Privacy Policy

1. Information We Collect

You can save links without an account. These links and collections stay in this browser or in the native app's device storage, shared with its capture integrations. After signing in, you can choose to move this device library to your account for cloud backup and sync. Skipping keeps it on the device; you can move it later from Settings. General page visits and limited operational events may still be measured while you are signed out.

When you sign in with Apple or Google, we receive the provider account identifier and, when the provider supplies them, your verified email address and display name. This browser or app remembers your last successful sign-in provider to help you choose it next time.

For your cloud library, we store the URLs, titles, summaries, shared Link notes, thumbnails, and collections you create. Everyone with access to a Link can read its note. We also collect limited operational events such as sign-in, save, update, deletion, error type, platform, and timing data. Saved URL query strings are not included in operational event properties.

If you submit feedback, we receive your message and technical context such as the current page, viewport, and browser user agent.

On macOS, selected text and clipboard contents are read only when you invoke Save to Laters or Quick Save. They are processed locally to find an HTTP or HTTPS URL and are not sent to Laters until you confirm a cloud save. Saves made without an account remain on the device until you choose to move them to your account.

2. How We Use Information

We use this information to authenticate you, synchronize and organize your library, generate link previews, prevent abuse, diagnose failures, respond to feedback, and improve Laters. We do not sell your personal information.

3. Link Processing and Third Parties

When you save a link to your cloud library, Laters may request the public webpage to extract metadata and a limited amount of readable text. If AI enrichment is enabled, Upstage receives the URL origin and path, existing metadata, your effective Summary prompt, and bounded page text to produce a title and summary. URL query strings and fragments are removed before that request.

Apple and Google process sign-in, Vercel provides hosting, aggregate analytics, and performance measurements, and GitHub receives feedback submitted through the in-app feedback form. These providers process data under their own privacy terms.

If you connect an AI agent through Settings, the connected provider may receive the saved URLs, titles, summaries, shared Link notes, thumbnails, collection names, and follow information needed for tools you approve. Laters does not send saved webpage bodies through this connection. The provider may separately visit a public URL using its own capabilities and processes information under its own terms and privacy policy.

4. Security

Sessions use random opaque tokens. Browser tokens are stored in secure HttpOnly cookies, native tokens are stored in the Keychain, and server session tokens are hashed at rest. Link fetching rejects private network destinations and applies request, redirect, and response-size limits.

AI connections use scoped OAuth access, short-lived access tokens, rotating refresh tokens, and hashed token storage. Tool requests are rate-limited and destructive actions require explicit safeguards.

5. Retention and Account Deletion

Device-only saves are not backed up by Laters. Clearing app or browser data can remove them. During a cloud import, the local copy is retained until all items have been saved to your account. A failed import can be retried in that account.

Your account data remains available while your account is active. Deleting your account from Settings removes your account, sessions, saved links, collections, and user-linked AI connections and operational events from the Laters database. Infrastructure and third-party providers may retain limited security or delivery logs for the periods described in their policies.

6. Your Choices

You can edit or delete saved links and collections, change your display name, sign out, or permanently delete your account from Settings. AI enrichment is only used when the service integration is enabled by Laters.

You can disconnect an AI agent from Settings at any time. This stops future access to Laters, but it cannot remove information already returned to or used by that provider.

7. Changes and Contact

We may update this policy as Laters changes. The current date is shown above. Questions can be sent to laters.space@gmail.com.