Privacy Policy

Leaptra AI Inc. is incorporated in the State of Texas, United States. Registered Address: Houston, Texas United States This Privacy Policy and any disputes arising from it are governed by the laws of the State of Texas, without regard to conflict of law principles.

This Policy applies when you: • Visit www.leaptra.com or leaptra.ai • Use Leaptra AI's automation platform • Integrate Gmail, CRM systems, or third-party tools • Engage with us for sales, support, or marketing

When We Act as Data Controller We are the Data Controller for: • Account registration data • Billing and subscription information • Marketing communications • Website analytics When We Act as Data Processor (Service Provider) We act as a Data Processor when business customers upload or sync customer data, including: • CRM records • Gmail content • Customer communications • Healthcare-related data (if applicable) In those cases: • The business customer is the Data Controller. • We process data only on documented instructions. • Customers are responsible for obtaining required consent from their end users.

In compliance with U.S. state privacy laws, we may collect: A. Identifiers • Name • Email address • Phone number • Business name • IP address • Account credentials B. Commercial Information • Subscription details • Payment records C. Internet/Network Activity • Device information • Browser type • Usage logs • Interaction data D. Professional Information • Job title • Business contact details E. Customer Data (Processed on Behalf of Clients) • Email content • CRM records • Contact databases F. Sensitive Personal Information (Limited Contexts) May include: • Email content (may contain sensitive data) • Financial transaction data (via payment providers) • Health-related information uploaded by healthcare clients We do not intentionally collect biometric identifiers or government-issued ID numbers.

If you are located in the EEA, UK, or Switzerland, we rely on: Contractual Necessity To provide Services and manage subscriptions. Legitimate Interests For platform improvement, fraud prevention, analytics, and security. We conduct balancing assessments to ensure your rights are not overridden. Consent For marketing communications and optional cookies. Legal Obligation To comply with financial, tax, and regulatory requirements. You may withdraw consent at any time.

We use personal information to: • Provide AI-powered automation services • Categorize and analyze communications • Generate AI-assisted draft responses • Process billing • Provide customer support • Maintain security • Comply with law

Leaptra uses AI systems to assist with: • Workflow automation • Email categorization • Draft content generation Important Disclosures: • AI outputs require human review. • We do not make legally binding decisions without human oversight. • AI may produce inaccurate outputs and should be reviewed. • Customer Gmail, CRM, or healthcare data is not used to train public AI models. • AI tools are not designed for high-risk AI applications under the EU AI Act.

Leaptra integrates with Gmail only after explicit user authorization. Background Processing Email content may be processed at user-defined intervals to: • Categorize messages • Apply labels • Generate draft responses Leaptra: • Does NOT automatically send emails • Does NOT automatically delete emails Google API Limited Use Statement Our use of Google APIs complies with Google API Services User Data Policy, including Limited Use requirements: • Data is used only for user-facing functionality • Data is not used for advertising • Data is not sold • Human access is restricted to support, security, or legal compliance Users may revoke Gmail access at any time via Google settings.

Leaptra: • Does NOT sell personal data • Does NOT share data for cross-context behavioral advertising • Does NOT use CRM or Gmail data for targeted advertising

We use: • Essential cookies (authentication, session management) • Analytics cookies (performance measurement) • Limited marketing cookies (Leaptra campaigns only) Where required, we implement consent mechanisms.

We may share information with: • Cloud hosting providers • Payment processors • Analytics providers • CRM integrations • Legal authorities when required Enterprise customers may request a sub-processor list.

Personal data may be processed in the United States. Safeguards include: • Standard Contractual Clauses (SCCs) • Transfer risk assessments • Encryption and access controls • Data Processing Agreements

We implement: • Encryption in transit (TLS) • Role-based access controls • Secure hosting environments • Monitoring for unauthorized access No system is completely secure.

If a confirmed data breach occurs, we will: • Investigate promptly • Notify affected customers where required by law • Support regulatory reporting obligations • Implement remediation measures

Leaptra is not automatically a HIPAA-covered entity. If healthcare customers process Protected Health Information (PHI): • Leaptra may act as a Business Associate • A separate Business Associate Agreement (BAA) is required • Additional contractual safeguards may apply Healthcare customers are responsible for determining regulatory applicability.

Business customers are responsible for: • Obtaining lawful consent • Ensuring lawful data collection • Configuring automation responsibly • Reviewing AI-generated outputs • Complying with applicable privacy laws

U.S. State Privacy Rights Depending on your state, you may request: • Access • Correction • Deletion • Data portability • Opt-out of certain processing EU/UK Rights You may also: • Restrict processing • Object to processing • Object to automated profiling • Lodge a complaint with your supervisory authority Requests may be submitted to: support@leaptra.com We may verify identity before responding. We respond within legally required timelines.

If required by law, Leaptra will designate: • An EU Representative under Article 27 GDPR • A Data Protection Officer where required Contact: support@leaptra.com

Leaptra does not use customer Gmail, CRM, or healthcare data to train public or third-party AI models. We may use aggregated, de-identified data for system improvement.

We may update this Privacy Policy periodically. Updates will be reflected by the "Last Updated" date above.

Leaptra AI Inc. Houston, Texas United States Email: support@leaptra.com Website: www.leaptra.com