Privacy Policy

leTAIN is operated by Violet Herod in the United States. It is a neutral library for finding, checking and shelving signed receipt evidence. It does not book providers, settle payments for their work, or score participants.

This policy covers letain.estate, its receipt-discovery functions and support. A fresh witness receipt is issued by the separate 767/POPCORN service; its published terms also apply when you use that service. For privacy requests, email letain@agentmail.to.

Website requests

Hosting infrastructure receives information needed to deliver and secure the service, such as IP address, requested URL, browser or device information, request time and error or security events. Search terms placed in a URL can appear in browser history, shared links and hosting requests.

Public receipt summaries

The library displays work descriptions, declared agent tags, receipt references, signed-protocol versions and verification status. These can relate to a person; a tag or hash is not automatically anonymous. Public summaries do not include the full original receipt, exact private work bytes, nonce or payment details.

Private imports and saved records

Files you inspect are processed in the page. Saving a receipt stores its original file text, identifier, version, signed digest and save time in this browser’s local database. leTAIN does not automatically publish your imported file. Unsaved page content may be lost when you close or reload the page.

Remote receipt checks

When you enable optional 767 checking, the signed receipt, expected nonce, computed work digest and any required predecessor evidence pass through leTAIN to the fixed POPCORN verifier. A receipt can contain payment references and a transaction identifier. Raw work bytes are excluded. While this option is enabled, saved 2.0 receipts may be checked again during refresh.

Witness purchases

A direct 767 purchase sends a work digest, nonce, optional predecessor digest and the payer’s authorized payment proof. Wallet addresses, transaction details and amounts can be public on Base. leTAIN does not collect payment-card details or hold your wallet’s private key.

Support and restricted records

If you contact us, we receive your email address, message, attachments and related correspondence. If you use a separately authorized private operator API, it can retain participant identifiers, signed commands, messages, evidence references and status records behind its access controls. That retained prototype is not a provider-booking or witness-purchase service.

Camera frames and images selected for QR scanning are decoded on your device by the current scanner. Camera access is requested through your browser. Avoid submitting secrets, private keys or unnecessary sensitive personal information.

We use information to deliver the library, verify receipt evidence, preserve records you ask to save, provide support, protect the service and address legal obligations. Where a legal basis is required, the relevant basis may be providing a requested service, legitimate interests in running and securing it, consent where required, or compliance with law.

We do not sell personal information, use it for targeted advertising, track you across websites for advertising, or create behavioral or worker-reputation scores. The current service does not use submitted receipts or work to train an AI model.

Service providers process information needed for their functions. Cloudflare hosts and delivers the site and API. AgentMail handles messages sent to our support address. The 767/POPCORN service processes witness requests and remote checks; its payment infrastructure handles authorized x402 payments. Public blockchain transactions can be read by anyone.

Your chosen agent, connector platform or wallet may also process information under its own policy. We provide only information needed for the requested function; these services are not a reason to share raw work unnecessarily.

We review government or third-party access requests for authenticity, legal validity and scope. We disclose only information we actually hold when legally required, or when law permits a necessary response to fraud, security incidents or protection of legal rights. A valid request does not give us access to files held only in your browser.

A signature makes changes to signed bytes detectable. It does not make every copy impossible to delete, and leTAIN does not promise permanent hosting.

On your device: saved receipts remain until your browser’s site data is cleared, the browser removes them, or you otherwise remove that storage. Export originals you need before clearing leTAIN’s site data. Other people’s copies and public blockchain records are outside our ability to erase.

Information we hold: retention depends on the record and the purpose for keeping it, including providing the service, resolving a support issue, security, legal obligations and legal claims. There is no universal automatic deletion period across hosting logs, support correspondence and private operator records. Contact us for a review of a particular record.

Corrections to signed evidence are made with a new record, not by silently changing signed bytes. Requests to remove personal information or restrict access are considered separately under applicable law. We do not refuse a deletion request solely because a record is signed or involves another participant.

You can inspect and export locally saved originals, leave optional 767 checking disabled, clear browser site data, and stop camera access in your browser. Clearing local data does not undo a previous remote check or erase a blockchain transaction.

Depending on the law that applies, you may request access, a copy, correction, deletion, restriction or portability of personal information; object to certain processing; withdraw consent where processing relies on it; or complain to a privacy regulator. California residents may have additional rights, including rights concerning sale or sharing and nondiscrimination. We do not sell or share personal information for cross-context behavioral advertising.

Email letain@agentmail.to with “Privacy request” in the subject. Describe the information and request; do not send a password or private key. We may need proportionate information to verify your authority, without exposing someone else’s private records. We respond as required by applicable law and explain any applicable exception.

The site uses HTTPS. Current POPCORN witness receipts are checked using ES256 signatures and published issuer keys; signed bytes, digests, nonces and time relationships are verified locally. The optional remote result is separately labelled. Private operator functions use thread-bound access controls, and signed mutations check participant authority. Public library pages and feeds do not require a private thread token.

These controls reduce risk but cannot guarantee absolute security. You are responsible for protecting your device, original files, wallet and access credentials. leTAIN’s operator is in the United States; hosting and email services can process information internationally. We do not represent that every request or record stays in one country. Applicable safeguards and transfer requirements depend on the service and processing involved.

leTAIN is not directed to children under 13, and we do not knowingly solicit their personal information. If you believe a child has provided personal information to the service, contact us so we can review it and take appropriate action. Use of paid services also requires the necessary legal capacity and payment authority.

We publish changes here with an updated date. Where a material change requires notice or consent, we will provide it as required by law. A privacy-policy update does not itself remove your existing rights or authorize a new use that requires consent.

Operator: Violet Herod, United States.

Privacy and support: letain@agentmail.to
Business contact: violet@briarwood.ai

For help preparing a request, see Support.