Hero background

Privacy Policy

1. Introduction

Leafine Labs (“we”, “our”, “us”) respects your privacy. This Privacy Policy explains how we collect, use, and protect personal information when you use our websites, applications, and related services (the “Services”).

By using the Services, you acknowledge this Policy and our Terms. For questions, write to privacy@leafine.com.

Effective Date: 16 October 2025

2. Information We Collect

We collect the following categories of data:

Account Information: Name, email, phone, company details, role, and billing contacts.

Usage Data: Logs, events, performance telemetry, product usage, and diagnostics to improve reliability.

Order & Communication Data: Messages, emails, and orders processed through Leafine or connected integrations (e.g., WhatsApp Business Platform, Messenger, Email).

Technical Data: IP address, device and browser type, OS, language, timestamps, and cookies/identifiers.

AI Evaluation Data (optional): Only with explicit consent, sample content for quality evaluation and model improvement using privacy-preserving techniques.

3. How We Use the Information

We use data to:

Provide, operate, and maintain the Services.

Secure accounts, prevent fraud, and investigate incidents.

Improve features, fix bugs, and enhance performance.

Personalize workflows and recommendations.

Comply with legal obligations and enforce our Terms.

We never sell personal data or use it for third-party advertising.

4. Lawful Basis (GDPR)

We process data on the following legal bases: (i) to perform our contract with you; (ii) our legitimate interests in running and improving the Services; (iii) your consent (where required, e.g., certain analytics or marketing); and (iv) compliance with legal obligations.

5. Data Sharing

We do not sell personal data.

We may share limited data with:

Service Providers: (cloud hosting, email delivery, analytics, AI infrastructure) under data processing agreements and strict confidentiality.

Meta Platforms (e.g., WhatsApp/Messenger): only where necessary to deliver business messaging via approved APIs and according to their terms.

Legal Authorities: when required to comply with law, regulation, or valid legal process.

6. Meta & Third-Party Messaging

When you connect WhatsApp Business Platform or Messenger, we process messages and related metadata solely to deliver the conversation, provide support features, and prevent abuse. We do not use this content for ads or profiling unrelated to the Services.

Your use of these integrations must follow Meta's terms and applicable consent/notice rules in your region.

7. International Transfers

Data may be processed in or transferred to countries outside your own (e.g., EU/UK ↔︎ US). We use appropriate safeguards such as Standard Contractual Clauses and technical measures to protect data during transfer.

8. Data Retention

We keep personal data only as long as needed for the purposes above or to meet legal obligations. Typical defaults: account data for the subscription term plus up to 24 months; system logs up to 12 months; support tickets up to 24 months; backups per rolling schedules.

You can request deletion or export at any time (see Section 11).

9. Security

We apply defense-in-depth measures: encryption in transit and at rest, access controls, least-privilege, audit logging, and continuous monitoring. While no system is 100% secure, we work to prevent, detect, and respond to incidents quickly.

10. Cookies & Preferences

We use cookies and similar technologies for authentication, analytics, and product features. You may manage preferences in your browser; some features may not function without required cookies.

11. Your Rights

Depending on your jurisdiction (e.g., GDPR/UK GDPR), you may have rights to:

Access, correct, or delete your personal data.

Object to or restrict certain processing.

Request data portability.

Withdraw consent where processing is based on consent.

Lodge a complaint with your local data protection authority if you believe your rights are infringed.

To exercise rights, contact: privacy@leafine.com

12. Children

Our Services are not directed to children and we do not knowingly collect personal data from anyone under the age required by local law.

13. Updates to This Policy

We may update this Policy from time to time. Changes take effect when posted. The latest version will always display the current Effective Date.

14. Contact

For privacy questions or requests:

Leafine Labs

Cercle des Bureaux Bloc B Bureau 1-1-2, Centre Urbain Nord, El Menzah, Tunis 1082, Tunisia

contact@leafine.com

For security disclosures, please include "Security" in your subject line.