Privacy Policy — Leandre
LeandreLog in to Leandre

Home › Privacy Policy

Privacy Policy

At Leandre, we take the protection of your personal information seriously. This Privacy Policy explains, clearly and transparently, how we collect, use, keep and protect your information when you use the website leandre.ai and the app us.leandre.ai (the “Service”).

It is written for users in the United States and includes the disclosures required by US state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”). By creating an account or using the Service, you confirm that you have read this policy.

1. Who is responsible for your information

The business responsible for the personal information collected through the Service is:

  • Company name: NL MARKETING FZCO
  • Legal form: free zone company (Free Zone Company – FZCO)
  • Registration: Dubai Silicon Oasis Authority (DSOA), United Arab Emirates
  • Registered office: Dubai Silicon Oasis, Dubai, United Arab Emirates
  • Legal representative / Director of publication: Nathan Lewis
  • Contact email: us@leandre.ai

(“Leandre”, “we”, “us” or “our”).

2. The personal information we collect

We only collect the information we need for the purposes described below. Depending on how you use the Service, we process the following categories of personal information. We collect it directly from you, automatically when you use the Service, and from the sign-in and payment providers you choose to use.

2.1 Account and identification information (identifiers)

  • Email address;
  • Name and/or first name, when you provide them or when they are passed to us by your sign-in provider;
  • Login identifier and, where applicable, your Google account identifier when you sign in with Google;
  • Password (where applicable), stored in encrypted / hashed form; we never have access to your password in plain text.

2.2 Payment and subscription information (commercial information)

Payments (Creator, Pro and Elite subscriptions, credit top-ups) are processed by our third-party payment provider. We do not store your full card numbers, which are processed directly by the payment provider and its payment partners. We receive and keep:

  • Your subscription identifier and the plan you have chosen (free, Creator, Pro, Elite);
  • The history and status of your payments (successful, renewed, canceled);
  • Your credit balance and credit history.

2.3 Information about how you use the Service (internet activity)

  • Connection data and technical logs: IP address, browser type, operating system, dates and times of connection, and the approximate location derived from your IP address;
  • Actions taken in the app (product searches, features used, credits spent);
  • Your account preferences and settings.

2.4 Content you create and AI-generated content

The Service relies on artificial intelligence. For this reason, we process:

  • The prompts, instructions, keywords and information you enter to generate content (product research, logos, brand identity, product pages, ad visuals, UGC videos, etc.);
  • The content generated by the AI in response to your requests (text, images, videos), and any material you upload.

Please do not include sensitive personal information, or information about other people, in your prompts unless you have the right to use it. We do not intentionally collect sensitive personal information.

2.5 Communication and support information

  • The content of the messages you send us (support, emails, forms);
  • Where applicable, your choice to receive marketing emails and the history of emails sent to you (opens, clicks), to measure how well they work.

3. How we use your information

We use your personal information for the following business purposes:

  • Creating and managing your account (sign-up, authentication, giving you your 25 free credits).
  • Providing the features of the Service, including AI content generation and credit management.
  • Managing subscriptions, payments and billing, and meeting our accounting and tax obligations.
  • Support and customer service (answering your requests).
  • Improving, securing and running the Service (usage statistics, preventing fraud and abuse, security).
  • Sending marketing emails and newsletters about Leandre. Every marketing email includes an unsubscribe link, and you can opt out at any time (CAN-SPAM Act).
  • Measuring the performance of our ads (see section 9).
  • Complying with our legal obligations and handling any disputes, including defending our rights.

4. Who receives your information

Your information is accessible to authorized people at Leandre, only as far as their role requires. To provide the Service, we also use technical providers acting as service providers (also called processors). These providers only use your information to carry out the services we ask of them, under written agreements that restrict how they can use it.

  • Supabase: database hosting, authentication and storage of accounts and content. The data is hosted in the European Union (Central Europe region).
  • Our payment provider: subscription, payment and billing management.
  • Resend: sending transactional emails and, where applicable, communications about the Service.
  • Artificial intelligence model providers: processing your prompts to generate text, images and videos. We use providers of text generation and of image / video generation. Your prompts are sent to them only to produce the content you asked for.
  • Google sign-in provider: when you choose to sign in with your Google account.
  • Our host: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, United States (vercel.com).
  • Analytics and advertising partners: PostHog, Microsoft Clarity and Meta, through the tools described in section 9.

We may also disclose your information to public authorities or courts when the law requires us to. Apart from these cases, we do not sell your personal information and we do not rent it to third parties.

5. Where your information is stored

Leandre is established in the United Arab Emirates, and our service providers may be established or store data in the United States, the European Union or other countries. Our main database is hosted in the European Union. Wherever your information is processed, we protect it as described in this policy and through contracts with our service providers.

6. How long we keep your information

We only keep your information for as long as necessary for the purposes it was collected for; after that, we delete or de-identify it.

  • Account information: for as long as you have an account, then for up to 3 years after your last activity or the deletion of your account (for marketing and evidence purposes), unless you ask us to delete it sooner.
  • Generated content and prompts: kept while your account is active so that you can access them; deleted when your account is deleted, subject to any legal obligations.
  • Billing information and accounting records: kept for 10 years to meet accounting and tax obligations.
  • Connection data and technical logs: kept for up to 12 months.
  • Marketing information (prospects who are not customers): kept for 3 years from your last contact with us.
  • Cookies and trackers: your cookie choice is kept for up to 6 months; trackers have a maximum lifetime of 13 months.

7. Keeping your information secure

We use reasonable technical and organizational measures to protect your information against loss, alteration, disclosure or unauthorized access: encrypted connections (HTTPS/TLS), secure hosting in the European Union, access controls, separation between user accounts and activity logging. No system is infallible, so we cannot guarantee absolute security. If a security breach affects your personal information, we will notify you and the relevant authorities as required by applicable state law.

8. Your privacy rights

Depending on your state of residence (including California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with privacy laws), you may have the following rights over your personal information. We honor these requests for all US users, wherever they live:

  • Right to know / access: to know what personal information we collect, use and disclose, and to get a copy of it;
  • Right to delete: to ask us to delete the personal information we hold about you, subject to legal exceptions (for example billing records we must keep);
  • Right to correct: to have inaccurate personal information corrected;
  • Right to portability: to receive your information in a portable, commonly used format;
  • Right to opt out of the sale or sharing of your personal information, and of targeted advertising (see below);
  • Right to limit the use of sensitive personal information: we do not use sensitive personal information for purposes that would give rise to this right;
  • Right to non-discrimination: we will not deny you the Service, charge you a different price or give you a different quality of service because you exercised your rights.

We do not sell your personal information for money, and we have not done so in the past 12 months. We use advertising tools such as the Meta Pixel to measure our ads (section 9); under California law, this may be considered “sharing” for cross-context behavioral advertising. You can opt out of this at any time by emailing us@leandre.ai with the subject “Do Not Sell or Share My Personal Information”. We do not knowingly sell or share the personal information of anyone under 16.

You can exercise your rights by emailing us@leandre.ai or by writing to us at Dubai Silicon Oasis, Dubai, United Arab Emirates. To protect your account, we will verify your request, usually by confirming it from the email address linked to your account. You may also use an authorized agent, who must provide proof that you authorized them. We will reply within 45 days; this can be extended by another 45 days for complex requests, in which case we will let you know. If we decline your request, you can appeal by replying to our answer, and we will respond to your appeal within the time required by your state’s law. If your appeal is denied, you can contact your state attorney general.

9. Cookies and trackers

The Service uses cookies and similar technologies. There are three types:

  • Strictly necessary cookies, needed for the Service to work (authentication, security, keeping you signed in).
  • Analytics and performance cookies, which help us understand how the Service is used and improve it.
  • Advertising cookies, where used.

On our website we use the following tools: PostHog (product analytics, hosted in the EU), Microsoft Clarity (heatmaps and session recordings, to improve our pages), the Meta Pixel (to measure the performance of our Facebook and Instagram ads), our payment provider’s page-view measurement, and a first-party cookie that records how you arrived on our site (for example from an ad or an email) for up to 30 days.

You can control cookies at any time, for example by deleting and blocking cookies in your browser settings, or through our cookie preferences tool when it is available. Our website does not respond to “Do Not Track” browser signals; to opt out of sharing, email us as described in section 8.

10. Children

The Service is not intended for children. You must be at least 18 years old to create an account and start a subscription. We do not knowingly collect personal information from children under 13 (or anyone under 18). If you believe a child has given us personal information, please contact us and we will delete it.

11. Contact

For any question about this policy or your personal information, you can contact our privacy contact:

  • Email: us@leandre.ai
  • Postal address: Dubai Silicon Oasis, Dubai, United Arab Emirates

12. Changes to this policy

We may update this Privacy Policy from time to time, in particular to reflect legal, regulatory or technical changes. The version that applies is the one published on this page, and we review it at least once a year. If we make a material change, we will let you know by an appropriate means (a notification in the app or an email).

Last updated: October 2, 2026.