1. Some Definitions

The terms “we,” “us,” and “Company” refer to Letail, LLC, a limited liability company organized under the laws of the State of Delaware, with its principal business address at 2969 Riverside Blvd, Sacramento, CA 95818, USA, or any successor or assignee of the Company.

We are in the business of providing an online platform that our customers may use to create and deploy “Contact Buttons” embeddable JavaScript code snippets (which, when created using the “Services,” as defined below, are referred to as a “Contact Button”), among other products and services we may offer from time to time. The term “Contact Button” refers either to the business or the online platform as the context requires. The term “Services” refers to the services offered by Contact Button.

The term “Member” refers to an individual or entity who or which is registered with us to use the Services. The term “you” refers to any Member (or other party whose contact information has been provided to us over the internet) who is reading this Privacy Policy, or on behalf of whom this policy is being read. The term “Website” refers to the website with the URL https://www.contactbutton.com and any websites attending that domain.

The term “Personal Information” means information about an individual who is a Member and includes any “Supplemental Personal Information,” as defined further below, that we obtain.

The term “Customer Personal Data” means Personal Information processed by Contact Button on behalf of a Member through the Services, including information submitted through a Member’s Contact Buttons, lead-capture tools, or forms.

When Contact Button processes Customer Personal Data on behalf of a Member, the Member is the Controller and Contact Button is the Processor. Contact Button processes that data only on the Member’s instructions and does not use it for Contact Button’s own marketing purposes. This processing is governed by our Data Processing Agreement. Contact Button acts as a Controller for Personal Information for which it determines the purposes and means of processing, including account, billing, legal-compliance, and Website analytics data.

2. Categories of Information We Collect

1. Information You Provide to Us: When you register to use Contact Button on a free or other basis, communicate with customer service, or send us an email, you provide us with information that we collect. Such information may include your IP address, name, physical address, email address, phone number, cell phone number, credit card information, and other information such as gender, occupation and other demographic information. By providing us with this information, you consent to your information being collected, used, disclosed and stored by us in accordance with this Privacy Policy and our Terms of Use.

2. Other Information We Receive and Store: When you register to use Contact Button, we store “cookies,” which are strings of code, on your computer or other device, either locally or through your browser. We also use electronic images known as Web beacons. With those cookies, we are aware of and collect information concerning when you visit our Website, when you use Contact Button, your browser type and version, your operating system and platform and other similar information. With Web beacons, we can determine when you view a Contact Button or click on a link in a Contact Button, and collect other data. You may turn off all cookies that have been placed on your computer by following the instructions on your browser on how to block cookies that have been placed on your computer. However, if you block our cookies it will be more difficult, and maybe impossible, to use the Services.

3. Tracking Our Emails to Our Customers: When we send emails to our own registered Contact Button customers, we’ll sometimes track who opened the emails and who went so far as to click on any of the hyperlinks. We do this to measure the performance of our Email Campaigns, and to improve our offerings to specific customer segments.

4. Information From Other Sources: We may obtain additional information about you by using your email address, or other information, to directly, or through one or more services, search over the internet, or elsewhere. We thereby obtain information that appears to be related to such email address or other information, such as a name, age and participation in social media websites, (such information being referred to herein as “Supplemental Member Information”).

3. Use and Disclosure of Your Personal Information

We will use and disclose your Personal Information only as follows:

1. To promote use, including continued use, of our Services. For example, if you leave your personal information when you visit our Website and do not sign up for any of the Services, we may send you one or more emails asking whether you wish to sign up. If you use any of our Services, and may benefit from using one or more other Services we offer, we may send you an email telling you about the other Service or Services.

2. To bill and collect sums owed to us. Uses for this purpose include sending you emails, invoices, receipts and notices of delinquency, to alert you if we need a different credit card number, and to otherwise try to collect money owed. We use third parties to handle secure credit card transaction processing and send billing information to such third parties, who maintain all information in confidence, to process your orders and credit card payments. To learn more about what steps we take to safeguard such data, see below. These credit card transaction processors are third parties for purposes of the data protection laws of the European Union and the United Kingdom.

3. To send you System Alert Messages to let you know about temporary or permanent changes to our Services including planned outages, new features offered, version updates, point releases, major releases, abuse warnings, changes to our Privacy Policy and possibly other documents and agreements.

4. To provide customer support and obtain feedback.

5. To protect the rights and safety of us and our employees, Members, owners, officers and others.

6. To meet legal requirements such as complying with court orders and valid subpoenas.

7. For internal use, whether in the form actually received or pseudonymously or anonymously, by way of example and not limitation circulating email addresses internally for identifying the most common web hosts used by our customers, or reviewing IP addresses for information about the general geographic areas of origin of our users.

8. To provide information received hereunder to representatives and advisors such as attorneys and accountants to help us comply with legal and other requirements.

9. To prosecute and defend a court, arbitration or similar proceeding.

10. To support and improve the Services we offer including adding features and providing benchmarking and other comparison information regarding, for example, the relative success of a Members’ Contact Buttons compared to other Contact Buttons by companies in the same or different industries. Benchmarking and similar information is derived from aggregating and analyzing data.

11. To disclose the information that we have to you in response to any valid request from you to know what of your information we possess, and in response to a valid request to exercise your “right to be forgotten” as detailed further below.

12. To communicate with you concerning your account for an informational, as opposed to promotional, purpose.

13. To transfer your information in the event of the sale of substantially all of the assets of our business to a third-party or in the event of a merger, consolidation or acquisition. However, in such an event, any acquirer will be subject to our obligations under this Privacy Policy.

14. To send you informational and promotional materials that you elect (“opt-in”) to receive.

4. Third-Party Use and Disclosure of your Personal Information

1. Information that you provide directly to the Company, including through fields intended to communicate with the Company, will be collected and used by the Company. Some of that information will be anonymized or pseudonymized. Information submitted through a Contact Button, lead-capture tool, or form operated by a Member is Customer Personal Data and will be processed on that Member’s instructions under our Data Processing Agreement.

2. The Company will use your email address to send you certain regular emails pursuant to your opt-in subscriptions to our newsletter and other regular contacts. The Company keeps your email address regardless of your subscriptions for internal use. The Company may share your email address with service providers where necessary to provide the Services, process payments, deliver communications, maintain security, or perform other activities described in this Privacy Policy. Those providers may use the information only to provide their contracted services or as otherwise permitted by law.

3. The Company also collects certain data based on your access of the Website. This includes session data, meaning information such as when and for how long you access the Website. The Website will collect information about your location based on your IP address. An IP address is a non-static identifier that allows the Company to know, in general terms, where its users are located. An IP address is not the same as a physical address, and is not the same as either your shipping address or your billing address.

   The Company uses your IP address for internal purposes such as knowing which countries provide certain percentages of its users. The Company does not verify your IP address or connect it to your shipping or billing address for purposes of checkout. An IP address may constitute Personal Information under applicable law, and the Company treats it accordingly. The Company will also know your IP address for purposes of logging visits to the Website from your IP address and for preventing distributed denial-of-service attacks, which are disruptive attacks on websites caused by very large numbers (hundreds of thousands or more) of near-simultaneous visits to the Website.

4. The Company collects information such as the number of users visiting the website at any given time, the times during which visitors visit the Website, the length of time that users use the website, which pages they visit, which products they order, and what other actions they take while on the website. This information is collected by the Website and is provided in an anonymized form to the Company’s data analytics provider, which is Google Analytics (the “Data Analytics Provider”). This information is used by the Company to track the engagement, general geographic origin, and headcount of its users. This information is combined together to provide general demographic information on the Website’s users. This information is not and cannot be used to identify you specifically. The Data Analytics Provider is segregated from internal tools that identify specific customers, for example our internal system for storing subscribers’ email addresses.

5. The Company may from time to time engage certain independent contractors to engage with your personal information; by way of example and not limitation, a third-party marketing services to send emails or an independent data analytics analyst who may have access to anonymous or pseudonymous information that we collect from you. All such persons are bound by express duties of confidentiality to the Company. Such persons are third parties within the meaning of the applicable privacy laws of the European Union and the United Kingdom.

5. Affiliates Disclaimer

The website may contain links to partner websites, and we receive a referral commission for any purchases made by you on the partner website using such links. Our partners include the following:

– Trengo

6. Right to be Forgotten

Users subject to the data privacy laws of the European Union and/or the United Kingdom may at any time issue a request to us that we remove, cease using, and/or permanently delete any information that you have submitted to us. Such valid requests will be honored promptly according to the applicable rules and regulations of the European Union and the United Kingdom. Any request to destroy some or all of the information you submit to us must be made in writing, to the designated contact information provided elsewhere on the Webpage. Information so destroyed or removed cannot be recovered; once destroyed, such information must be resubmitted by the user before we are able to verify, confirm, or disclose any such information in the future.

7. Safeguarding Your Information

To protect your information, our credit card processing vendor uses the latest 128-bit Secure Socket Layer (SSL) technology for secure transactions. In addition, our vendor is certified as compliant with card association security initiatives, such as the Visa Cardholder Information Security and Compliance (CISP), MasterCard® (SDP), and Discovery Information Security and Compliance (DISC). Contact Button accounts require a username and password to log in. When you’re finished using Contact Button, please click the “log out” link in the top right corner of your screen, to prevent someone from using your computer to access your account. You must keep your username and password secure and not disclose it to a third party. Due to the sensitive nature of your account information, we do not resend forgotten passwords. Users must follow online instructions to reset their passwords if they forget them. Account passwords are encrypted. We cannot see your passwords. We can only reset them.

The Company does not collect payment information from you except to the extent that the Company forwards your payment request directly to our merchant services provider, which is Stripe (www.stripe.com) (the “Merchant Services Provider”), with neither the ability nor the intent to intercept or collect any such payment data. The Merchant Services Provider only receives information necessary to verify that any payments between yourself and the Company are authorized. The Merchant Services Provider will use encrypted tools to communicate with your designated payee institution, or whatever other account you use to pay for orders to the Company. Your credit card information or other payment information is not retained by the Company except as provided below. The Company does not maintain records of your credit card number or other payment information.

The Merchant Services Provider is the merchant of record within the meaning of the data privacy laws of the European Union and the United Kingdom.

This information is “pseudonymous” within the meaning of the data privacy laws of the European Union and the United Kingdom.

8. Notice of Breach of Security

Nobody is safe from hackers these days. Contact Button will notify you, within forty-eight hours of such a breach occurring, if a breach in security results in an unauthorized intrusion into our system which materially affects you and will subsequently report the corrective action taken in response to the intrusion.

9. Notification of Changes

The Company may revise, rescind, or extend the terms of this Privacy Policy at any time without notice, except to the extent required otherwise under the California Online Privacy Protection Act or the data privacy laws of the European Union and the United Kingdom. Your continued use of the Website constitutes acceptance of any such changes. If you object to changes in our Privacy Policy which relate to those purposes, we will have to terminate your account. In contrast, in the event we ever changed our Privacy Policy to allow us to have an expanded right to use or disclose Personal Information for marketing purposes, you would be able to opt out without any such termination.

10. Accuracy of Data and Rights

We do our best to keep your data accurate and up-to-date to the extent that you provide us with the information we require to do that. If your data changes (including, but not limited to, a change in your email address) then you are responsible for notifying us of those changes so that we can keep your records up-to-date. We retain the data about you only so long as reasonably required to meet the purposes for which we have the right to use the information. In this regard, we keep some data, relating to when and where Contact Buttons were deployed, how many times a Contact Button was viewed and clicked. We will give you access to any of your Personal Information that we hold about you within 30 days of any request you make for such information. We may charge for providing this information to you, as permitted by applicable law.

11. Effective Date

This Privacy Policy is effective with respect to all data that we have collected, or collect, about and/or from you, both prior to your registration as a Member and/or during the Term, in accordance with the Terms of Use.

12. No Children Under Age 13

The Offerings are not intended for use by anyone under the age of 13, nor does Contact Button knowingly collect or solicit personal information from anyone under the age of 13. If you are under 13, you may not attempt to register for the Offerings or send any information about yourself to us, including your name, address, telephone number, or email address. In the event that we confirm that we have collected personal information from someone under the age of 13 without verification of parental consent, we will delete that information promptly. If you are a parent or legal guardian of a child under 13 and believe that we might have any information from or about such child, please contact us at the email or mailing address provided at the end of this Privacy Policy.

13. Beneficiaries

Our independent contractors who handle data collection, analysis, marketing including copy-writing, and other contractors who interact with the Website or any data collected are intended third-party beneficiaries of your obligations under this Privacy Policy.

14. Changes to the Privacy Policy

We reserve the right to change our Privacy Policy at any time. If we make changes, we will post them and will indicate on this page the policy’s new effective date. If we make material changes to this policy, we will notify you by email or through notice on the Offerings.

15. Questions

If you have any questions, comments, or concerns or wish to update, delete or change any Personal Information submitted on this Site, or have any questions about our Privacy Policy, please notify us via email at: support@contactbutton.com. This shall also serve as the designated contact information for any valid exercising of the “right to be forgotten.”

If you have questions, please direct them to:

Letail, LLC
2969 Riverside Blvd
Sacramento, CA 95818
USA

support@contactbutton.com

Last updated: October 26, 2026

Google integrations: data use, retention and deletion

Last updated: 26 October 2026

This section explains how Contact Button, operated by Letail, LLC, handles information received through Google integrations and information derived from it ("Google API data"). It supplements our Privacy Policy. For Google API data, this section takes precedence over general provisions about marketing, enrichment, benchmarking, contractors and business transfers.

For Customer Personal Data, our Data Processing Agreement (DPA) controls any conflict with this section. Any shorter deletion period or stronger protection required by an applicable agreement or law continues to apply.

Our Google data commitment

Contact Button commits to following the Google API Services User Data Policy, including its Limited Use requirements, in our use and transfer of Google API data. We also apply the relevant Google Workspace user data and developer policy.

We limit Google API data use to the appropriate, visible features you authorize. We do not sell this data or use or transfer it for advertising, retargeting, data brokerage, creditworthiness or lending decisions. We do not authorize its use to train or improve general-purpose or foundation AI models.

Transfers are limited to providing or improving the appropriate user-facing feature with your consent, necessary security purposes, legal obligations, or a business acquisition/asset transfer with your prior explicit consent. Service providers receiving Google API data must process it within these restrictions.

Human access is limited to your affirmative agreement to view specific information, necessary security or abuse investigations, legal obligations, or appropriately aggregated and anonymized internal operations permitted by applicable requirements.

What the integrations do

The information accessed and actions performed depend on the permissions you grant and the features you configure. Some integrations synchronize in the background. Features and connection options may vary by account.

Feature	Information and purpose
Google sign-in and linking	Your Google account identifier and identity information Google provides, such as name, email address and profile-image URL, are used to sign you in or link your account.
Gmail in Messages	Participants, subjects, message text/HTML, attachments, labels and synchronization identifiers are imported from a selected mailbox folder to display conversations. Operators can reply and synchronize read, starred and open/closed states with Gmail labels.
Google Tasks	Task titles, due dates and completion state are synchronized with a dedicated Contact Button list. Changes can be written in both directions.
Calendar and bookings	Calendar events are read for availability and selected-event displays. Booking actions can write guest contact details, times, notes and location to Google Calendar.
Form actions	At your instruction, form answers can be used to search/create/update Google Contacts, append a row to a selected Google Sheet, send a form notification through the configured mail service, or create an unsent Gmail draft.
Selected Google Drive files	Selected files, including exported Google Docs text, can be imported as knowledge articles. We store the selected file’s content and associated name, file/link/revision identifiers, article versions and searchable chunks. This connection can use a separately supplied Google access token; it is not limited to the permissions of Google sign-in.
Google Chat	Connected Inbox cards and bridges use space, thread, message and sender identifiers to deliver the configured feature. Operator message text received through a connected bridge is stored in the corresponding Contact Button conversation.
Business Profile	Connected business-location, review and reply information is imported; replies you request can be published or removed.

The Google permissions shown during connection describe the access being requested. You can decline access or disconnect an integration, although features requiring that access will then be unavailable.

Workspace access, public features and AI

Authorized workspace operators and API clients can access shared records according to their permissions. If the Google Chat Inbox feature is enabled, contact details and message excerpts can appear in cards returned to the requesting operator in Google Chat.

Enabling a public Calendar List can make selected event titles, descriptions, times, locations and organizer information visible to visitors. Review which calendars and details you choose to display.

Imported Drive knowledge can be made public through knowledge-page/publication settings and used by configured knowledge search, Agent and Assistant features. When enabled, published knowledge can be included in model prompts, draft/search responses or MCP results. Semantic indexing sends text chunks to an embedding provider and stores their derived numeric representations in a knowledge index.

An enabled Agent booking tool can pass available time slots derived from connected calendars to its configured AI service. A model-facing booking integration, including MCP, can also return these slots to the requesting client. The optional form-draft feature separately sends selected form answers to a configured Gemini model and saves the resulting draft in Gmail; it does not send the email and does not read imported Gmail messages to generate that draft.

Google Chat conversation text can also enter model context in a configured conversation or draft workflow. Google API data and derived data remain subject to the Limited Use restrictions in every model-facing workflow. We require an appropriate user-facing purpose, user authorization and compatible provider handling terms before enabling those transfers.

Storage and retention

We keep connected-account identifiers, authorization credentials, synchronization identifiers and the imported records needed for the features described above. Mailbox attachments are stored as private application files.

• Connections and credentials: retained while the connection is used. Disconnect controls clear saved credentials or remove the relevant connection as implemented by that integration. Support can handle a request concerning remaining connection or sign-in-link records.
• Imported messages, contacts, attachments, tasks, knowledge and mappings: retained while the workspace keeps and uses those records, until an applicable product deletion or a verified deletion request is completed. This includes imported Drive article versions, chunks and semantic-index representations and Google Chat conversation copies. Disconnecting or removing a source alone does not necessarily delete these copies. The initial Gmail query’s 30-day window is not a retention limit for imported copies.
• Temporary processing records and caches: retained for their processing/cache lifecycle. Where identifiable in a deletion request, we remove them or verify their expiry and prevent pending work from recreating deleted records.
• Security, legal and request-handling records: we retain only the minimum permitted information for a documented security/legal purpose or to record and enforce a deletion request. Applicable DPA/agreement deletion limits continue to apply; a purpose listed here does not create an additional retention exception.

Disconnecting, removing access and requesting deletion

Use an integration’s Disconnect control where available. You can separately review or remove Contact Button’s Google access through your Google Account’s connected-app controls. Removing access does not automatically erase data already imported into Contact Button. Disconnecting also does not automatically delete objects already created in Google, such as Contacts, Sheet rows, drafts, events or tasks.

Send privacy, access or deletion requests to support@contactbutton.com. Include enough information to identify your Contact Button account/workspace and the integration or records concerned. Do not send passwords, access tokens or unnecessary message contents. We verify identity and authority before acting; for a shared workspace, we also establish the customer’s instructions and the affected scope.

Our service target is to acknowledge the request within three business days. For Customer Personal Data covered by the DPA, section 9 requires deletion of active-account data within seven days of a valid deletion request, subject to its applicable-law retention provision. For other data, we aim to complete active-system deletion within 30 calendar days after identity, authority and scope are confirmed, only where no shorter contractual or legal deadline applies.

We explain any information that must be retained and the applicable reason. A progress update or revised action date does not extend a binding deadline. Acknowledgment and internal verification procedures do not postpone an already-valid request or reduce your existing rights.

Deletion from Contact Button does not by itself erase copies held by Google, another authorized recipient, or a workspace operator’s independent export. We identify relevant recipients and handling steps when responding; we do not promise deletion from systems we do not control.

Backups and recovery copies

Existing backups or snapshots can contain information deleted from active systems. For Customer Personal Data covered by the DPA, section 9’s up-to-14-day backup retention limit controls, with protected copies excluded from other processing. Different routine rotations or manual-snapshot schedules do not extend that limit. Other recovery copies remain subject to their applicable contractual and legal deadlines.

If a backup is restored, completed deletion requests must be reapplied before the restored data is returned to ordinary service. We keep only the permitted minimum deletion-control record needed to do that. Any unresolved recovery-copy issue is subject to remediation under the controlling obligation; reporting its status does not change that obligation or establish that every copy has already been erased.

Changes and Google verification

We update this disclosure and provide the required notice and consent before introducing a new Google-data use or purpose. Publishing this policy does not mean Google has verified the application, approved its scopes or completed a security assessment. Those are separate processes.

Questions and requests: support@contactbutton.com.