Privacy Policy

Account information. When you sign up with email, Google, or Microsoft we receive your email address, display name, and (when provided by the SSO provider) profile photo. Passwords are handled by our authentication provider; we never see or store them.

Business profile. During onboarding you tell us about your business — name, type, industry, optional location, phone, website, goal, tone, and any notes you choose to add. These details are used to ground content the AI tools generate for you.

Generated content + prompts. Prompts you submit, the videos / images / ad copy returned by our AI providers, the format presets you pick, reference images you upload, and the products and avatars you save are stored under your account.

Knowledge Base. Files and URLs you upload to your Knowledge Base, plus the extracted text we use to ground your generations.

Payment information. Billing is handled by Stripe. We never see or store your full card number; we only retain the Stripe customer / subscription identifiers, the last four digits of your card (as provided by Stripe), and the credit balance we maintain on your account.

Usage data. Basic server-side records of which features you use (e.g. which tool ran a generation, when, how many credits it cost). Used to compute credit balances, troubleshoot issues, and improve the product.

Support communications. When you file a support ticket from inside the app, the subject + message + page URL you were on are stored with your account and emailed to our support inbox.

To create and operate your account.

To run the AI tools you invoke — sending your prompts, business profile, Knowledge Base context, and reference images to our AI providers so they can generate the content you requested.

To process payments, manage your subscription, top up credits, and calculate overage charges where you have enabled them.

To send transactional emails — account confirmation, password resets, team invitations, support replies, and billing notifications.

To enforce per-user rate limits, prevent abuse, detect fraud, and maintain the security of the service.

To improve Leapify — diagnose bugs, measure usage of features, and prioritize what to build next.

To comply with legal obligations and respond to lawful requests from authorities.

We do not sell your personal information. We share it only with service providers who help us run Leapify, under contracts that limit them to the purposes we ask of them:

• Supabase — authentication, database, and file storage for your account and generated content.
• Vercel — application hosting and serverless functions that serve every request.
• Stripe — payment processing, subscription management, and storing your payment method.
• OpenAI — generating ad copy, scripts, and writing assistance from your prompts and business context.
• fal.ai (Seedance + Nano Banana Pro) — generating videos and images from your prompts and reference images.
• Resend — sending transactional emails (auth, invites, support, billing notifications).
• Upstash Redis — short-lived caches for rate limiting and duplicate-submit protection.
• Google (Places API) — looking up local business information when you use the onboarding business search.
• Google Analytics — usage analytics. Sets cookies in your browser to measure traffic and feature usage in aggregate.
• Meta (Facebook) Pixel — advertising attribution so we can measure which campaigns lead to sign-ups. Sets cookies in your browser; fires page-view + sign-up events.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of Leapify, our users, or others.

If Leapify is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you and the receiving party will be bound by this policy or an equivalent one.

When you invite teammates to your account, they share access to your business profile, Knowledge Base, library of generated content, products, avatars, projects, and credit balance. Team members inherit the permissions of the role you assign them.

Members can see your business details, your generated content, and activity within the account, but they cannot see your card details and (unless granted the relevant role) cannot change billing.

We keep your information for as long as your account is active. You can permanently delete your account at any time from Settings → Danger Zone. Deleting your account immediately removes your business profile, generated content, Knowledge Base entries, products, avatars, projects, team memberships, and subscription record, and cancels any active Stripe subscription.

Some information may be retained for a limited period after deletion when required by law or to comply with our tax, accounting, or legal obligations (for example, Stripe retains payment records on its own schedule).

Depending on where you live, you may have rights under data protection laws including the right to access, correct, export, restrict the use of, or delete your personal information.

You can exercise the most common of these rights directly from your account: edit your profile and business details in Settings, manage your team in Settings → Team, and permanently delete your account via the Danger Zone.

For any rights request we do not yet support inline, contact us at privacy@leapify.com.

Content generated by Leapify is produced by third-party AI models based on the prompts, reference images, and business context you provide. The output may contain inaccuracies, may not be unique, and may not be appropriate for every use. You are responsible for reviewing and clearing anything you publish or use publicly.

Our AI providers may temporarily process your inputs to generate outputs. We do not use your prompts or generated content to train our own models, and we choose providers that contractually agree not to use API submissions to train their own models, but you should consult each provider’s policy directly if this matters to you.

All traffic between you and Leapify is encrypted over HTTPS. Data is stored in encrypted-at-rest databases and storage buckets provided by Supabase. We use the principle of least privilege for internal access, and never expose service-role credentials to the browser.

No system is perfectly secure. If you believe your account has been compromised, contact us at security@leapify.com immediately.

We use a small number of essential cookies — primarily the authentication session cookie set by Supabase Auth — that are required for the service to function.

We also load Google Analytics and the Meta (Facebook) Pixel, which set their own cookies in your browser. Google Analytics measures traffic and feature usage in aggregate; the Meta Pixel reports page views and the sign-up conversion event so we can attribute ad spend correctly. You can opt out by using browser tracker- blocking, an ad blocker, or by disabling third-party cookies for our domain.

Leapify is operated from the United States and processes data on infrastructure located primarily in the United States. By using the service, you consent to your information being transferred to and processed in the United States, which may have different data protection rules than your country of residence.

Leapify is not directed to children under 13 and we do not knowingly collect information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete the account.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Material changes will also be communicated by email or in-product notice.

For privacy questions, requests, or concerns, contact us at privacy@leapify.com.