Privacy Policy

LeapOne (“we”, “us”, or “our”) is operated by Marwa Saleh, based in Canada. LeapOne helps Canadian businesses measure and improve how often AI assistants and AI-powered search recommend them. This policy explains how we collect, use, and protect your personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

Information We Collect

• Account details: your name and email address
• Business profile: business name, type, services offered, address, website, hours, and the Google Business listing you confirm (used to identify your business in AI answers)
• Inputs you provide for estimates, such as average customer value
• Audit and analysis results we generate about your business
• Usage data (pages visited, features used)
• Billing information — payments are processed by Stripe; we do not store your full card number

How We Use Your Information

• To run AI-visibility audits and market analyses for your business
• To query third-party AI assistants and search-data providers about your business category and area, and to detect whether your business is mentioned
• To generate content suggestions and improvement recommendations
• To estimate the revenue opportunity of improving your visibility
• To process payments and manage your subscription
• To communicate with you about your account

We also analyze publicly available information about your business — such as your website and public business listings and ratings — as visibility signals. We do not connect to, manage, or post to your review or social-media accounts.

Third-Party Services

We share the limited information needed to operate LeapOne with the following service providers. We do not sell your personal information.

• Supabase (database and authentication) — supabase.com/privacy
• Stripe (payment processing) — stripe.com/privacy
• OpenAI, Anthropic, Perplexity, and Google (Gemini) — the AI assistants we query and use to generate suggestions; each provider’s privacy policy applies (OpenAI, Anthropic, Perplexity, Google)
• SerpApi and DataForSEO (search-results and keyword data) — serpapi.com/legal, dataforseo.com/privacy-policy
• Google (OAuth sign-in and, where you enable it, Business Profile data) — policies.google.com/privacy
• Resend (transactional email) — resend.com/legal/privacy-policy
• Vercel and Railway (application hosting) — vercel.com/legal/privacy-policy, railway.com/legal/privacy

Where Your Data Is Processed

Some of our service providers store or process data outside Canada, including in the United States, where it may be subject to the laws of those jurisdictions. By using LeapOne, you consent to your information being transferred to and processed in those locations to provide the Service.

Data Retention

We retain your data for as long as your account is active, and for a reasonable period afterward, after which it is deleted or anonymized. You may request deletion at any time by contacting us at support@leapone.ca.

Data Breaches

If a privacy breach creates a real risk of significant harm, we will notify affected users and the Office of the Privacy Commissioner of Canada as required under PIPEDA.

Your Rights (PIPEDA)

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Withdraw consent and request deletion of your data
• File a complaint with the Office of the Privacy Commissioner of Canada

Changes to This Policy

We may update this policy from time to time. We will revise the “Last updated” date above, and we will communicate material changes. Your continued use of the Service after a change takes effect means you accept the updated policy.

Privacy Officer & Contact

We are accountable for the personal information in our care. For any privacy question, access request, or data-deletion request, contact our Privacy Officer at support@leapone.ca.