Last updated: July 24, 2026 · Version 2.1
Kadropic Labs, Inc. (a Delaware corporation operating from San Francisco, California - “we”, “us”) built LEO Soul around a simple principle: we store zero of your conversation data. This policy explains what we do and do not collect, why, the legal bases we rely on, how long we keep it, who we share it with, and the rights you have - including under the EU/UK GDPR and the California CCPA/CPRA.
soul_state (the learned state) are never persisted by us. On the hosted API we keep only your
account, aggregate turn counts for billing, and standard security logs. With the SDK, in-process, or a
self-hosted deployment, your data never reaches us at all.Kadropic Labs, Inc. is the entity responsible for the Hosted Service. For the personal data in your account (your name, email, billing details), we act as a controller. For any personal data that may appear inside the content you send through the Service, we act only as a processor on your behalf - and, because the Engine is stateless, we do not retain that content at all. If you are a business customer subject to GDPR, our Data Processing Agreement governs that processor relationship.
soul_state - beliefs, calibration, the neural model, the curiosity ledger. It rides in
and out of each request and is stored only by you.Even idempotent retries store only a request fingerprint and the decision action - never content.
| Category | Examples | Why |
|---|---|---|
| Account data | Name, email, hashed password, plan, workspace & team membership, 2FA status. | To create and secure your account and provide the Service. |
| Usage metering | Aggregate per-day counts of turns and decision types (answer / ask / refuse, etc.) - counts only, never content. | To meter quota, bill accurately, and show your analytics. |
| Billing data | Subscription status and identifiers held by Stripe; company name and Tax/VAT number you add. We do not store full card numbers. | To process payments, refunds, and invoices. |
| Operational & security logs | Request metadata (timestamps, status codes, IP, user-agent), audit events, rate-limit signals. | Security, abuse-prevention, debugging, and reliability. |
| Support & comms | Messages you send to support or the contact form, and our replies. | To help you and keep a record of the request. |
| Assistant chats | Messages you send to the in-product LEO Assistant. | To answer you; sent to our AI subprocessor for that purpose (see §8). |
When you run LEO Soul as the Python core SDK in your own process, or as a self-hosted container, all processing
happens inside your own environment. We receive no messages, no soul_state, and no Model Provider
keys. In those modes we are not a recipient of your Customer Content at all. A Self-Hosted Deployment verifies
its license offline - it does not phone home.
We use only the cookies and local storage necessary to run the Service - for example to keep you signed in, remember your theme, and protect against abuse. We do not sell your data and we do not use it for cross-context behavioural advertising. If we ever add optional analytics, we will describe it here and, where required, ask for your consent first.
We do not sell your personal data. We share it only with: (a) subprocessors that help us run the Service, under contract and only as needed (§8); (b) your chosen Model Provider, which receives the request you route to it under its own terms (that relationship is yours, not ours); (c) as required by law or to protect rights, safety, and the integrity of the Service; and (d) in a business transfer (merger, acquisition, financing), subject to this policy.
We rely on a small set of vetted providers to operate the Hosted Service. Current subprocessors:
| Provider | Purpose | Data |
|---|---|---|
| Stripe | Payments & billing | Billing identifiers, subscription status (card data held by Stripe, not us). |
| Cloud hosting & database (Railway-class cloud infrastructure) | Running the app, database, and static site | Account data, metering counts, logs. |
| Email delivery | Transactional email (verification, receipts, alerts) | Email address and message content of the notification. |
| OpenAI | The in-product LEO Assistant only | The chat messages you send to the Assistant. Not used for the metered product turn. |
We remain responsible for our subprocessors’ handling of personal data as required by the DPA. A current subprocessor list is available to Enterprise customers on request, and we will give notice of material changes as described in the DPA.
We operate from the United States, and our subprocessors may process data in the U.S. and other countries. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses (and the UK Addendum / Swiss addendum as applicable), together with supplementary measures. A key safeguard is structural: for product turns there is no conversation content to transfer. Details and a copy of the relevant clauses are available on request and via the DPA.
soul_state: not retained (processed transiently).Passwords are hashed with PBKDF2-HMAC-SHA256; API keys and tokens are stored only as hashes; traffic is served over HTTPS with HSTS in production. Because we do not retain conversation data, the blast radius of any incident is structurally limited. If we determine a breach affects your personal data, we will notify you and, where required, regulators, without undue delay. Full details are on the Security page.
Depending on where you live, you may have the right to access, correct, delete, port, restrict, or object to our processing of your personal data, and to withdraw consent. You can exercise most of these from your dashboard (access, export, and account deletion) or by emailing support@kadropiclabs.com. We will respond within the time required by law (generally 30 days). We will not discriminate against you for exercising your rights. If you are in the EEA/UK and believe we have not handled your data properly, you may lodge a complaint with your local supervisory authority - but we would appreciate the chance to help first.
Marketing email. We send transactional messages (verification, receipts, security, and billing notices) as part of the Service. Any marketing or product-update email carries a one-click unsubscribe link and our postal address; unsubscribing stops all promotional email at once while you keep the essential account messages. You can also opt out any time by emailing us.
If you are a California resident, you have the right to know what personal information we collect and how we use it (described above), to request access and deletion, to correct inaccurate information, and to limit certain uses. We do not sell or “share” personal information for cross-context behavioural advertising, and we do not use sensitive personal information beyond the purposes described here. You can exercise these rights as in §12; we will verify your request and will not discriminate against you for making one. You may use an authorised agent.
If you are a resident of a U.S. state with a comprehensive privacy law - including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, and other states whose laws are in force - you have rights similar to those described above: to confirm and access the personal data we hold about you, to correct inaccuracies, to delete it, to obtain a portable copy, and to opt out of targeted advertising, the "sale" of personal data, and certain profiling. We do not sell your personal data, we do not use it for targeted or cross-context behavioural advertising, and we do not profile you in furtherance of decisions that produce legal or similarly significant effects, so there is nothing to opt out of on those fronts - but you may still exercise your access, correction, deletion, and portability rights.
Exercise any of these as described in §12 (dashboard or support@kadropiclabs.com). We honour recognised universal opt-out signals such as Global Privacy Control (GPC) where required. If we decline a request, you have the right to appeal: reply to our decision or email us with "Appeal" in the subject line, and we will review and respond within the time your state’s law allows. We do not use sensitive personal data except as needed to provide the Service and will not discriminate against you for exercising a right.
The Service is not directed to children under 18 and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
We may update this policy; material changes will be posted here with a new “Last updated” date and, where appropriate, additional notice.
Kadropic Labs, Inc. (a Delaware corporation) · 584 Castro St. 4063, San Francisco, California, USA · support@kadropiclabs.com · kadropiclabs.com. For data-protection questions, email us with “Privacy” in the subject line.