Leen

Privacy Policy

Last updated: October 6, 2026

This policy explains what data Leen (leen.so) collects, how we use it, and the choices you have.

1. Data we collect

  • Account data — name, email, and authentication identifiers, managed through our sign-in provider (Clerk).
  • Workspace content — documents you upload, agents and workflows you create, chat messages, run inputs and outputs, and memories the copilot stores at your direction.
  • Connected-account data — when you connect an integration (Google, Slack, GitHub), we store encrypted OAuth tokens and access only what the workflows you configure require.
  • Usage and diagnostics — request logs, token/cost usage records, and error reports needed to operate and secure the Service.

2. How we use it

We use your data solely to provide the Service: generating AI responses, executing the workflows you configure, enforcing usage limits, billing, support, and security. We do not sell your data and we do not use your content to train AI models.

3. Google user data (Gmail and Google Sheets)

When you connect a Google account, Leen asks only for the permissions below. You choose whether to connect, and you can disconnect at any time.

  • Your name, email address and profile — to show which Google account is connected.
  • Send email (Gmail) — to send the emails you or your workflows ask Leen to send, such as payment reminders and follow-ups, from your own Gmail address. Leen does not send email you have not set up or approved.
  • Read email (Gmail, read-only) — to read incoming messages, including their content and attachments, so Leen can recognise replies to emails it sent for you, invoices and new customer enquiries, and show them to you in your workspace. Leen cannot delete your email, change labels, create drafts or change your Gmail settings.
  • Google Sheets — only if you connect Google Sheets, to read and update the spreadsheets your workflows use.

We store your Google access tokens encrypted, and we store the email and spreadsheet data Leen needs to run the features above inside your workspace only. Parts of a message may be sent to our AI providers (listed below) to understand it, for example to tell whether a reply says an invoice has been paid; those providers do not use it to train their models.

Limited Use.Leen's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide and improve the user-facing features described above; we do not use it for advertising; we do not sell it; we do not use it to train general AI or machine-learning models; and no person at Leen reads it unless you ask us to (for example, for support), it is needed for security or to comply with the law.

Disconnecting and deletion. You can disconnect Google at any time from Connected Apps in Leen, or from your Google Account at myaccount.google.com/permissions. When you disconnect, Leen stops reading and sending email immediately, and we delete the Google data we stored for you within 30 days, except records we must keep for legal or billing reasons. You can also ask us to delete it sooner by writing to info@leen.so.

4. Subprocessors

Your data is processed by these providers on our behalf:

  • OpenAI and Anthropic — LLM inference (prompts and relevant workspace context are sent to generate responses)
  • Clerk — authentication and user management
  • Neon — Postgres database hosting
  • Amazon Web Services (S3) — file storage
  • Railway — backend hosting
  • Vercel — web application hosting
  • Sentry — error monitoring

5. Security

Workspaces are strictly isolated from one another. OAuth credentials and sensitive content are encrypted at rest; traffic is encrypted in transit. Access to production systems is restricted and logged.

6. Retention and deletion

Content stays in your workspace until you delete it. Conversation replay events are pruned automatically (30 days by default). When you delete your account, we delete workspace content within 30 days, except records we must keep for legal or billing reasons.

7. Your rights

You can access, correct, export, or delete your data. Depending on your jurisdiction (e.g. GDPR, CCPA) you may have additional rights. Contact info@leen.so and we will respond within 30 days.

8. Changes

We will announce material changes to this policy in the product or by email before they take effect.

9. Contact

Privacy questions: info@leen.so.