Privacy & Security

Information about data privacy and security.

Is ListenLayer GDPR Compliant?

Yes. We provide:

• Data Processing Agreement (DPA)

• EU data residency option

• Right to access and delete data

• Consent management integration

Is ListenLayer CCPA Compliant?

Yes. We support:

• Do Not Sell requests

• Data deletion requests

• Privacy policy requirements

Where is data stored?

• Default: US (Google Cloud Platform)

• EU Option: Available for Enterprise plans

How is data encrypted?

• In transit: TLS 1.3

• At rest: AES-256

Who can access my data?

Only:

• Your team members (based on roles)

• ListenLayer support (with your permission)

We never sell or share your data.

Do you use cookies?

By default, ListenLayer uses:

• First-party cookies for visitor identification

• Local storage for session management

Cookieless mode is available.

How do I handle consent?

Integrate with your consent manager:

// After user consents
_ll('consent', 'granted');

// If user declines
_ll('consent', 'denied');

We integrate with:

• OneTrust

• Cookiebot

• TrustArc

• Custom solutions

What about PII?

By default, we:

• Hash email addresses

• Exclude password fields

• Don't capture credit cards

Configure PII handling in Settings > Privacy.

Security Certifications

• SOC 2 Type II (in progress)

• GDPR compliant

• CCPA compliant

Vulnerability Reporting

Found a security issue? Email [email protected].

We participate in responsible disclosure.