LemiLeap Inc. PRIVACY POLICY

Last Updated: July 2026

LemiLeap Inc. ("Lemi," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, share, and protect your information when you use our marketing operating system for in-house marketing teams at lean B2B companies and related services (collectively, the "Platform").

Please read this Privacy Policy carefully. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to our information practices as described in this Privacy Policy.

1. WHO WE ARE

We are LemiLeap Inc., a Delaware company. Our Platform is the marketing operating system for in-house marketing teams at lean B2B companies. It connects research, strategy, content creation, distribution across owned and paid channels, and pipeline analytics into one workflow, so a small marketing team can run a full marketing function from one place.

2. SCOPE AND APPLICABILITY

This Privacy Policy applies to personal information we collect when you:

Use our Platform and related services
Visit our websites
Communicate with us
Attend our events or webinars
Otherwise interact with us

In some cases, our customers may use the Platform on behalf of their own clients or end users. In those situations, we act as a service provider to our customer, who controls how personal information is collected and used, and their privacy policies will apply to that processing.

3. PERSONAL INFORMATION WE COLLECT

3.1 Information You Provide to Us

Account and Profile Information:

Name and email address
Company name and business information
Business description and industry details
Marketing goals and campaign preferences
Business profile details you choose to share
Content preferences and style guidelines

Communications:

Messages you send us through our Platform
Support requests and feedback
Survey responses and other communications

Payment Information:

We use third-party payment processing services and do not directly store payment card information
Billing address and contact information
Transaction history and subscription details

3.2 Information We Collect Automatically

Usage and Platform Activity:

How you interact with our Platform and features
Campaign creation and management activities
Content generation requests and outputs
Time spent using various Platform features
Usage patterns and preferences

Technical Information:

IP address, browser type, and operating system
Device identifiers and characteristics
Cookies and similar tracking technologies
Log files and error reports
Performance and analytics data

Location Information:

General geographic location based on IP address
Time zone settings for scheduling and automation features

3.3 Information from Third-Party Sources

Business Intelligence and Research:

Publicly available business and industry information used to support specific customer requests
Market research and competitive intelligence data, accessed in service of your queries
Web-based research conducted to fulfill specific Platform requests, not for general AI model training
Industry trends and market analysis data

Third-Party Platform Integrations:

Authentication status and connection information
Data necessary to provide integrated services (with your explicit consent)
Platform-specific information required for campaign execution
Performance and analytics data from connected platforms

4. HOW WE USE YOUR PERSONAL INFORMATION

4.1 Core Platform Services

AI-Powered Marketing Automation:

Generate comprehensive market research and competitive analysis
Create customized marketing strategies and campaign plans
Produce content for various marketing channels and platforms
Develop advertising materials, copy, and creative assets
Provide campaign performance insights and optimization recommendations
Execute automated marketing campaigns and content scheduling

Platform Functionality:

Maintain and secure your account
Process payments and manage subscriptions
Enable integrations with third-party marketing platforms
Store and manage your generated content, campaigns, and data
Provide customer support and technical assistance

4.2 Platform Improvement and Development

We use anonymized, aggregated usage data (not User Content) to analyze how the Platform performs, develop new features, and improve service quality. Consistent with our Terms and Conditions, we do not use User Content to train AI models or the AI models of third-party AI providers.

Service Enhancement:

Analyze anonymized usage patterns to improve Platform performance
Develop new features and capabilities
Optimize Platform reliability and user experience
Conduct research and development for enhanced services
Customize Platform experience based on user preferences

Analytics and Insights:

Monitor Platform performance and reliability
Generate aggregated usage statistics and trends analysis
Improve service quality based on anonymized patterns
Enhance user experience and interface design

4.3 Communication and Marketing

Service Communications:

Send service-related notifications and updates
Provide customer support and technical assistance
Share important Platform changes and new features
Deliver security alerts and account notifications

Marketing Communications (with consent):

Send newsletters and product updates
Share educational content and industry insights
Provide information about new features and services
Invite you to events, webinars, and surveys

All marketing emails include an unsubscribe link, and you may opt out of marketing communications at any time. Opting out of marketing will not affect service-related communications necessary to provide the Platform.

4.4 Legal and Security

Compliance and Protection:

Comply with applicable laws and regulations
Protect against fraud, security threats, and misuse
Enforce our Terms and Conditions
Respond to legal requests and prevent harm
Maintain accurate records for business and legal purposes

4.5 Google Services Data Use

When processing data from Google services (including Google Ads and Google Analytics):

We use Google Ads data exclusively to provide marketing automation services that you have specifically requested
We use Google Analytics data, accessed on a read-only basis through the Google Analytics Admin and Data APIs, solely to display each user's own analytics (such as traffic, acquisition channels, audience, and conversions) within their dashboard; we never create, edit, or delete Analytics data or settings
We do not combine Google Ads or Google Analytics data with other data sources for purposes outside of your direct marketing campaigns and analytics
We do not use Google services data to develop, improve, or train AI models beyond providing your specific requested services
We implement all required Google security measures and data handling requirements
We limit access to Google services data to authorized personnel who need it to provide your services
We do not use Google user data to develop profiles, sell to third parties, or for advertising purposes unrelated to the services requested

LemiLeap's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. HOW WE SHARE YOUR PERSONAL INFORMATION

5.1 Third-Party Service Providers

We engage various service providers to deliver and enhance our Platform:

AI and Technology Services:

Third-party artificial intelligence and machine learning providers
Natural language processing and content generation services
Data analysis and research platforms
Cloud computing and infrastructure providers

Business Operations:

Payment processing and billing services
Customer support and communication platforms
Authentication and security services
Analytics and performance monitoring tools

Marketing and Communications:

Email communication and marketing platforms
Customer relationship management services
Website analytics and optimization tools
Event management and webinar platforms

5.2 Connected Platform Integrations

When you choose to connect third-party marketing platforms:

We access only the minimum information necessary to provide our services
We use secure authentication protocols and do not store platform credentials
We process data according to the permissions you grant
You maintain control over connected integrations and can disconnect them at any time

5.3 Google Services Integration

When you authorize access to Google services (including Google Ads and Google Analytics):

We access your Google Ads and Google Analytics data solely to provide the marketing and analytics services you request
We do not use Google Ads or Google Analytics data for any purpose other than providing those services to you
Google Analytics access is read-only and is used only to display your own analytics back to you within the Platform
We comply with the Google API Services User Data Policy, including the Limited Use requirements, as well as Google's API Terms of Service and data use requirements
We implement Google's required security and data protection standards
You can revoke access to Google services at any time through your account settings or your Google Account

5.4 Legal and Regulatory Requirements

We may disclose your information when required by law or when we believe disclosure is necessary to:

Comply with legal obligations, court orders, or regulatory requirements
Protect our rights, property, safety, or legitimate business interests
Prevent fraud, security threats, or illegal activities
Respond to government requests or law enforcement inquiries
Enforce our agreements and protect against legal liability

Where we receive a government, law enforcement, or other legal request for Customer Data, we will, to the extent we are legally permitted to do so, notify the affected customer before disclosing the data, so that the customer may seek to limit or challenge the request. We will disclose only the minimum information we are legally required to provide.

5.5 Business Transfers

In the event of a merger, acquisition, financing, sale of assets, or other business transaction, your personal information may be transferred as part of that transaction. We will provide notice of any such change in ownership or control of your personal information.

5.6 Sub-Processors

LemiLeap engages sub-processors to provide and support the Platform, including hosting, AI, payment processing, and integration providers. A current list of sub-processors is available upon written request to privacy@lemileap.ai. LemiLeap will provide notice of material changes to its sub-processors via email to active customers. All sub-processors are subject to contractual obligations consistent with the protections described in this Privacy Policy.

6. INTERNATIONAL DATA TRANSFERS

Our Platform operates globally and may transfer your personal information to countries other than where you reside. We ensure appropriate safeguards are in place for international transfers, including:

Standard contractual clauses approved by relevant data protection authorities
Adequacy decisions by regulatory bodies
Data Processing Addendums with appropriate safeguards
Other legally recognized transfer mechanisms as required by applicable law

For transfers from the European Economic Area, we comply with applicable data protection frameworks and ensure adequate levels of protection.

Customers with specific data protection compliance requirements, including under the GDPR, CCPA/CPRA, PIPEDA, Singapore's PDPA, or other applicable frameworks, may request a Data Processing Addendum by contacting privacy@lemileap.ai.

7. DATA RETENTION

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

Account Information: Retained while your account is active and for up to 12 months after account termination to comply with legal and tax obligations
Generated Content and Campaigns: Retained while your account is active and for 30 days after account closure to allow data export, unless deletion is requested earlier
Usage and Analytics Data: Typically retained in anonymized form for up to 3 years for Platform improvement and analytics purposes
Communication Records: Retained as necessary for customer support and legal compliance, typically up to 3 years
Legal and Compliance Records: Retained as required by applicable laws and regulations

When determining retention periods, we consider the purposes for which we collected the information, legal requirements, and our legitimate business interests. You may request earlier deletion of your data as described in Section 8.

8. YOUR PRIVACY RIGHTS

Depending on your location and the data protection laws that apply to you, you may have certain rights regarding your personal information. These laws include, but are not limited to, the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and Singapore's Personal Data Protection Act (PDPA), along with other applicable national, state, or provincial data protection frameworks. The specific rights available to you depend on the laws of your jurisdiction.

8.1 General Rights

Access: Request information about what personal information we have about you and how we use it
Correction: Request correction of inaccurate or incomplete personal information
Deletion: Request deletion of your personal information in certain circumstances
Portability: Request a copy of your personal information in a portable, machine-readable format
Objection: Object to certain types of processing of your personal information
Restriction: Request restriction of processing in certain circumstances
Withdrawal of Consent: Where processing is based on consent, withdraw that consent at any time

8.2 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights including:

Right to Know: What personal information we collect, use, share, and sell
Right to Delete: Request deletion of personal information we have collected
Right to Opt-Out: Opt-out of the sale or sharing of personal information for cross-context behavioral advertising
Right to Correct: Request correction of inaccurate personal information
Right to Limit: Limit the use and disclosure of sensitive personal information
Right to Non-Discrimination: Not receive discriminatory treatment for exercising privacy rights

We do not sell personal information as traditionally defined, but we may share information for business purposes as described in this Privacy Policy.

8.3 European Privacy Rights (GDPR)

If you are in the European Economic Area, UK, or Switzerland, you have additional rights including:

Information about the legal basis for processing your personal information
Right to withdraw consent where processing is based on consent
Right to lodge a complaint with a supervisory authority
Right to object to processing based on legitimate interests
Enhanced rights regarding automated decision-making and profiling

8.4 Canadian Privacy Rights (PIPEDA)

If you are a resident of Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including:

Right to access the personal information we hold about you
Right to request correction of inaccurate personal information
Right to withdraw consent for the collection, use, or disclosure of your personal information, subject to legal and contractual restrictions
Right to lodge a complaint with the Office of the Privacy Commissioner of Canada or your applicable provincial privacy commissioner

8.5 Other Jurisdictions

If you are located in a jurisdiction with its own data protection law, such as Singapore (Personal Data Protection Act), Australia (Privacy Act), Brazil (LGPD), or others, you may have rights under that law, which typically include rights to access, correct, and request deletion of your personal information, to withdraw consent, and to complain to your local data protection authority. We will honor the rights that apply to you under the law of your jurisdiction. Where we process personal information on behalf of a customer (for example, data relating to the customer's own end users), the customer is responsible for that data as its controller, and LemiLeap acts as its processor or data intermediary, as those terms are defined under applicable law.

8.6 Data Processing Addendum

Customers requiring a Data Processing Addendum to meet specific compliance obligations (such as the EU/UK GDPR, the California CCPA/CPRA, Canada's PIPEDA, Singapore's PDPA, or other applicable data protection frameworks) may request one by contacting privacy@lemileap.ai.

9. HOW TO EXERCISE YOUR RIGHTS

To exercise any of your privacy rights, please contact us using the information provided in Section 15. When you contact us, please include:

Your full name and email address associated with your account
A clear description of the right you wish to exercise
Any additional information that may help us process your request

We will respond to your request within the timeframes required by applicable law:

Within 30 days for requests under GDPR, with possible extension as permitted
Within 45 days for requests under CCPA, with possible 45-day extension where necessary
Within 30 days for requests under PIPEDA, with possible extension as permitted
Within a reasonable timeframe for other requests, typically not exceeding 30 days

We may need to verify your identity before processing certain requests to protect your personal information.

10. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to provide, secure, and improve our Platform:

Essential Cookies: Necessary for Platform functionality, security, and user authentication
Analytics Cookies: Help us understand Platform usage and performance
Preference Cookies: Remember your settings, preferences, and customizations
Marketing Cookies: Used to deliver relevant content and advertisements (with your consent where required)

You can manage cookie preferences through your browser settings. However, disabling certain cookies may affect Platform functionality and your user experience.

11. DATA SECURITY

We implement comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

Technical Safeguards:

Encryption of data in transit and at rest
Secure authentication and access controls
Regular security monitoring and threat detection
Secure development practices and code reviews

Administrative Safeguards:

Employee training on data protection and security practices
Access controls based on job responsibilities and need-to-know basis
Regular security policy reviews and updates
Incident response and breach notification procedures

Physical Safeguards:

Secure data centers with controlled access
Environmental controls and monitoring
Secure disposal of hardware and media

11.1 Security Incident Notification

In the event of a security incident affecting your personal information, LemiLeap will notify affected users without undue delay after becoming aware of the incident, in accordance with applicable law. Notification will include, to the extent known: a description of the nature of the incident, the types of personal information affected, the steps we are taking to address the incident, and recommended steps you may take to protect yourself.

While we implement strong security measures, no system is completely secure. We encourage you to protect your account credentials and contact us immediately if you suspect any unauthorized access.

12. CHILDREN'S PRIVACY

Our Platform is designed for business use and is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take prompt steps to delete such information.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the information in Section 15.

13. THIRD-PARTY LINKS AND SERVICES

Our Platform may contain links to third-party websites, applications, or services that are not owned or controlled by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

If you use our Platform on behalf of another person or organization, such as a client, you are responsible for ensuring that you have the necessary permissions and legal basis to provide their personal information and to act on their behalf.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

Post the updated Privacy Policy on our Platform
Update the "Last Updated" date
Provide prominent notice for material changes
Send email notifications for significant changes that may affect your rights

Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

15. CONTACT INFORMATION

For questions about this Privacy Policy, our privacy practices, or to exercise your privacy rights, please contact us at:

Email: privacy@lemileap.ai

For technical support, please contact: support@lemileap.ai

We are committed to working with you to resolve any privacy concerns or questions you may have about our data practices.

This Privacy Policy was last updated on July 2026. You can request access to previous versions by contacting us using the information above.

Privacy Policy