Privacy Policy

1. Information we collect

Account information

When you create an account, we collect your name, email address, and profile information through our authentication provider (Clerk).

Onboarding information

During onboarding, we may collect your role, field of work, use case, team size, data modalities of interest, and how you heard about us.

Payment information

If you subscribe to a paid plan, payment information (such as card details and billing address) is collected and processed by Stripe. We do not store your full payment card details on our servers.

Datasets and analysis data

When you use Discovery Engine, we store the datasets you upload, along with metadata (file name, size, column names, data types) and the analysis results generated by the Service.

Usage and technical data

We collect information about how you interact with the Service, including pages visited, features used, IP address, browser type, device information, and referring URLs. This is collected through Google Analytics and Microsoft Clarity.

2. How we use your information

We use your information to:

• Provide, maintain, and improve the Service
• Process your datasets and generate analysis results
• Process payments and manage subscriptions
• Send transactional emails (account confirmation, password resets, analysis completion notifications)
• Send product updates and marketing communications (you can unsubscribe at any time)
• Monitor and analyze usage trends to improve the Service
• Detect and prevent fraud, abuse, and security incidents

3. How we share your information

We do not sell your personal information. We share information with the following categories of third-party service providers who process data on our behalf:

• Authentication providers — to manage user accounts and sign-in (name, email, profile)
• Payment processors — to handle subscriptions and billing (email, payment details)
• Cloud infrastructure and hosting — to store datasets, run analyses, and serve the application
• AI service providers — to generate pattern descriptions and literature context (dataset summaries and findings, not raw data)
• Email delivery services — to send transactional and marketing emails (name, email)
• Analytics and monitoring — to understand usage patterns, improve the Service, and track errors (usage data, IP address)

We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights, safety, or property of Leap Labs, our users, or the public.

4. AI processing

Discovery Engine uses machine learning models to analyze your datasets. To generate human-readable descriptions and literature context, we share dataset summaries and pattern findings (not raw data rows) with third-party AI providers (Anthropic and Perplexity). These providers process data under their respective data processing terms and do not use your data to train their models.

5. Data retention

We retain your account information for as long as your account is active. Private datasets and analysis results are retained until you delete them or your account is terminated. After account deletion, private data may be retained for up to 90 days to comply with legal obligations, after which it will be deleted.

Public datasets and their results are retained indefinitely as part of the shared Discovery Engine community resource, even after account termination. Payment records are retained as required by tax and accounting regulations.

6. Data security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information and datasets
• Portability: Request your data in a portable format
• Opt out of marketing: Unsubscribe from marketing emails at any time

To exercise these rights, contact us at support@leap-labs.com. We will respond within 30 days.

8. International transfers

Your information is processed and stored in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

9. Children's privacy

The Service is not directed at children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Effective date" at the top indicates when this policy was last revised.

11. Cookies

We use cookies and similar technologies for authentication, analytics, and functionality. For details, see our Cookie Policy.

12. Contact

If you have questions about this Privacy Policy, contact us at:

Leap Laboratories Inc.
Email: support@leap-labs.com