Privacy Policy

Last Updated: July 31, 2026

INTRODUCTION

This policy (the “Privacy Policy”) explains how LeanScaper (“LeanScaper”, “we”, “our”, or “us”) collects, uses, discloses and otherwise manages the personal information we collect from individuals and organizations that use our products and services, attend our webinars and events, visit our website located at https://leanscaper.com, participate in our LeanScaper online community and/or use our LeanScaper AI software (collectively, the “Services”). By using the Services, you agree to the collection, use and disclosure of personal information as set out in this Privacy Policy.

We may make changes to our Privacy Policy from time to time.  When we do so, we will post the revised policy on our website and amend the “last updated” date at the top of the policy. We encourage you to check back on our website for the latest information on our Privacy Policy and practices. If we make significant changes to our Privacy Policy, we will take additional measures to bring these to your attention.  Following our posting of any changes to this policy, your continued use of the Services signifies your consent to the revised terms of this Privacy Policy. However, continued use alone will not constitute consent to a materially different use of Google user data. If we materially change how we access, use, store, or share Google user data, we will provide notice and obtain any affirmative consent required before applying the change to that data.

If you have any questions about this Privacy Policy, please Contact Us.

TYPES OF PERSONAL INFORMATION WE COLLECT

For the purposes of this policy, personal information is any information about an identifiable individual, including any information that, alone or in combination with other information, could be used to identify an individual (“Personal Information”). Personal Information does not include aggregated information, or any Personal Information that has been de-identified through the removal of potentially identifying details, such that the data may not be identified with a particular individual.

We collect Personal Information that you share with us directly or provide by interacting with our business and using our Services. The types of Personal Information we collect are as follows:

• Information you provide to us during account onboarding. When you sign up for a LeanScaper account, we ask you to provide your first and last name, email address, phone number, company name and address, job title and user role.  
• Information you share with the LeanScaper Community. We collect information that you choose to share on the LeanScaper Community platform, including user profile information, posts, comments, and responses to polls.
• Information you input into our Services. We collect information that you input, upload, or otherwise provide to us in connection with the Services, including information:
  • that you input into our LeanScaper AI platform;
  • that you provide as part of an assessment;
  • that you submit via a form on our website;
  • that we receive through a third-party integration you choose to connect, such as QuickBooks, LMN, or Google Workspace. Our handling of information received through Google APIs is described separately in the “Google User Data” section below;
  • that you may provide in a survey or feedback form;
  • that we may receive from you in connection with services provided by Certified LeanScaper Advisors; or
  • that you may choose to provide if you interact with our AI assistant and related tools.
• Information you provide when you register for webinars or events. We collect your registration details and consent preferences when you register for a webinar or in-person event, and we may take photographs or video recordings at our events.
• Information that you provide to us in testimonials. If you choose to provide us with a written or video testimonial, this may include Personal Information such as your name, organization, and likeness. Testimonials may be posted on our website, YouTube account, and social media channels.
• Information tracked through your use of the Services. We use common technologies, such as cookies, which track your device’s interaction with our Services, including device identifier, browser type, IP address, and non-precise location. For more information, please see Cookies and Related Technologies.
• Payment information.  We may collect data necessary to process your payment if you choose to purchase access to certain paid Services. All payment data is handled and stored by Stripe. You may find their privacy notice link(s) here: https://stripe.com/privacy.

Depending upon the Service, some of the information that we ask you to provide is identified as mandatory and some as voluntary. If you do not provide the mandatory data with respect to a particular Service, you may not be able to use that Service.

GOOGLE USER DATA

Certain features of our Services allow you to connect your Google account so that LeanScaper, including Lana, our AI assistant, can access Google Workspace information and take actions on your behalf. These actions may be performed in response to a request or approval from you or through an automation that you expressly configure.

For purposes of this Privacy Policy, “Google user data” means information that LeanScaper receives through Google APIs, including information derived from that data. This section supplements the rest of this Privacy Policy. If another provision of this Privacy Policy conflicts with this section, this section governs with respect to Google user data.

Google data we access and how we use it

When you connect your Google account, LeanScaper — through our assistant, Lana — accesses only the Google data you authorize, and only when you ask:

• Google Calendar: your calendar events, to answer questions about your schedule and, with your explicit confirmation of each event, to create events you request. We also read your calendar list and settings (read-only) to resolve the correct timezone when creating an event.
• Google Sheets: spreadsheets you direct Lana to, to read their contents and, with your explicit confirmation of each action, to create spreadsheets or append rows you request.
• Google Docs: documents you direct Lana to, to read their contents and, with your explicit confirmation, to create documents you request.
• Account Identity: your email address, to identify which Google account is connected.

LeanScaper never modifies or deletes your existing calendar events, spreadsheets, or documents, and never accesses Google data except in response to your requests.

‍

LeanScaper requests only the permissions needed to provide the Google features you choose to enable. If LeanScaper introduces a feature requiring access to another category of Google user data, we will disclose the additional access and obtain any required authorization before accessing that data.

LeanScaper uses its own Google OAuth client credentials to request authorization. Composio provides the integration infrastructure that manages the resulting connection and OAuth credentials on LeanScaper’s behalf. These credentials allow authorized Google features to continue operating between sessions.

Limited Use

LeanScaper’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. LeanScaper’s use of information received from Google Workspace scopes will also adhere to the Google Workspace User Data and Developer Policy, including the Limited Use requirements.

Consistent with these policies, LeanScaper:

1. uses Google user data only to provide or improve user-facing Google integration features that are visible in LeanScaper;
2. does not sell Google user data or use or transfer it for advertising, retargeting, personalized advertising, interest-based advertising, creditworthiness, or lending purposes;
3. does not transfer Google user data except:
   • to service providers necessary to provide or improve the Google integration features, with the user’s consent;
   • where necessary to investigate security incidents, fraud, bugs, or abuse;
   • where required to comply with applicable law; or
   • as part of a merger, acquisition, or sale of assets after obtaining the affected user’s explicit prior consent; and
4. does not permit personnel or other humans to read Google user data unless:
   • the user has affirmatively agreed to access to specific messages, files, events, or other data;
   • access is necessary to investigate a security issue, bug, fraud, or abuse;
   • access is necessary to comply with applicable law; or
   • the data has been aggregated and anonymized and is used only for permitted internal operations.

LeanScaper requires its employees, contractors, service providers, agents, and successors to comply with these restrictions.

No generalized AI or machine-learning training

LeanScaper does not use, transfer, or permit the use of Google user data to create, train, or improve generalized, foundation, shared, or non-personalized artificial intelligence or machine-learning models. This restriction applies to raw Google user data and to information that has been aggregated, anonymized, de-identified, or otherwise derived from Google user data.

Google user data may be processed using artificial intelligence only as necessary to perform the specific user-facing action that you request, approve, or expressly configure. For example, Google user data may be processed to prepare an outgoing email for your review, create or edit a selected document or spreadsheet, or schedule a calendar event.

AI service providers process Google user data only on LeanScaper’s behalf and only as necessary to provide the feature you request. They may not use Google user data to train or improve generalized or foundation AI models.

The statements elsewhere in this Privacy Policy about using Personal Information, aggregated information, or de-identified information to improve LeanScaper’s Services or AI models do not apply to Google user data.

Service providers that receive Google user data

LeanScaper discloses Google user data only to service providers necessary to provide, operate, secure, or support the Google integration:

• Composio, Inc., which provides OAuth credential management and integration infrastructure for the Google connection;
• OpenAI and Anthropic, which process information only when necessary to perform the specific AI-assisted feature that you request, approve, or expressly configure; and
• Amazon Web Services, which provides LeanScaper’s production hosting, database, storage, logging, security, and backup infrastructure.

These providers may process Google user data only on LeanScaper’s instructions and only for the services they provide to LeanScaper. They are subject to confidentiality, security, data-protection, and use restrictions appropriate to the information they process.

LeanScaper does not sell Google user data and does not disclose it to advertisers, advertising platforms, data brokers, information resellers, or unrelated third parties.

Retention, disconnection, and deletion

LeanScaper does not continuously synchronize or maintain a replica of your Gmail mailbox, Google calendars, or Google Drive. Google user data is generally accessed and processed when you use or expressly configure a connected feature.

While your Google account remains connected, Composio retains encrypted OAuth credentials and limited connection metadata necessary to maintain the integration. LeanScaper may also retain work products that you choose to save, such as a draft, document, spreadsheet, calendar record, or AI conversation containing information you selected for processing.

LeanScaper may retain limited security and diagnostic records. Application logs are normally retained for approximately 90 days, while network and access logs are normally retained for approximately 365 days. LeanScaper does not intentionally write OAuth credentials or the contents of Google emails, calendar events, documents, or spreadsheets to logs.

You may disconnect your Google account at any time through LeanScaper’s integration settings or through your Google Account permissions settings. Disconnecting immediately prevents LeanScaper from initiating additional Google API operations. LeanScaper then requests revocation of the Google authorization and deletion of the associated connection and OAuth credentials maintained through Composio.

Composio does not publish a specific period within which all OAuth credentials are removed from its active systems or backups. Any residual information retained by Composio following a deletion request is governed by Composio’s data-retention and deletion practices and applicable contractual obligations.

Disconnecting does not reverse actions that have already been completed in Google, such as emails that have been sent, calendar events that have been created, or files that have been created or edited. Disconnecting also does not automatically delete work products that you previously chose to save in LeanScaper.

You may delete saved information using deletion controls available in the Services or by contacting our Privacy Officer. Following a verified deletion request or account deletion, applicable Google-derived information is deleted from LeanScaper’s active production systems within 30 days. Residual copies in LeanScaper-managed encrypted backups expire through the normal backup cycle within an additional 30 days, unless retention is required by law, legal hold, or a documented security investigation.

Security

Google user data is encrypted in transit using secure modern protocols and encrypted at rest. OAuth access and refresh tokens maintained by Composio are encrypted at rest. LeanScaper’s Google OAuth client secret is maintained in an approved encrypted secrets-management system.

Access to Google user data and credentials is restricted to systems, service providers, and authorized personnel that require access to operate, support, or secure the applicable integration feature. OAuth credentials must not be written to application logs, analytics systems, AI prompts, or client-side storage.

Although LeanScaper uses safeguards designed to protect Google user data, no method of transmission or storage is completely secure.

‍

HOW WE USE YOUR PERSONAL INFORMATION

LeanScaper generally collects, uses, and discloses your Personal Information to provide Services to you and to operate our business, including for the following purposes:

• to deliver and operate the Services, including all current and future features;
• to facilitate account creation, authentication, and otherwise manage user accounts;
• to customize your Services based on your business size, goals, roles, and historical context;
• to enable AI-driven coaching and guidance tailored to both your business’s operational metrics and to your role, responsibilities, and learning history;
• to generate personalized Balanced Scorecards, recommendations, assessments, and improvement plans;
• to match users with the right LeanScaper programs, Advisors, SOPs, and resources;
• to guide onboarding, SOP development, Lean system implementation, and role-based improvements;
• to support Advisor coaching, workshop participation, and program performance tracking;
• to connect third-party tools at your direction and perform the integration features and actions that you request, approve, or expressly configure;
• to facilitate safe and structured participation in the LeanScaper Community platform;
• to develop, operate, and improve our Services, AI models, and the machine learning technology that generates coaching insights for you and your organization;
• to communicate with you regarding the Services, including concerns or queries that you may have;
• to share testimonials that you provide to us; and
• to investigate, detect, and prevent fraud in connection with the Services.

We may aggregate or de-identify Personal Information so that you can no longer be identified and use the aggregated or de-identified data to update and improve our Services, including our AI models, and to analyze and benchmark trends regarding the Services.

The uses described in this section involving the development, training, or improvement of artificial intelligence or machine-learning models do not apply to Google user data or information derived from Google user data, including aggregated, anonymized, or de-identified information.

With your consent, or as may be permitted by law, from time to time, we may also use your Personal Information to send you email or other communications that may be of interest to you and to tailor communications to your interests. You may opt out of marketing and promotional communications at any time by Contacting Us or selecting the unsubscribe option in any marketing and promotional communication that you receive.

In general, we may also use your Personal Information to ensure compliance with our policies and terms, to protect our property and business interests and the interests of other users, and to comply with applicable legal and regulatory requirements.

DISCLOSURE OF PERSONAL INFORMATION

We may share your Personal Information with the following persons and in the following situations:

• With Our Affiliates and Service Providers. We may share your Personal Information within our corporate group, with our Advisors, and with other service providers who help us run our operations, provide services to you, or fulfill your requests. For more information on how we share information with our service providers, see “Processing of Personal Information by Third Parties” below.
• With Other Users. When you share Personal Information or otherwise interact with public areas of the Services (for example, by posting comments, contributions, or other content to the LeanScaper Community), such Personal Information may be viewed by all users and may be publicly made available outside the Services. Other users will be able to view descriptions of your activity, see your profile and posts, and communicate with you within our Services.
• To Effect Business Transfers. We may provide your Personal Information to a third party where reasonably required in the context of a sale, merger or amalgamation of all or part of our business. In any such case, the recipient parties will be contractually required to keep the information confidential and use it only for the purposes of the transaction, or proposed transaction, in question. In the event a business transaction is completed, assignees or successors of LeanScaper or our business or assets, may use and disclose Personal Information only for the purposes as set out in this Privacy Policy, unless further consent is obtained. Notwithstanding the foregoing, LeanScaper will transfer Google user data as part of a merger, acquisition, or sale of assets only after obtaining the affected user’s explicit prior consent.
• As Required by Law or to Enforce Legal Rights. We and our service providers may disclose your Personal Information in response to a search warrant or other legally valid inquiry or order, or as otherwise required or permitted by applicable law, including the disclosure of Personal Information where necessary for the establishment, exercise or defense of legal claims or to prevent actual or suspected loss or harm to persons or property.

LeanScaper does not sell your Personal Information to third parties.

PROCESSING OF PERSONAL INFORMATION BY THIRD PARTIES

From time to time, LeanScaper may share your Personal Information with third party contractors and service providers that we have engaged to provide us with services or to perform services on our behalf, based on our instructions, such as data processing and storage companies, artificial intelligence service providers, or individuals and organizations that provide professional and administrative services to us.  We will limit our disclosure of your Personal Information to such third parties to that which is reasonably necessary for the purpose or service for which the third-party service provider is engaged.  We will use contractual and other means to provide a reasonable level of protection while the information is being processed by such third parties. Any disclosure of Google user data to a service provider is limited to the providers and purposes identified in the “Google User Data” section and is subject to the restrictions stated in that section.

THIRD PARTY SERVICES AND LINKS

We may from time to time recommend or provide you with access to other third party products, services, or website links (collectively, “Third Party Services”) for your consideration or use, which may be linked through the Services. Such Third Party Services are provided by third party service providers (each, a “Third Party Provider”) and made available only as a convenience to you. If you use Third Party Services, you acknowledge and agree that your Personal Information will be collected, used, and disclosed by the applicable Third Party Provider in accordance with its privacy policy. LeanScaper is not responsible for the collection, use and disclosure of any information collected by such Third Party Providers.

CROSS-BORDER DATA TRANSFERS

We and some third-party service providers that we may engage, including cloud-based providers such as Amazon Web Services, may store or process your Personal Information in the United States or other jurisdictions other than Canada, where it may be the subject of laws of the jurisdiction in which it is stored.

COOKIES AND RELATED TECHNOLOGIES

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions. We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests.

Cookies

Like most websites, our website uses a technology called “cookies”. A cookie is a tiny element of data that our website can send to your browser, which is stored on your device and records your preferences and your use of the website so we can recognize you when you return. We use cookies to help us understand our website activity and which areas of our website are useful and which areas need improvement. You may set your browser to notify you when you receive a cookie or to not accept certain cookies. However, if you decide not to accept cookies from our website, you may not be able to take full advantage of all of the features of our website.

Log and Usage Data

Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings).

Device Data

We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.

Tailored Ads

We use Google AdSense and other third party advertising tools to advertise online. Third party vendors, including Google, may show ads for LeanScaper on websites that you visit across the Internet. We and our service providers, including Google, use cookies to inform, optimize, and serve ads on third party websites based on your past visits to our website. These cookies may also be used to report on ad impressions, other uses of ad services and interactions with these ad impressions and ad services related to visits to our website.

You can choose to opt out of receiving tailored advertising from Google by visiting Google’s Advertising – Privacy & Terms page.  In Canada, you can choose to opt out of receiving tailored advertising from other advertising services by visiting the Digital Advertising Alliance of Canada’s Opt-Out Tool. If you opt out of receiving tailored advertising from these third parties, you may still see LeanScaper ads on other websites, but those ads will not be customized by the companies that you opt out of and LeanScaper may continue to customize your experience on our website using cookies.

Google user data received through Google APIs is not used or transferred for advertising, retargeting, personalized advertising, or interest-based advertising and is not disclosed to advertising providers.

ARTIFICIAL INTELLIGENCE-BASED PRODUCTS

As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (collectively, "AI Products"). These tools are designed to enhance your experience and provide you with innovative solutions. We provide the AI Products through third-party service providers ("AI Service Providers"), including OpenAI, Anthropic (Claude), Amazon Web Services (AWS) AI, Microsoft Azure AI and Google Cloud AI. To the extent that you use our AI Products, your input, output, and Personal Information will be shared with and processed by these AI Service Providers to enable your use of our AI Products. You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider. Google user data may be processed by an AI Service Provider only when necessary to perform a user-facing feature that the user requests, approves, or expressly configures. Neither LeanScaper nor its AI Service Providers may use Google user data to train or improve generalized, foundation, shared, or non-personalized models. Additional restrictions are described in the “Google User Data” section.

HOW WE SAFEGUARD PERSONAL INFORMATION

We have implemented reasonable and appropriate physical, organizational and technological safeguards designed to protect against unauthorized access, use, modification and disclosure of Personal Information in our custody and control. While LeanScaper makes strong efforts to safeguard your Personal Information and to secure your data, no transmission of data over the Internet can be guaranteed to be 100% secure.  

RETENTION OF PERSONAL INFORMATION

We retain your Personal Information only where required to fulfill the purposes set out in this Privacy Policy, and for no longer than necessary to fulfill those purposes, including retention for a reasonable period of time to facilitate your potential restart of services with us, or as otherwise permitted or required by law. Certain third-party service providers, like payment processors, may have their own retention policies and legal requirements related to retention. When we no longer have a legitimate need to retain your Personal Information, we will securely destroy or irrevocably erase it. The general retention provisions above do not expand the retention of Google user data. The retention, disconnection, and deletion practices applicable to Google user data are described in the “Google User Data” section.

YOUR CHOICES & ACCESS TO YOUR PERSONAL INFORMATION

We value your choices when it comes to your Personal Information. You can generally choose how much information to share with us through the Services. You generally have the right to withdraw your consent to any further collection, use or disclosure of any elements of your Personal Information, subject to legal and contractual requirements; however, such a withdrawal may reduce your ability to take full advantage of our Services.

As noted above, you also have the right to opt out of marketing communications. If you would like to discuss your privacy choices, including your ability to opt out of providing certain information, please Contact Us.

You have the right to access and request correction, updating, deletion, and, where contemplated by applicable laws, de/re-indexation of your Personal Information in our custody and control, subject to limited exceptions prescribed by applicable laws. You may do so by Contacting Us.

You also have the right to lodge a complaint with the privacy regulators in charge of enforcing the privacy legislation applicable in your territory. Individuals based in Canada may lodge a complaint with the Office of the Privacy Commissioner of Canada. Refer to contact details here https://www.priv.gc.ca/en/contact-the-opc/.

MINORS

Our Services are not directed to anyone under the age of 18. LeanScaper does not knowingly collect Personal Information from anyone under the age of 18. If you have reason to believe that a minor under the age of 18 has provided Personal Information to LeanScaper through our Services, please Contact Us and we will endeavor to delete that information from our systems.

HOW TO CONTACT US

If you have any questions, concerns or complaints regarding our Privacy Policy or the manner in which we or our service providers treat your Personal Information, please contact our Privacy Officer by email at vanya@leanscaper.com.