← getleaked.dev

Privacy Policy

Last updated June 16, 2026

This Privacy Notice for Leaked ('we', 'us', or 'our'), describes how and why we might access, collect, store, use, and/or share ('process') your personal information when you use our services ('Services'), including when you:

  • Visit our website at https://www.getleaked.dev or any website of ours that links to this Privacy Notice
  • Use Leaked. A security scanner for SaaS applications. Founders paste a URL and receive a security score with AI-generated fixes specific to their stack.
  • Engage with us in other related ways, including any marketing or events

Questions or concerns? Contact us at privacy@getleaked.dev

Summary of Key Points

This summary provides key points from our Privacy Notice. You can find more details by using the table of contents below.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the choices you make.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we collect any information from third parties? We do not collect any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties.

How do we keep your information safe? We have adequate organisational and technical processes in place to protect your personal information.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? Visit getleaked.dev/contact or contact us. We will consider and act upon any request in accordance with applicable data protection laws.

Table of Contents

  1. 1. What information do we collect?
  2. 2. How do we process your information?
  3. 3. What legal bases do we rely on?
  4. 4. When and with whom do we share your information?
  5. 5. Do we use cookies?
  6. 6. Do we offer AI-based products?
  7. 7. How do we handle social logins?
  8. 8. Is your information transferred internationally?
  9. 9. How long do we keep your information?
  10. 10. How do we keep your information safe?
  11. 11. Do we collect information from minors?
  12. 12. What are your privacy rights?
  13. 13. Controls for do-not-track features
  14. 14. Do United States residents have specific rights?
  15. 15. Do we make updates to this notice?
  16. 16. How can you contact us?
  17. 17. How can you review, update, or delete your data?

1. What information do we collect?

Personal information you disclose to us. We collect personal information that you voluntarily provide when you register, express interest in our products, or contact us. This includes: names, email addresses, usernames, passwords, contact preferences, billing addresses, and debit/credit card numbers.

Payment data. Payment data is handled and stored by Stripe. See their privacy notice at stripe.com/privacy.

Social media login data. If you register using a social media account, we collect certain profile information from that provider.

Information automatically collected. We automatically collect IP address, browser characteristics, device data, and usage information when you visit our Services. We also collect information through cookies — see our Cookie Notice.

2. How do we process your information?

  • To facilitate account creation and authentication
  • To deliver and facilitate delivery of services
  • To respond to user inquiries and offer support
  • To send administrative information
  • To fulfil and manage your orders and payments
  • To request feedback
  • To protect our Services from fraud
  • To identify usage trends and improve our Services
  • To save or protect an individual's vital interest

3. What legal bases do we rely on?

We only process your personal information when we have a valid legal reason. Legal bases include:

  • Consent — when you have given permission for a specific purpose
  • Performance of a contract — to fulfil our contractual obligations to you
  • Legitimate interests — to analyse usage, prevent fraud, and improve user experience
  • Legal obligations — to comply with applicable law
  • Vital interests — to protect your safety or the safety of others

4. When and with whom do we share your information?

We may share your data with third-party vendors who perform services on our behalf. The third parties we share personal information with include:

  • AI Service Providers — Anthropic
  • Social login — Google account
  • Email communications — Resend
  • Infrastructure — Supabase
  • Billing — Stripe
  • Analytics — Plausible
  • Hosting — Vercel

We may also share information during business transfers such as mergers or acquisitions.

5. Do we use cookies?

We may use cookies and similar tracking technologies to gather information when you interact with our Services. Specific information is set out in our Cookie Notice.

6. Do we offer AI-based products?

Yes. We offer AI-powered features through Anthropic. Your input and output may be shared with Anthropic to enable these features. Our AI products are designed for: AI insights, natural language processing, and text analysis.

You must not use our AI products in any way that violates Anthropic's terms or policies.

7. How do we handle social logins?

If you register using a social media account (such as Google), we receive certain profile information including your name, email address, and profile picture. We use this information only as described in this Privacy Notice.

8. Is your information transferred internationally?

Our servers are located in the United States. If you are in the EEA, UK, or Switzerland, your information may be transferred to and processed in the US. We use the European Commission's Standard Contractual Clauses to protect your data during international transfers.

9. How long do we keep your information?

We keep your personal information only as long as necessary for the purposes set out in this notice. We will not keep your information for longer than twelve (12) months past the termination of your account.

10. How do we keep your information safe?

We have implemented appropriate technical and organisational security measures to protect your personal information. However, no electronic transmission over the Internet can be guaranteed 100% secure. You should only access the Services within a secure environment.

11. Do we collect information from minors?

We do not knowingly collect data from or market to children under 18 years of age. If you become aware of any data we may have collected from children under 18, please contact us at privacy@getleaked.dev.

12. What are your privacy rights?

In Short: Depending on your state of residence in the US or in some regions, such as the European Economic Area (EEA), United Kingdom (UK), and Switzerland, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

In some regions (like the EEA, UK, and Switzerland), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us using the contact details provided in section 16 or updating your preferences. Please note that this will not affect the lawfulness of the processing before its withdrawal.

Opting out of marketing and promotional communications

You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us using the details provided in section 16. You will then be removed from the marketing lists. However, we may still communicate with you for service-related purposes.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

  • Log in to your account settings and update your user account.
  • Contact us using the contact information provided.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

Cookies and similar technologies

Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services. For further information, please see our Cookie Notice: getleaked.dev/cookie-policy.

If you have questions or comments about your privacy rights, you may email us at privacy@getleaked.dev.

13. Controls for do-not-track features

We do not currently respond to Do-Not-Track browser signals as no uniform standard has been finalised. If a standard is adopted in the future, we will update this notice accordingly.

14. Do United States residents have specific privacy rights?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you.

Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

CategoryExamplesCollected
A. IdentifiersContact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account nameYES
B. Personal information (California Customer Records statute)Name, contact information, education, employment, employment history, and financial informationYES
C. Protected classification characteristicsGender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic dataNO
D. Commercial informationTransaction information, purchase history, financial details, and payment informationYES
E. Biometric informationFingerprints and voiceprintsNO
F. Internet or other similar network activityBrowsing history, search history, online behaviour, interest data, and interactions with our and other websitesYES
G. Geolocation dataDevice locationYES
H. Audio, electronic, sensory, or similar informationImages and audio, video or call recordings created in connection with our business activitiesNO
I. Professional or employment-related informationBusiness contact details, job title, work history, and professional qualificationsNO
J. Education InformationStudent records and directory informationNO
K. Inferences drawn from collected personal informationInferences drawn from any of the collected personal information listed above to create a profile or summaryNO
L. Sensitive personal informationNO

Data Retention by Category

  • Category A — As long as the user has an account with us
  • Category B — As long as the user has an account with us
  • Category D — As long as the user has an account with us
  • Category F — 1 year
  • Category G — 6 months

Your Rights

  • Right to know whether or not we are processing your personal data
  • Right to access your personal data
  • Right to correct inaccuracies in your personal data
  • Right to request the deletion of your personal data
  • Right to obtain a copy of the personal data you previously shared with us
  • Right to non-discrimination for exercising your rights
  • Right to opt out of targeted advertising, sale of personal data, or profiling

Request Verification

Upon receiving your request, we will need to verify your identity. We will only use personal information provided in your request to verify your identity or authority to make the request.

Appeals

If we decline to take action regarding your request, you may appeal our decision by emailing us at privacy@getleaked.dev. If your appeal is denied, you may submit a complaint to your state attorney general.

California 'Shine The Light' Law

California Civil Code Section 1798.83 permits California residents to request information about categories of personal information we disclosed to third parties for direct marketing purposes. Submit such requests using the contact details in section 16.

How to Exercise Your Rights

To exercise these rights, visit getleaked.dev/contact or email privacy@getleaked.dev.

15. Do we make updates to this notice?

We may update this Privacy Notice from time to time. We will notify you of material changes by updating the date at the top of this page or by sending you a notification directly.

16. How can you contact us?

17. How can you review, update, or delete your data?

Based on applicable laws, you may have the right to request access to, correct, or delete the personal information we collect from you. To submit a request, visit getleaked.dev/contact.

© 2026 Leaked. All rights reserved.