Privacy Policy

Who we are

Leash provides security controls for AI agents, including approvals, secret protection, policy enforcement, provider usage visibility, and audit records. This policy covers the Leash website, Leash Cloud, the desktop client, and the iOS and Android mobile clients.

Privacy contact: privacy@openleash.com. General support: support@openleash.com.

Data we collect

• Account information, such as name, email address, sign-in provider, and authentication metadata.
• Device and client information, such as platform, app version, device name, API endpoint, and notification registration state.
• Security event data, such as agent name, project name, requested action, policy match, approval decision, timestamp, and audit context.
• Provider usage metadata, such as request counts, token counts, connected provider names, and cost estimates where enabled.
• Support messages and operational communications you send to us.
• Website analytics from Google Analytics, such as pages viewed, referral source, approximate location, and browser or device information, together with basic telemetry from hosting, security, and server logs.

How we use data

• To authenticate users and connect them to their personal account.
• To deliver approval notifications and let users approve or deny agent actions.
• To enforce security policy, protect secrets, maintain audit logs, and show usage information.
• To provide support, debug reliability issues, prevent abuse, and secure the service.
• To understand website use and improve our content, navigation, and product.
• To comply with legal obligations and enforce our terms.

Mobile app permissions

The mobile apps use network access to connect to Leash Cloud. They request notification permission so you can receive approval prompts. The apps do not request camera, microphone, photo library, contacts, precise location, or advertising tracking permissions.

Sharing and processors

We do not sell personal data. We share data only with service providers needed to run Leash, such as infrastructure, sign-in, email, analytics, monitoring, and support providers, or when required by law.

Security

We use encryption in transit, access controls, least-privilege operational practices, and audit logging appropriate to the sensitivity of security event data. The mobile app stores session tokens in platform secure storage.

Retention and deletion

We retain account and security records for as long as needed to provide Leash, maintain security, meet audit obligations, resolve disputes, and comply with law. You can request account and associated personal data deletion at openleash.com/account/delete. Some audit, billing, abuse-prevention, or legal records may be retained where required or permitted by law, and we will explain that when it applies.

Your choices

• You can sign out of the mobile app at any time.
• You can revoke notification permission in iOS or Android settings.
• You can request access, correction, export, or deletion by contacting privacy@openleash.com.

Children

Leash is not directed to children and should not be used by children under 13.

Changes

We may update this policy as the product changes. If changes are material, we will provide reasonable notice through the website, product, or account email where appropriate.