This Privacy Policy explains how LeapForm collects, uses, shares, and protects personal information when you use our transformation-management platform and related services.
Template notice. This document is a starting template based on common SaaS practice. It is not legal advice. Please have qualified counsel review and adapt it, and complete every [highlighted] item, before publication.
We collect information in three ways: data you provide, data collected automatically, and data from third parties.
We do not seek to collect special-category personal data; please do not upload it unless strictly necessary.
We use personal data to operate, secure, and improve the platform; create and manage accounts and workspaces; deliver the AI-supported insights and templates you request; process subscriptions and payments; provide support; send service and (where permitted) marketing communications; and comply with our legal obligations.
AI features process your inputs to generate the outputs you ask for. We do not use your customer content to train shared or third-party foundation models without your instruction.
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
We share personal data with service providers and sub-processors (hosting, analytics, payment, email, and support) under contract; with other members of your organisation's workspace; with professional advisers; and with authorities where legally required. In a merger, acquisition, or asset sale, data may transfer to the successor entity. We do not sell personal data. A current list of sub-processors is available on request at [[email protected]].
We retain personal data while your account or workspace is active and for as long as needed to provide the service, then for the period required to meet legal, tax, and dispute-resolution obligations, after which it is deleted or anonymised. Customer content is retained according to your organisation's settings and deleted after account closure, subject to routine backup cycles.
Subject to applicable law, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, contact us using the details below.
Where LeapForm processes data on behalf of your organisation (as a processor), we will refer your request to that organisation, which acts as the data controller. You may also lodge a complaint with your local supervisory authority.
We use strictly necessary cookies to run the platform and, with your consent, analytics and preference cookies to understand usage and improve the product. You can manage non-essential cookies through our cookie banner or your browser settings. A detailed cookie table will be maintained at [leapform.com/cookies].
We may process and store data in countries other than your own. Where we transfer personal data outside the UK or EEA, we use appropriate safeguards — such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum — together with supplementary measures where required.
We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls, least-privilege permissions, logging, and regular review. No method of transmission or storage is completely secure. We maintain incident-response procedures and will notify affected users and authorities of qualifying breaches as required by law.
LeapForm is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this policy from time to time. Material changes will be notified by posting the updated policy with a new ‘Last updated’ date and, where appropriate, by additional notice. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.
The data controller is [LeapForm legal entity name], [registered address]. For privacy questions or to exercise your rights, contact [[email protected]], or our Data Protection Officer at [[email protected]]. [EU/UK representative details, if applicable] will be added here.
For privacy enquiries or to exercise your data-protection rights, email [[email protected]] or reach us via the Contact page.