Privacy
Privacy notice
This notice explains what personal data we collect through this website, why we hold it, how long we keep it, and what you can ask us to do with it.
Who this notice is from
LETO AI LTD, company number 17539196, operates LETO and is the data controller for the personal data described here. This notice covers this website only. Where you use the LETO application under an agreement with us, the terms of that agreement and its own privacy terms apply instead.
For anything in this notice, write to privacy@aicuk.ltd, or to hello@leto.ai if your question is about the product.
Operator and data controller
LETO is operated by LETO AI LTD, company number 17539196. LETO AI LTD is the data controller for the personal data described in this notice. The AIC Professional Services UK Ltd address, VAT and ICO details retained below belong to AIC, not LETO AI LTD, and do not establish LETO AI LTD’s registration status.
LETO AI LTD
17539196
AIC registered address
167-169 Great Portland Street, Fifth Floor, London, W1W 5PF
AIC ICO registration
ZC009289, registered 8 October 2025, Tier 1, renewable 7 October 2026
AIC VAT number
GB347679743
Privacy contact
privacy@aicuk.ltd, or hello@leto.ai for product questions
24 October 2026
What we collect
We only collect what you give us and what a web server necessarily sees:
Details you type into a form: your name, work email address, agency or company name, the subject of your enquiry and your message.
Anything you choose to tell us when arranging a demonstration, such as the size of your portfolio or the systems you use.
Technical data created by visiting the site: your IP address, browser and device type, the pages you viewed and the time you viewed them.
Your record of consent where you tick a box.
We do not ask for special category data, and you should not send it to us through this website.
Why we hold it, and on what basis
Under the UK General Data Protection Regulation we must have a lawful basis for each use. Ours are:
To reply to your enquiry and arrange a demonstration: legitimate interests. You asked us a question and we need your details to answer it.
To send you product updates or marketing: consent. We only do this if you have asked us to, and you can stop it at any time.
To keep the site working, secure and free of abuse: legitimate interests.
To meet our own legal and accounting obligations: legal obligation.
We do not sell your details, and we do not add you to a marketing list because you asked for a demonstration.
Who else sees it
We use a small number of suppliers to run the site and handle messages. They act on our instructions under a written agreement and may not use your data for their own purposes. They fall into these categories:
Website hosting and content delivery, which serves these pages to your browser.
Form delivery and email, which passes your enquiry to our inbox.
Site measurement, which tells us which pages are read and how people arrive.
Some of these suppliers operate outside the United Kingdom. Where data leaves the UK we rely on the UK International Data Transfer Addendum or an adequacy decision. Ask us and we will tell you which suppliers we currently use and where they are based.
Automated processing and decision-making
LETO uses automated processing to read reports submitted by residents, assess what the issue appears to be, set a priority, request approval from a landlord, notify a contractor and raise administrative tasks. These steps are taken by software without a person reviewing each one first.
Your agency decides which of these steps may run without a person approving them. Every automated action is recorded against the case together with the reasoning behind it, so it can be reviewed, explained and corrected. Automated processing is not used to make decisions about a person’s legal rights, tenancy outcome or liability; those decisions are made by your agency.
If an automated step has affected you, you can ask for a person to review it and for an explanation of how the outcome was reached. Contact us using the details above, or contact the agency that manages your property.
To be confirmed before launch
The named providers used for automated evaluation, the countries in which that processing takes place, and whether any content is retained or used to improve a model, are still being confirmed. They will be listed here and in the sub-processor list before this notice is relied upon.
How long we keep it
Enquiries that do not lead anywhere: two years from your last message, then deleted.
Enquiries that lead to an agreement: for the life of the agreement and six years afterwards, to meet accounting and limitation requirements.
Marketing consent: until you withdraw it, plus a record of the withdrawal so we do not contact you again by mistake.
Site measurement data: aggregated and no longer linked to you after twelve months.
What you can ask us to do
You have the right to:
See a copy of the personal data we hold about you.
Have inaccurate data corrected.
Have it deleted, where we have no continuing reason to hold it.
Restrict or object to how we use it, including objecting to our legitimate interests.
Receive it in a portable format, where you gave it to us under consent.
Withdraw consent at any time, without having to explain why.
Write to privacy@aicuk.ltd and we will respond within one month. We may ask you to verify your identity first. There is no charge for a reasonable request.
Cookies
Cookies and similar technologies are covered separately in our cookie notice, which lists what is set and what each one does.
If you are not satisfied
Please raise it with us at privacy@aicuk.ltd first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk.
Changes to this notice
If we change how we use personal data we will update this page and, where the change is significant, tell anyone affected directly. The current version is dated 24 October 2026 and supersedes any earlier version.