Privacy Policy
Last updated 2026-07-17
This Privacy Policy explains how AAG Ventures Ltd handles personal data in connection with Lean Hippo (the "Service"). For data you submit about your own team, contacts, or customers ("Customer Data"), you are the controller and we act as your processor under the Data Processing Agreement.
1. Data we collect
Account data: name, email, workspace details, and authentication information. Customer Data: the operational content you and your users enter (projects, tasks, finance records, contacts, notes, messages, meeting content, files). Usage and technical data: log data, device/browser information, and activity needed to operate and secure the Service.
2. How we use data
To provide, maintain, secure, and improve the Service; to authenticate users and prevent abuse; to communicate about the Service (including transactional emails such as sign-up confirmation and invites); to comply with law; and to process Customer Data on your documented instructions.
3. Third-party processors
We use trusted providers to run the Service, including: hosting and delivery (Vercel); database, authentication, and file storage (Supabase); transactional email (Resend); AI transcription and drafting (OpenAI); and payment processing (Stripe), where applicable. These providers process data on our behalf under their own security and privacy commitments. AI features send relevant content (such as meeting audio and text) to the AI provider for processing.
4. International transfers, retention, and security
Data may be processed in countries other than yours. We retain data for as long as your account is active and as needed for legitimate business and legal purposes, then delete or anonymize it within a reasonable period. We apply administrative and technical safeguards, including row-level tenant isolation, access controls, encryption in transit, and private storage. No system is perfectly secure; you are responsible for your credentials and your own backups.
5. Your rights and choices
Depending on your location, you may have rights to access, correct, export, or delete personal data, or to object to or restrict processing. For Customer Data, direct such requests to the relevant customer (controller); we will assist as described in the Data Processing Agreement. To exercise rights about your own account, contact legal@leanhippo.cloud.
6. Cookies, children, and changes
We use strictly necessary cookies to keep you signed in and to operate the Service. The Service is not directed to children under 16. We may update this Policy; material changes take effect on notice or by updating the effective date. Questions: legal@leanhippo.cloud.