Privacy notice
Clear rules for a short conversation.
Lontra helps an organiser collect and analyse answers from invited participants. It is not an anonymous whistleblowing service.
What is collected
We process the organiser’s verified email, invited email addresses, conversation answers, documents participants choose to share, technical security records, and AI usage information. Participants do not create an account.
Who can see answers
The organiser can read individual answers, exports and AI-assisted combined findings. Participants never see each other’s answers. The Lontra team accesses a study only for support the organiser asks for, and every access is logged. Email addresses are never included in AI requests.
Where it is processed
Lontra stores study content on servers hosted by Hostinger. The AI that conducts and analyses the conversations is Gemini on Google Cloud (Vertex AI), in the region chosen for each study: Europe (Belgium) or the United States (Iowa). There is no fallback to another AI provider or region.
Retention and deletion
Studies on the Free plan are deleted 90 days after they start. On a paid plan, the organiser chooses how long each study is kept: 30 days, 90 days, 1 year or up to 2 years, and can change it later. The date is shown to participants before they take part. On that date the answers, findings and shared documents are deleted. You can export your findings at any time, for free. Participants can stop at any time and ask for their answers to be deleted.
Shared documents and screenshots
Participants may share documents or screenshots during a conversation. Screenshots are re-encoded on our servers, which removes hidden information such as location data, and are stored outside the public website. The AI reads them in the study’s AI region to write a short summary. Only the organiser of the study can open them, and a participant can remove a file until the end of the conversation.
Follow-ups in Deep Study
If a study uses Deep Study, a participant may get one or two short follow-up questions. Every follow-up email has a link to stop them.
Optional voice typing
Dictation uses speech recognition supplied by your browser. Depending on the browser, audio may be processed by its speech service. Lontra receives your editable text only when you submit it; this feature does not upload an audio recording to Lontra. You can always type instead.
Optional analytics
We use PostHog (hosted in the United States) and, on the public pages, Google Analytics. Until you choose “Allow analytics” we keep only anonymous, cookie-free counts of pages and actions in PostHog, tied to your current visit and nothing else. If you allow analytics, PostHog stores a first-party identifier in your browser, signed-in organisers are recognised across visits, Google Analytics receives public page visits, campaign information, pricing clicks and question-submission events, and an anonymised recording of how organiser screens are used may be kept: IP addresses are discarded, every text field is masked and interview excerpts are hidden. Research questions, email addresses, interview answers, documents and private invitation links are never sent to analytics. The pages where participants read, consent and answer are never measured or recorded, and your browser’s “Do Not Track” setting disables PostHog entirely. Analytics cookies expire after 90 days; your choice is remembered for 180 days. Use “Analytics preferences” at the bottom of a page to change it.
Essential cookies
The service uses cookies needed to keep your session secure and, for participants, to continue a personal conversation. There are no advertising cookies. The first-use checkbox records that this notice was shown; it is not a general consent to every data-processing activity.
Companies that help us
- Hostinger: hosting of the application and its database
- Google Cloud, Gemini on Vertex AI: the AI, in the region chosen for each study
- Postmark: emails
- Stripe: payments (we never see your card)
- PostHog, United States: product analytics on organiser pages, with consent
- Google Analytics: public pages, with consent
Until our move to Google Cloud is complete, AI requests are routed to Gemini through OpenRouter.
The service is operated by Lontra. For access or deletion requests, email hello@lontra.ai.
Beta legal notice. This page describes how the product works, but the operator’s full legal notice is not yet complete.