Legal

Privacy Policy

Effective November 9, 2026

This policy explains what LEO ("LEO," "we," or "us") collects when you use the LEO website and app (the "Service"), why, who we share it with, and the choices you have. The short version: we collect what we need to answer your zoning questions and run your account. We do not sell your information, and we do not use advertising trackers.

1. What we collect

Information you give us.

Account details: your name, email address, the role you pick (for example homeowner or builder), and, if you enter one, a professional license number. Your password is stored only as a one-way hash; we can't read it.
Two-step login: if you turn it on, an encrypted authenticator key and hashed backup codes.
Your questions and properties: the towns, addresses, and parcels you look up, the questions you ask, the answers LEO gives, and any values you change (such as zone, lot size, or wetlands).
Projects and files: anything you add to a project, including documents and photos you upload.
Reports and feedback: what you write when you report an answer or use the Feedback button, the page you were on, and an email address if you choose to give one.
Payments: if LEO starts charging and you subscribe, our payment processor handles your card. We never see or store your full card number.

Information collected automatically.

Cookies: a sign-in cookie that keeps you logged in, and a cookie that counts the free answers given to a browser that is not signed in. These are needed for the Service to work. We do not use advertising or cross-site tracking cookies.
On your device: your light or dark theme choice, stored in your browser.
Network address: we use your IP address to limit abuse (for example, free answers and feedback per address). Where we keep it for that purpose, we store a scrambled one-way version, not the address itself.
Server logs: our hosting provider records standard technical logs (such as time, page requested, and errors) to keep the Service running and secure.

2. How we use it

To answer your questions, look up parcels, and show you the rules that apply.
To run your account: sign-in, password resets, two-step login, and saving your questions and projects.
To improve LEO: we read reported answers and feedback, and review questions and answers to find and fix mistakes in the zoning data.
To keep the Service safe: preventing abuse, fraud, and attacks, and enforcing our Terms of Use.
To contact you about your account, such as password-reset emails and important changes to the Service. We will not send you marketing email without your permission.

3. Who we share it with

We share information only with service providers that help us run LEO, and only as much as they need:

Railway hosts the website and app.
Supabase stores our database and the files you upload.
Anthropic provides the AI model that writes answers. Your question, the town and parcel details, and the relevant regulations are sent to it to produce an answer. Under Anthropic's commercial terms, this data is not used to train its models.
Cloudflare provides our domain name and DNS.
Email delivery (such as Resend) sends password-reset and account emails.
Stripe processes payments, if and when LEO charges for plans.
Public map services (town, state, and FEMA GIS servers) receive the address or location you look up, so we can find the parcel, zone, and flood and wetlands layers.

If you join a company plan, the company's administrators can see that you are a member. We may also disclose information if the law requires it, to protect anyone's rights or safety, or as part of a merger or sale of the business, in which case this policy would continue to apply to it.

We do not sell or rent your personal information, and we do not share it for targeted advertising.

4. How long we keep it

We keep your account information and saved questions for as long as your account is open. If you ask us to delete your account, we delete or anonymize your personal information within 30 days, except where we must keep something to meet a legal obligation, resolve a dispute, or prevent abuse. Backups are overwritten on a rolling schedule. Feedback and reports may be kept, without your name, to improve the zoning data.

5. Your choices and rights

You can see and update your account details on the Account page.
You can ask us for a copy of your information, to correct it, or to delete it, by contacting us at the Feedback button on any page. We will answer within 45 days.
Connecticut residents have these rights under the Connecticut Data Privacy Act, and you may appeal a decision we make about your request by replying to our answer. We will not treat you differently for using them.
You can block or clear cookies in your browser, but you will not be able to stay signed in.

6. Security

We protect your information with encrypted connections (HTTPS), hashed passwords, optional two-step login, and access limited to the people who run LEO. No system is perfectly secure, so we can't promise that information will never be accessed without permission. If a breach affects you, we will tell you as the law requires.

7. Children

LEO is for adults. It is not meant for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

8. Changes to this policy

If we change this policy, we will update the date at the top. If a change is significant, we will tell you by email or in the app before it takes effect.

9. Contact us

Questions or requests about your privacy: the Feedback button on any page.