leep takes security and privacy seriously. This page answers our most common security and privacy questions. For our full data handling practices, and compliance documentation, use our Trust Center.
Data Storage and Residency
Where is my data stored?
All data is stored on Amazon Web Services (AWS) servers located in XXXX.
Is leep GDPR compliant?
Yes. We comply with GDPR and UK GDPR. We have a UK entity (XXXX). We offer a Data Processing Addendum (DPA) incorporating EU and UK Standard Contractual Clauses. You act as the data controller; leep acts as the data processor. See our Trust Centre for full details.
Does leep store audio recordings?
No. Audio is temporarily cached during the conversation for transcription only. Once transcription is complete, the audio is deleted from our systems and any third-party services. We do not retain audio recordings.
Privacy and Sharing
If I use the MCP integration with Claude or ChatGPT, can my colleagues or team see leep responses?
The MCP integration use browser-based OAuth and only access signals and leep responses you have permission to view. Colleagues using the same Claude or ChatGPT instance would not gain access to your team's leep responses through the integration.
Can leep access my team memory?
Access to customer information is strictly limited to authorised personnel with a legitimate business need. Access controls follow least-privilege principles. Access is authenticated, logged, monitored, and regularly reviewed.
We also allow leaders to “open” their data temporarily for support via an opt-in mechanism.
AI and Model Training
Does leep use my data to train AI models?
Anonymised data may be used for leep's own model improvements. Third parties like Anthropic or OpenAI are never allowed to train on your data.
Data Retention and Deletion
How long does leep keep response transcripts
Notes and transcripts are retained indefinitely
How do i delete my account and all my data?
Email [email protected] and we'll process your account deletion, remove all associated data and confirm this with you.
Can I export all my data (GDPR data portability)?
Yes, email [email protected] with the subject line "GDPR Request" and we will provide your data.
Authentication and Enterprise Controls
Does leep support SSO (Single Sign-On)
No
Does leep support two-factor authentication (2FA/MFA)
leep does not have a built-in 2FA or MFA feature. All authentication is delegated to your identity provider - Google, Microsoft, or your organisation’s SSO provider. To protect your leep account with multi-factor authentication, enable it on your identity provider.
Does leep enforce a password policy?
No, leep doesn't manage passwords directly. All authentication is delegated to your identity provider (Google, Microsoft). Whatever password policies your identity provider enforces (complexity requirements, expiration etc) apply to your leep sign-in.