leep takes security and privacy seriously. This page answers our most common security and privacy questions. For our full data handling practices, and compliance documentation, use our Trust Center.
Data Storage and Residency
Where is my data stored?
All data is stored on Amazon Web Services (AWS) servers located in the ap-southeast-2 region (Sydney, NSW, Australia).
Is leep GDPR compliant?
Yes. We comply with GDPR and UK GDPR. We offer a Data Processing Addendum (DPA) incorporating EU and UK Standard Contractual Clauses. You act as the data controller; leep acts as the data processor. See our Trust Centre for full details.
Does leep store audio recordings?
No. Audio is temporarily cached during the conversation for transcription only. Once transcription is complete, the audio is deleted from our systems and any third-party services. We do not retain audio recordings.
Privacy and Sharing
If I use the MCP integration with Claude or ChatGPT, can my colleagues or team see leep responses?
The MCP integration use browser-based OAuth and only access signals and leep responses you have permission to view. Colleagues using the same Claude or ChatGPT instance would not gain access to your team's leep responses through the integration.
Who can access my Team's data?
No one at leep has default access to customer data, including our support staff and engineers.
Where access is genuinely needed, for example to resolve a support issue, it must be approved by you first. Access is limited to the specific data required and is automatically removed once the work is complete.
All access is logged, and a record of what was accessed and why is available on request.
AI and Model Training
Does leep use my data to train AI models?
Anonymised data may be used for leep's own model improvements. Third parties like Anthropic or OpenAI are never allowed to train on your data.
Data Retention and Deletion
How long does leep keep response transcripts
Notes and transcripts are retained indefinitely
How do i delete my account and all my data?
Email [email protected] and we'll process your account deletion, remove all associated data and confirm this with you.
Can I export all my data (GDPR data portability)?
Yes, email [email protected] with the subject line "GDPR Request" and we will provide your data.
Authentication and Enterprise Controls
Does leep support SSO (Single Sign-On)
Not at this time. Please email [email protected] to register your interest.
Does leep support two-factor authentication (2FA/MFA)
leep does not have a built-in 2FA or MFA feature. Authentication is delegated to your identity provider - Google or Microsoft. To protect your leep account with multi-factor authentication, enable it on your identity provider.
Does leep enforce a password policy?
No, leep doesn't manage passwords directly. All authentication is delegated to your identity provider (Google, Microsoft). Whatever password policies your identity provider enforces (complexity requirements, expiration etc) apply to your leep sign-in.