Last updated September 1, 2026
This Privacy Policy explains how LATO Tec Inc. (“LATO,” “we,” “us,” or “our”) handles personal data when you use the LATO platform, take part in a LATO research interview, are contacted by us about research participation, or visit our website. It should be read together with our Terms of Service, which govern use of the platform.
Contact: legal@latolabs.io | LATO Tec Inc., 251 Little Falls Drive, Wilmington, DE 19808, United States
LATO Tec Inc. is a Delaware corporation. LATO is an AI research platform for investors (venture capital, growth equity, and private equity firms). Customers create “studies” in which AI agents conduct voice interviews with human experts and customers, analyze documents, and produce commercial due diligence reports. The LATO Excel add-in, an AI assistant for financial models and spreadsheets, is part of the platform.
Our role. For most of the data described in this policy (customer account data, interview participant data, research outreach data, and website analytics), LATO decides how and why the data is processed and acts as a “controller” under the GDPR. For content that customers bring into their workspaces (uploaded documents, chat content, and data from connected third-party tools), we act as a “processor” on the customer’s documented instructions. Where we act as processor, the customer’s own privacy notices govern that data, and requests concerning it should be directed to the customer; we will assist them in responding.
We collect the following types of data:
Personal data. This is information that identifies, relates to, or describes, directly or indirectly, a person as an individual, such as name, email address, telephone number, payment information, etc. The types and categories of personal data we collect or process include: account and contact information (including name, address, email address, and other contact information you provide us); payment information and account history (including information about your subscription, account, transactions, purchases, order history, or discounts); voice recordings; and device information (including your IP address, device identifiers, operating system and version, and browser type).
Statistics or aggregated information. Statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal data. For example, we may aggregate personal data to calculate the percentage of users accessing a specific LATO service or feature.
Technical information. Technical information includes information about your internet connection and usage details about your interactions with LATO, such as clickstream information to, through, and from our services (including date and time), products that you view or search for, page response times, download errors, length of your visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from a page.
We collect information from the following types of users:
Before contacting potential interview participants, we collect professional profile data from public sources and partners: LinkedIn profile data (name, title, profile URL), candidate profiles provided by expert networks, and enrichment data (such as role, company, and contact details) obtained through Clay. We also keep records of who was screened and contacted. Section 5 explains this in detail.
From you. We collect information about you when you interact with our services, such as when you create or update an account, subscribe, participate in surveys, sweepstakes, contests, or promotions, or upload or post content to the services, including reviews and media such as audio recordings.
Automatically through our services. As you navigate through and interact with our services, we may use automatic data collection technologies to collect information that may include personal data. Information collected automatically may include usage details, IP addresses, operating system, and browser type, and information collected through cookies and other tracking technologies, including details of your interactions with our services, such as traffic data, location data, logs, and other communication data, and which resources and features of the services you access and use. Using automatic collection technologies helps us to improve our services and to deliver a better and more personalized experience.
The technology we use for this automatic data collection is cookies. A cookie is a small file placed on your device when you interact with the services. You may refuse to accept or disable cookies by activating the appropriate setting on your browser or device. However, if you select this setting, you may be unable to access certain features of the services. In the EU and UK, analytics cookies are set only after you opt in through our cookie banner (see Section 2.4).
To the extent any of these automated technologies are considered a personal data sale, targeted advertising, or profiling under applicable laws, depending on where you live, you may opt out from use of these automated technologies for such uses through our cookie banner or your browser settings. Please note that some features of the services may be unavailable as a result.
From business partners and service providers. We may receive personal data about you from other sources and combine that with information we collect directly from you. For example, we may obtain information about you from service providers that we engage to perform services on our behalf, such as email platform providers, payment processors, promotions services, analytics, security and anti-fraud services.
We use information that we collect about you or that you provide to us, including any personal data, for the following:
| Purpose | Details | Legal basis (GDPR) |
|---|---|---|
| Providing the service | Operate accounts, workspaces, studies, and the Excel add-in; authenticate sessions, including through enterprise SSO | Contract performance |
| AI processing | Process prompts, documents, and interview content through our AI providers to generate responses, analyses, and reports | Contract performance (customers); consent (participants) |
| Research interviews | Conduct, record, transcribe, and analyze interviews and deliver interview content to the sponsoring customer | Consent |
| Biometric processing | Process your voice as a biometric identifier, in jurisdictions that treat a voice recording as biometric data | Consent |
| Participant recruiting | Identify, screen, and contact potential interview participants | Legitimate interest (finding relevant experts); you may object at any time |
| Incentive payouts | Pay incentives to direct-outreach participants through our payment provider | Contract performance |
| Support and operations | Respond to support requests; access customer workspaces for support and study operations (every access is recorded in an immutable audit log) | Contract performance; legitimate interest (service operations) |
| Analytics | Measure website and product usage to improve the product | Consent (EU/UK cookie banner); legitimate interest elsewhere |
| Debugging and reliability | Use error logs and performance data to fix issues and improve stability | Legitimate interest (service reliability) |
| Security | Access controls, audit logging, and abuse prevention | Legitimate interest (protecting the service) |
| Legal compliance | Meet regulatory requirements and respond to legal requests | Legal obligation |
Providing your account information is necessary to use the service as a customer. If you do not provide it, we cannot create your account or deliver the service.
This section applies to you if you take part in a LATO research interview. A short-form version of this information is shown on the consent screen before every interview.
Interviews are browser-based and are conducted by an AI voice agent, not a human interviewer. You will always be told that you are speaking with an AI system before the interview begins. Interviews can take place in any country and any language.
The voice interview runs on infrastructure operated by a third-party voice-AI infrastructure provider, which processes the interview audio and transcripts and retains them under its own terms. Recording takes place on LATO’s own platform for every interview, regardless of recruiting channel, and audio does not reach the network or panel that referred you. Separately, LATO stores its own copy of the recording, the full transcript, the AI-generated summary and analysis, your screener answers, and your short bio.
Before every interview, you are asked to confirm through consent checkboxes that you agree to: (a) being interviewed by an AI agent; (b) the interview being recorded; (c) the interview being transcribed; and (d) the interview content being shared with the sponsoring customer. Your consent is logged with a timestamp. We design our consent process, including obtaining express consent from every participant before recording, to satisfy one-party and all-party recording-consent requirements in the jurisdictions where we operate interviews.
You can withdraw your consent or request deletion of your interview data at any time by emailing legal@latolabs.io (see Section 7). Withdrawal does not affect processing that took place before you withdrew.
Studies are blinded: you are not told which investor is sponsoring the study, and the sponsoring customer is not shown your name (unless you have explicitly consented to the disclosure of your name) or contact details. Customers see interview content (quotes, transcripts, and recordings) and your professional title and employer, but not participant identities. Participants who join through a public interview link can remain effectively anonymous even to us. If we ever propose to share participant identities with customers, we would do so only with your separate, explicit consent given in advance.
Whether your name is disclosed to the sponsoring customer depends on how you were recruited. For direct-outreach experts, your name is shared under the standing name-disclosure consent you gave in the Expert Interview Agreement, unless and until you withdraw it. For every other channel, we disclose your name only if you personally checked the name-disclosure box on the consent screen before your interview, and only where that channel’s own terms do not prohibit the disclosure; where no such consent exists, we do not disclose your name to the sponsoring customer.
Interview content, including quotes, transcript excerpts, and recordings, is incorporated into research reports delivered to the customer sponsoring the study.
If you receive an outreach message from us on LinkedIn or by email, it is because we identified you as a potential expert for a research study. This section is the notice required by Article 14 of the GDPR for data we did not collect from you directly.
We provide this information no later than our first message to you, and in any event within one month of collecting your data. You can object at any time by replying to our message or emailing legal@latolabs.io; we will stop processing your data, and delete our own copies of that data without undue delay, consistent with Section 7.
We do not sell personal data, and we do not share it for cross-context behavioral advertising.
| Data | Storage | Retention |
|---|---|---|
| Account information | LATO database (EU) | While your account is active |
| Workspace content and conversation history | LATO database (EU) | While your account is active, or until it is deleted at your request |
| Interview recordings, transcripts, and analyses | LATO database (EU) | For the life of the related study and thereafter until deletion is requested |
| Consent records | LATO database (EU) | For as long as the related interview content is retained, plus applicable limitation periods, as evidence of consent |
| Research outreach (prospect) data | LATO database (EU) | 12 months after last contact if you do not take part in a study, or earlier if you object |
| Analytics events | Analytics provider (EU) | Per our analytics provider’s retention schedule |
You can delete study and analysis chats directly in the product, which removes the chat and its messages, and archive other conversations from your workspace view.
For conversation deletion beyond that, and for everything else, including full account deletion and deletion of interview or outreach data, email legal@latolabs.io. Deletion is performed manually by our team on request; we act without undue delay and confirm once deletion of our own copies is complete. Where an expert network, survey panel, or other sourcing partner or subprocessor (see Section 8) holds its own copy of your data under its own terms, we will also forward your deletion request to that party. Deletion does not undo delivery of a finished study to the customer that sponsored it.
We share data with the following categories of service providers, solely to operate the LATO service:
The current list of these providers by name, with the data each receives, where it processes it, how long it retains it, and its security attestations, is published at latolabs.io/security/subprocessors. We update that page at least 30 days before adding or replacing a provider.
Customer-connected integrations. In addition, data flows to and from services that you or your organization choose to connect: Gmail, Microsoft 365, Slack, Affinity, Harmonic, and Granola. We process data from those accounts on your instructions, within the scope you authorize.
Recruiting partners. Participant data is exchanged with the expert networks and survey panels described in Section 4 to run interviews and handle compensation. These partners act under their own terms for the compensation they provide.
All service providers acting on our behalf are bound by data processing agreements.
Our servers and database are hosted in the European Union. Where data is transferred to providers in the United States, including our AI providers, the transfer takes place under Standard Contractual Clauses included in the provider’s data processing agreement and, where the provider is certified, the EU-U.S. Data Privacy Framework. You can request a copy of the relevant safeguards by contacting legal@latolabs.io.
We use commercially reasonable administrative, physical, and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. In particular we use the following methods:
However, no website, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with LATO.
If you are located in the EU, UK, or a similar jurisdiction, you have the following rights with regard to your data:
Depending on your state, you may have the right to know what personal data we hold about you, to access, correct, or delete it, and to opt out of the sale of personal data, the sharing of personal data for targeted advertising, and certain profiling. We do not sell personal data and do not share it for targeted advertising. We will not discriminate against you for exercising your rights, and where state law provides an appeal right, you may appeal a decision by replying to our response.
To exercise any right, email legal@latolabs.io. We may need to verify your identity before acting on a request. We will respond to rights requests within the time required by applicable law. Authorized agents may submit requests on your behalf where permitted by law. If your data is in a customer’s workspace and we act as processor, we will refer your request to that customer and assist them in responding.
LATO is a professional service and is not intended for anyone under 16. We do not knowingly collect data from persons younger than 16. If you believe we have collected such information, please contact us at legal@latolabs.io.
We may update this policy to reflect changes in our practices or legal requirements. We will update the “Last updated” date at the top of this page and, for material changes, give customers and (where practicable) other affected individuals additional notice, for example by email or in the product.
legal@latolabs.io | LATO Tec Inc., 251 Little Falls Drive, Wilmington, DE 19808, United States