Leash ("we," "us," or "our") operates the leash.build platform and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials provided through Google OAuth. We do not store your Google password.

1.2 Application Data

When you deploy applications, we store your application source code (temporarily during builds), deployment configuration, environment variables (encrypted at rest), and application metadata (name, URL, status, timestamps).

1.3 Usage Data

We automatically collect information about how you interact with the Service, including deployment history, API requests, build logs, and error reports. This data is used to operate, maintain, and improve the Service.

1.4 Technical Data

We collect IP addresses, browser type, device information, and request metadata for security monitoring, abuse prevention, and service reliability.

2. How We Use Your Information

To provide, operate, and maintain the Service
To build, deploy, and serve your applications
To authenticate your identity and authorize access
To communicate with you about your account, deployments, and service updates
To monitor and prevent abuse, fraud, and security threats
To enforce our Terms of Service and billing agreements
To improve and develop new features

3. Data Storage and Security

Your data is stored on infrastructure provided by Google Cloud Platform (GCP) in the United States. We implement industry-standard security measures including:

Encryption at rest for all stored data, including environment variables and secrets
Encryption in transit (TLS 1.2+) for all communications
Authentication via JSON Web Tokens (JWT) with secure key management
Secrets stored in Google Cloud Secret Manager with access controls
Isolated container execution for deployed applications
Regular security reviews and dependency updates

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

Infrastructure providers: Google Cloud Platform (compute, storage, networking), Supabase (database, authentication) — as necessary to operate the Service
Payment processors: Stripe — for billing and subscription management. We do not store your payment card details.
Legal requirements: When required by law, regulation, legal process, or enforceable governmental request
Protection of rights: To enforce our agreements, protect our rights, privacy, safety, or property, and that of our users or the public

5. Your Deployed Applications

Applications you deploy on Leash may be publicly accessible depending on your visibility settings. You are responsible for the content and data within your deployed applications. We do not monitor the content of your applications except as necessary for security, abuse prevention, and service operation.

6. Data Retention

We retain your account data for as long as your account is active. When you delete your account or an application, we initiate removal of associated data within 30 days. Build logs and deployment records may be retained for up to 90 days for operational and debugging purposes. Infrastructure resources (containers, storage) are cleaned up through automated nightly processes.

7. Your Rights

You have the right to:

Access your personal data and deployment history
Correct inaccurate information in your account
Delete your account and associated data
Export your application data and configuration
Object to processing of your personal data for certain purposes

To exercise these rights, contact us at privacy@leash.build.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking. We do not participate in FLoC or similar interest-based advertising cohorts.

9. International Transfers

Your data is processed and stored in the United States. If you are accessing the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfer.

10. Children

The Service is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

12. Contact

For questions about this Privacy Policy or our data practices, contact us at:

Leash
Email: privacy@leash.build
Web: https://leash.build