces are PII-free: your identifiers are recorded only as salted cryptographic commitments, never as raw values, so a receipt proves a request was made without exposing who you are. We do not sell or share your data for marketing.

Lethe uses a single strictly-necessary cookie: an httpOnly session cookie (lethe_access) set after you sign in through Dekimu ID (id.dekimu.com). It keeps you authenticated and cannot be read by client-side scripts. We use no tracking, advertising, analytics, or profiling cookies, and we load no third-party trackers.

Lethe relies on a small set of processors to run the service:

• Upstash — encrypted database, EU region
• Resend — transactional email delivery, EU (eu-west-1)
• Vercel — application hosting
• Dekimu ID (id.dekimu.com) — authentication and account management, operated by Dekimu Labs S.L.
• Data brokers — the recipients of the erasure and objection requests you direct Lethe to send on your behalf

You have the right to access, correct, export, or erase your personal data. Use the Contact options in Dekimu ID at id.dekimu.com. You may also lodge a complaint with a supervisory authority.

Dekimu Labs S.L. (CIF B55431357) · legal@dekimu.com. You may also use the Contact options in Dekimu ID at id.dekimu.com.

This policy is governed by the laws of Spain. You may lodge a complaint with the Agencia Española de Protección de Datos (AEPD) or the supervisory authority of your habitual residence.