Privacy Policy

Effective date: October 13, 2026

Effective date: October 13, 2026

This Privacy Policy explains how Leni Inc. ("Leni," "we," "us," or "our") collects, uses, shares, and protects information when you use leni.co, app.leni.co, our software, application programming interfaces, integrations, and related services (the "Services"). It also explains how we handle customer-provided data and create de-identified data and derived products.

  1. Scope

This Policy applies to visitors, users, customers, and other people whose information we process through the Services. If you use the Services for an organization, references to "you" include that organization where the context requires. A separate customer agreement may add to or control over this Policy for that customer.

  1. Key terms

  • Personal Information means information that identifies, relates to, describes, or could reasonably be linked to a person or household.

  • Customer Content means data, files, documents, prompts, records, instructions, feedback, and other material that you submit, upload, connect, or otherwise make available through the Services. Customer Content may include real estate, financial, operational, property, building, tenant, transaction, and workflow data.

  • Outputs means analyses, workbooks, reports, presentations, summaries, responses, and other results produced through the Services.

  • De-identified Data means information processed so that it cannot reasonably identify a person, customer, organization, property, or building.

  • Derived Data means statistics, features, labels, evaluations, benchmarks, patterns, models, methods, and other information created from or informed by Customer Content, Outputs, feedback, or use of the Services and that does not identify a person, customer, organization, property, or building.

  1. Information we collect

We collect the following categories of information:

  • Account and contact information. Name, business email address, phone number, company, job title, account credentials, and communication preferences.

  • Customer Content. Information you submit directly or make available through connected systems, including documents, spreadsheets, databases, property-management systems, accounting systems, cloud storage, and other integrations.

  • Prompts, Outputs, and feedback. Requests, instructions, generated results, edits, ratings, comments, and workflow activity.

  • Usage and device information. Internet Protocol address, browser and device type, operating system, pages and features used, timestamps, referring pages, cookie identifiers, and diagnostic or security logs.

  • Transaction information. Subscription, invoice, and payment status. Payment card details are generally processed by our payment providers rather than stored by Leni.

  • Information from third parties. Information from service providers, integration partners, business partners, public sources, and people authorized to provide information to us.

  1. How we use information

We use information to:

  • provide, operate, secure, maintain, and support the Services;

  • authenticate users and administer accounts;

  • process Customer Content and produce Outputs;

  • monitor performance, prevent fraud or abuse, and fix errors;

  • respond to requests and communicate about the Services;

  • process subscriptions and transactions;

  • develop, test, evaluate, and improve the Services and related artificial intelligence systems;

  • create and commercialize De-identified Data and Derived Data as described below and in our Terms of Use;

  • market our Services, subject to applicable law and your communication choices;

  • comply with law, enforce agreements, and protect rights, safety, and property; and

  • support a merger, financing, acquisition, reorganization, or sale of assets.

  1. De-identified data and derived products

Leni may de-identify, aggregate, combine, reproduce, modify, analyze, and create derivatives from Customer Content, Outputs, feedback, and usage information. We may use De-identified Data and Derived Data for analytics, research, benchmarking, product development, quality testing, artificial intelligence training, evaluation and validation, and other lawful business purposes.

Leni may disclose, distribute, license, and sell De-identified Data and Derived Data to customers, research partners, artificial intelligence companies, data partners, and other third parties. These commercial products may include datasets, benchmarks, evaluation materials, labels, models, methods, statistics, and research products.

Commercial data products will not include Personal Information or information that reasonably identifies you, your organization, or a specific property or building, unless Leni and the affected customer enter into a separate written agreement that expressly permits that use. De-identification may include removing or replacing names, contact details, account identifiers, property and building names, addresses, unique asset identifiers, and other direct identifiers. We may also generalize or combine information to reduce identification risk.

We use reasonable technical and contractual controls to reduce re-identification risk. Recipients of De-identified Data and Derived Data may not attempt to re-identify a person, customer, organization, property, or building. If information becomes reasonably linkable to an identifiable person, we will treat it as Personal Information under this Policy.

Subject to applicable law and our Terms of Use, Leni may retain and use De-identified Data and Derived Data after the underlying Customer Content is deleted or a customer account ends.

  1. When we share Personal Information

We may share Personal Information with:

  • service providers that host data, process payments, provide analytics, deliver communications, support customers, or help secure and operate the Services;

  • third-party integrations when you or your organization directs us to connect or disclose information;

  • affiliates and professional advisers that need the information for a legitimate business purpose;

  • a buyer, investor, lender, or successor in connection with a business transaction;

  • government authorities or other parties when required by law or reasonably necessary to protect rights, safety, or property; and

  • other parties with your direction or consent.

We require service providers to use Personal Information only for permitted purposes and to protect it. We do not sell Personal Information as a standalone data product. Disclosures involving advertising or analytics technologies may be treated as a "sale" or "sharing" under some state privacy laws even when no money changes hands. You may exercise applicable opt-out rights as described below.

  1. Cookies, analytics, and marketing

We and our providers use cookies, pixels, local storage, and similar technologies to operate the Services, remember preferences, understand use, measure campaigns, and support advertising. You can control many cookies through your browser or device settings. Blocking some technologies may affect Service features. You may unsubscribe from marketing emails using the link in the message or by contacting us.

  1. Data retention

We retain Personal Information and Customer Content for as long as needed to provide the Services, fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods depend on the type of information, the customer relationship, legal requirements, security needs, and backup cycles. De-identified Data and Derived Data may be retained for longer periods or indefinitely where permitted by law.

  1. Security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. No security measure can guarantee complete security. You are responsible for protecting your credentials and using the Services only through authorized accounts and systems.

  1. International processing

Leni and its providers may process information in the United States, Canada, and other countries where we or our providers operate. These countries may have different privacy laws. Where required, we use appropriate safeguards for cross-border transfers.

  1. Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, or a copy of your Personal Information; object to or restrict certain processing; withdraw consent where consent is the legal basis; and opt out of certain sales, sharing, targeted advertising, or profiling. You may also appeal a denied request where applicable.

To exercise a right, email info@leni.co. We may verify your identity and authority before acting on a request. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising a privacy right. If your browser sends a legally recognized opt-out preference signal, we will process it as required by applicable law.

California notice

In the preceding 12 months, we may have collected identifiers; customer-record information; commercial information; internet or network activity; professional information; approximate location derived from an Internet Protocol address; inferences; and any Personal Information contained in Customer Content. We collect these categories from you, your organization, connected services, service providers, business partners, public sources, and use of the Services. We use and disclose them for the business purposes described in this Policy.

We do not knowingly sell Personal Information for money as a standalone data product. Advertising and analytics disclosures may constitute "sale" or "sharing" under California law. California residents may request to know, access, correct, delete, or obtain Personal Information and may opt out of sale, sharing, or targeted advertising. We do not knowingly sell or share the Personal Information of people under 16.

Canadian notice

Canadian residents may request access to or correction of their Personal Information, withdraw consent where processing depends on consent, and submit a privacy complaint. Withdrawal does not affect processing already completed and may limit our ability to provide some Services.

  1. Customer responsibilities

Customers decide what Customer Content to provide and which systems to connect. If you provide Personal Information about another person, you are responsible for having the authority and any required notice, consent, or other legal basis to do so. Do not submit information that the Services are not authorized to process.

  1. Children

The Services are not directed to children under 18. We do not knowingly collect Personal Information directly from children for their own use of the Services. Contact us if you believe a child has provided Personal Information without proper authorization.

  1. Third-party services

The Services may link to or connect with third-party services. Their privacy practices are governed by their own policies. Leni is not responsible for third-party privacy or security practices.

  1. Changes to this Policy

We may update this Policy. We will post the updated version and change the effective date. If a change materially affects how we use Personal Information or Customer Content, we will provide any additional notice required by law or contract.

  1. Contact us

Email: info@leni.co

Mail: Leni Inc., 26 Broadway, New York, NY 10004, United States