1. Your rights
Depending on your jurisdiction, one or more privacy frameworks may apply: CCPA (California), PIPEDA (Canada), GDPR (EU / UK), LGPD (Brazil), or others. LADLE provides the following rights to every user regardless of jurisdiction — because offering rights only where legally required feels like the wrong optimization.
- Access. See every piece of personal data we hold about you, in a readable format.
- Portability. Get a machine-readable copy (JSON) you can move to another service.
- Correction. Fix inaccurate data — most personal-data fields are editable in Settings directly.
- Deletion. Delete your account and all associated personal data. Executed within 30 days across primary and backup systems.
- Restriction. Pause processing for specific purposes without deleting the account. Rare in our product; email to arrange.
- Objection. Object to any specific processing you find objectionable; we’ll respond with what we can and can’t change.
- Withdraw consent. Any consent you gave (e.g., marketing email opt-in) can be withdrawn from Settings → Privacy at any time.
- Non-discrimination. Exercising any right above does not affect your subscription, pricing, or service quality.
2. How to exercise each right
- Access + Portability — Settings → Privacy → Export my data. Delivered via email link within 15 minutes typical, up to 4 hours for large accounts. Detail at /docs/data-export.
- Correction — Settings → Account for name / email / preferences. For content-based corrections (e.g., wrongly attributed activity), email privacy@ladle.chat.
- Deletion — Settings → Privacy → Delete my account. Reversible for 30 days if you change your mind (email hello@ladle.chat); after 30 days, irreversible. Anonymized billing records are retained per finance-record requirements (7 years).
- Restriction, Objection, Consent withdrawal — Email privacy@ladle.chat. One-business-day acknowledgment; substantive response within 30 days.
3. What we specifically don’t do
- We don’t sell personal data. Not to advertisers, not to data brokers, not to any third party.
- We don’t use chat content to train models — contractual with Anthropic per our DPA.
- We don’t share personal data with third parties except the subprocessors listed at /legal/subprocessors, each of which is under a data-processing contract.
- We don’t run tracking pixels or session-recording tools — see /legal/cookies for the four cookies we do set.
4. If we get a request from law enforcement
We’ll respond only to valid legal process (subpoenas, court orders, warrants appropriate to the jurisdiction). We’ll notify affected users of a request when legally permitted to do so. We publish an annual transparency report at /trust summarizing government requests received and complied with (zero as of the last update).
5. Filing a complaint
If you believe LADLE has violated your privacy rights and we haven’t resolved the issue to your satisfaction: you may file with your local supervisory authority. In the EU, that’s your country’s DPA (Data Protection Authority). In the UK, the ICO. In Canada, the OPC. In California, the CPPA. We’d always prefer you email privacy@ladle.chat first so we can try to fix it — but the escalation route is your right.
6. Do Not Sell / Share (CCPA)
LADLE does not sell personal information as that term is defined under the CCPA. LADLE does not share personal information for cross-context behavioral advertising. If we ever changed this posture, we would announce it prominently and provide a global “Do Not Sell or Share My Personal Information” opt-out link before any such change took effect.
7. Contact
All privacy requests: privacy@ladle.chat. Legal / DPA execution: legal@ladle.chat. See the privacy policy for the formal notice.