1. Introduction

Leemu ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our OKR platform and related services.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, company name, job title
OKR Data: Objectives, key results, progress updates, comments
Communication Data: Messages sent through our platform or integrations
Feedback: Survey responses, support requests, and other communications

2.2 Automatically Collected Information

Usage Data: How you interact with our service, features used, time spent
Device Information: IP address, browser type, operating system
Log Data: Server logs, error reports, performance metrics
Cookies: See our Cookie Policy for detailed information

3. How We Use Your Information

We use the collected information to:

Provide and maintain our OKR platform services
Enable AI-powered features like OKR drafting and insights
Facilitate team collaboration and communication
Generate analytics and reports for your organization
Send notifications and updates about your OKRs
Provide customer support and respond to inquiries
Improve our service and develop new features
Ensure security and prevent fraud
Comply with legal obligations

4. AI and Machine Learning

Leemu uses artificial intelligence to enhance your OKR experience. Our AI features:

Analyze OKR data to provide insights and recommendations
Help draft objectives and key results based on best practices
Generate automated check-in summaries
Surface relevant information and potential blockers

Important: Your data is NOT exposed to external Large Language Models (LLMs) or used for AI training:

Customer data is never sent to third-party AI services for training
We do not use your OKR data to train machine learning models
AI-generated suggestions are created without exposing your data externally
All AI processing is handled securely within our platform

5. Information Sharing and Disclosure

5.1 Within Your Organization

OKR data is shared with team members and stakeholders within your organization according to your permission settings and organizational hierarchy.

5.2 Third-Party Integrations

When you connect Leemu with services like Slack, Microsoft Teams, or Jira, we share relevant OKR updates and notifications as configured by you.

5.3 Service Providers

We may share information with trusted third-party service providers who assist in operating our platform, subject to appropriate data protection agreements.

5.4 Legal Requirements

We may disclose information if required by law, legal process, or to protect the rights, property, or safety of Leemu, our users, or others.

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

Encryption in transit and at rest
Regular security assessments and monitoring
Access controls and authentication
SOC 2 compliance (in progress)
Employee training on data protection

7. Data Retention

We retain your information according to the following policies:

Active Accounts: Data is retained for the duration of your subscription
Account Deletion: Upon account deletion request, all personal data is removed within 30 days
OKR Data: Historical OKR data is retained for reporting and analytics during your subscription
System Logs: Retained for 90 days for security and debugging purposes
Backups: Database backups are retained for 30 days

7.1 Data Storage

All Leemu data is stored securely on Google Cloud Platform (GCP):

Database: Cloud SQL PostgreSQL with encryption at rest (AES-256)
Region: US-based data centers (us-central1)
Backups: Automated daily backups with point-in-time recovery

7.2 Data Archival and Removal

You can request data archival or removal at any time:

Data Export: Export your complete OKR data from account settings
Data Deletion: Request complete data deletion by contacting privacy@leemu.io
Right to be Forgotten: We comply with GDPR deletion requests within 30 days

8. Your Rights and Choices

You have the right to:

Access, update, or delete your personal information
Export your OKR data
Opt out of non-essential communications
Manage cookie preferences
Request data portability
Withdraw consent where applicable

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

Leemu is not intended for use by children under 16. We do not knowingly collect personal information from children under 16.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through our service.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Privacy: privacy@leemu.io
Security: security@leemu.io
General: support@leemu.io

For more information about our security practices, please visit our Security page.