Privacy policy
Last updated October 13, 2026
LetsOp is operated by Clerke Technologies Inc. (“we”); subscription payments are collected on our behalf by Fileflow Solutions Inc. This policy explains what personal information we collect through letsop.app and the LetsOp app, why, who helps us handle it, and the choices you have. Questions, requests and complaints go to our privacy contact at contact@letsop.app.
What we collect, and why
Demo requests. When you ask for a demo, we collect your name, work email, company, team size and anything you choose to write. We use it only to arrange and give the demo. We delete it after 12 months, and we don’t add you to a mailing list.
Accounts. To create an account we collect your email address and a password (stored only as a secure hash by our sign-in provider), and, for a company, its name, country and time zone. When someone invites you, we keep the invited email address and your role. We use this to sign you in, run your company’s workspace and keep it secure.
Billing. If your company subscribes, our payment processor collects the card details; we never see or store card numbers. We keep the plan, its status and the processor’s customer and subscription references. Fileflow Solutions Inc. collects the payments on our behalf, so it receives your company’s billing name, email and payment records, and its name is the one on card statements.
What your team enters. Companies use LetsOp to keep their own working information, such as surgeons’ business contact details, facilities, products, preference cards and case schedules. We handle it on your company’s behalf and only to provide LetsOp to that company; your company decides what goes in and is responsible for having the right to put it there.
No patient information. LetsOp is not designed for patient information and has no fields for it. Don’t enter patient names, dates of birth, health or record numbers, or photos of patients. If patient information is entered anyway, tell us and we’ll help remove it.
Technical information. To protect sign-in and our forms from abuse, we briefly use your IP address in rate-limit counters, which are deleted within two days. Our hosting provider keeps standard request logs. We use only the cookies needed to keep you signed in: no advertising or analytics cookies, and no tracking across other sites.
On your device. So the app works without a connection, it keeps a copy of your team’s data in your browser’s storage on your device. Clearing the site’s data in your browser removes it.
Who helps us
We use these service providers, under contracts that limit them to providing their service to us:
- Supabase, for our database and sign-in. Our database is hosted in Canada.
- Vercel, which hosts the website and app. Its servers, which handle your requests on their way to our database, may be outside Canada, including in the United States.
- Stripe, which processes subscription payments.
- Fileflow Solutions Inc., which collects subscription payments on our behalf and receives the billing details that go with them.
Information handled outside Canada is subject to the laws of the country where it is handled, and may be accessible to that country’s courts, law enforcement and national security authorities. We don’t sell personal information, and we don’t share it for advertising.
How long we keep it
- Demo requests: 12 months, then deleted automatically.
- Accounts and company workspaces: while the account is open. Ask us to close yours and we’ll delete it, except what the law requires us to keep.
- Rate-limit counters: deleted within two days.
Keeping it safe
Data travels over encrypted connections. Each company’s information is kept separate in the database, and only people on that company’s team can see it. Access by our own staff is limited to what’s needed to run and support LetsOp.
Your choices
You can ask to see the personal information we hold about you, have it corrected, or withdraw your consent to how we use it (which may mean we can no longer provide the service). Write to contact@letsop.app. We’ll answer within 30 days.
If you’re not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Changes
When we change this policy, we’ll update the date at the top. If a change affects how we use information we already have, we’ll tell affected users before it takes effect.