Privacy Policy

Leonoli respects your privacy and is committed to protecting your personal data in accordance with applicable UK data protection law, including the UK GDPR.

Who we are

Leonoli is the data controller responsible for your personal data. If you have any questions, you can contact us at info@leonoli.com.

What data we collect

We may collect the following information:

• email address
• name (if provided)
• purchase and transaction details
• basic usage or interaction data (e.g. email opens, page visits)

How we use your data

Your data is used to:

• deliver digital products and access
• process payments and orders
• respond to enquiries
• send essential service emails
• improve products and user experience

AI-generated messages

When you use Leonoli to generate a message, the information entered into the message field is processed to create the draft you request. This may include clinic notes, draft wording, a client situation, selected message type or format, and the generated output.

You should not enter names or other information that identifies a client. Some parts of Leonoli replace email addresses, phone numbers, and links with placeholders before sending a request, but this does not reliably remove names or every possible identifier.

Message inputs are processed so Leonoli can generate the requested communication draft, apply the relevant prompt instructions, and return the generated text to you for review.

Leonoli currently uses the Anthropic API as its AI service provider for generated messages. The prompt is sent from Leonoli's server to Anthropic's messages API, and the generated response is returned to Leonoli and then to your browser.

In the current application flow, Leonoli's generation endpoint does not write message inputs or generated outputs to the Leonoli subscriber database. Message data is still processed through Leonoli's hosting/runtime infrastructure and may be present in operational or security logs according to the relevant provider settings.

Anthropic's API retention terms may apply to message inputs and outputs sent to Anthropic. Anthropic states that API inputs and outputs may be retained for a limited period, commonly up to 30 days by default, subject to applicable terms, safety review, legal requirements, or any separate agreement.

Leonoli does not send message inputs to Anthropic for the purpose of training AI models. Anthropic states that retained API data is not used for model training without express permission or opt-in, subject to Anthropic's current API and commercial terms.

Processing may take place where Leonoli's hosting/runtime providers, Anthropic, and their approved subprocessors operate their services. Leonoli's AI message processing should not be assumed to remain solely in the UK unless this is confirmed by a specific provider configuration or written agreement.

For AI message generation, the message prompt is sent to Anthropic and passes through Leonoli's hosting/runtime infrastructure. Other processors involved in operating Leonoli may include Supabase for account and access records, Lemon Squeezy for payments and subscription events, Resend for transactional emails, and MailerLite for email signups.

Legal basis for processing

We process your data based on:

• contract (to deliver your purchase)
• legitimate interests (to improve services)
• consent (for optional marketing emails, where applicable)

Third-party services

We may use trusted third-party providers to operate our business, such as payment processors (e.g. Lemon Squeezy), email platforms, and website hosting services.

These providers only process data as necessary to deliver their services and are required to protect your information.

Data retention

We retain personal data only as long as necessary to fulfil the purposes outlined above, including legal, accounting, or reporting requirements.

Your rights

You have the right to:

• access your personal data
• request correction of inaccurate data
• request deletion of your data
• object to or restrict processing
• withdraw consent (where applicable)

To exercise any of these rights, contact us at info@leonoli.com.

Data security

We take reasonable technical and organisational measures to protect your personal data.

Cookies and tracking

This website may use basic cookies or analytics tools to improve functionality and understand usage. You can control cookies through your browser settings.