Privacy Policy

1. Introduction & Scope

Welcome to LetsMes ("we," "our," or "us"). We are an independent software studio based in Ho Chi Minh City, Vietnam. This Privacy Policy describes how we collect, use, and safeguard your information when you visit our organization website (letsmes.com) or contact us regarding our services.

This policy applies exclusively to the letsmes.com marketing website and our studio-level client engagements. It does not cover our individual software products. Each product we build and operate has its own dedicated Privacy Policy tailored to the specific data, technologies, and integrations that product uses.

2. Product-Specific Privacy Policies

If you are a user of one of our products, please refer to that product's own Privacy Policy:

• MyJob Agent: myjob.letsmes.com/privacy

As we launch new products, their respective privacy policies will be linked here.

3. Information We Collect on This Website

When you visit letsmes.com or reach out to us, we only collect:

• Contact Information: Your name, email address, and message when you voluntarily submit our contact form, processed via Formspree.
• Anonymous Analytics: We use Cloudflare Web Analytics — a privacy-first, cookie-less analytics tool — to understand general website traffic patterns. No personally identifiable information is collected.

4. How We Use Your Information & Legal Basis

We process your data under the following lawful bases (GDPR-compliant):

• Consent: When you voluntarily submit our contact form.
• Legitimate Interests: To operate and improve the security and performance of this website.
• Contractual Necessity: To communicate and deliver on consulting or development engagements. Project-level data handling is governed by individual NDAs and Master Service Agreements (MSAs).

5. Sub-Processors & Data Sharing

We do not sell your personal data. We use the following sub-processors strictly to operate this website. All vendors are bound by Data Processing Agreements (DPAs) or equivalent contractual obligations:

• Formspree — Contact form processing
• Amazon Web Services (AWS) — Website hosting via S3 & CloudFront
• Cloudflare — CDN, DDoS protection, and anonymous analytics

We may disclose information if required to comply with applicable law or valid legal process.

6. Data Retention

• Website inquiries: Contact form submissions are retained for 12 months. If no business relationship is formed, data is securely deleted.
• Client project data: Retained for the duration of the MSA/SOW plus 5 years post-termination to satisfy statutory accounting and tax obligations.

7. Data Breach Notification

In the event of a data breach posing a high risk to your rights and freedoms, we commit to notifying the relevant supervisory authorities and affected individuals within 72 hours of becoming aware, in accordance with GDPR Article 33.

8. Your Rights

Depending on your jurisdiction (including EU/EEA under GDPR), you have the right to:

• Access & Portability: Request a copy of any personal data we hold about you.
• Rectification: Correct any inaccurate data.
• Erasure: Request deletion of your personal data.
• Restriction & Objection: Restrict or object to our processing of your data.

To exercise any of these rights, contact us via our contact form. We will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by the "Last Updated" date above.

10. Contact Us

For any privacy-related questions or to exercise your data rights, please reach out via our contact form.