Leafrix

Privacy Policy

Effective August 7, 2026

What we collect

  • Account email — used for magic-link sign-in and account communication.
  • Research inputs — city/ZIP, budget, purpose, holding period, and any optional preference notes you enter.
  • Usage and log data — requests, timestamps, and basic diagnostics for operating and protecting the service.
  • One session cookie (lf_session, HttpOnly) to keep you signed in. No advertising trackers.

How we use it

To provide the service: generate and personalize your research reports, manage your plan and billing, send transactional email (sign-in links, receipts, service notices), and prevent abuse of the service.

AI processing

Your research inputs are sent to Anthropic's API to generate your report. Public data sources (Census, BLS, FRED) are queried without any of your personal data.

Subprocessors

  • Railway — hosting (US)
  • Stripe — payment processing; card details go directly to Stripe
  • Anthropic — AI processing of research inputs
  • Resend — transactional email delivery
  • Cloudflare — network and bot protection, including Turnstile

What we don't do

We do not sell your personal data, and we do not show ads or use advertising trackers.

Retention

We keep account data until you ask us to delete your account. Research you delete is soft-deleted and retained internally to keep quota accounting honest, then removed with the account.

Security

All traffic is encrypted with TLS, sign-in and session tokens are stored hashed, and administrative access is passkey-protected. No system is perfectly secure, but we design for minimal data and least access.

Your rights

You can request a copy of your data or deletion of your account at any time — email [email protected] from your account address and we'll handle it.

Children

Leafrix is not intended for anyone under 18. We do not knowingly collect data from minors.

Changes

We may update this policy from time to time. Material changes will be announced on the site or by email, with the effective date above updated accordingly.

Contact

Privacy questions: [email protected].