Privacy Policy

Who we are

Shop with Leo ("Leo", "we", "us") is operated by Lionfish Tech Advisors. This policy explains what information we collect when you use the Shop with Leo website and apps, why we collect it, and the choices you have.

Account information: email and password

When you create an account or join the Private Beta, we collect your name and email address. If you sign in with email and password, your password is stored only as a cryptographic hash by our authentication provider — we never see or store your plain-text password. If you sign in with Google, we receive your name and email from Google and never see your Google password.

We use your email address to sign you in, to notify you when your account is live, and to respond to support requests. We will never sell your email address.

Session tokens

When you sign in, our authentication provider issues session tokens (a short-lived access token and a refresh token) that keep you signed in between visits. These tokens are stored on your device in browser storage or the app's secure storage and are sent to our backend over HTTPS to authenticate your requests. Tokens expire automatically; signing out removes them from your device. We do not use session tokens for advertising or cross-site tracking.

Microphone and speech (voice Ask)

If you use the voice Ask feature, the app requests access to your device's microphone. Audio captured while you hold the microphone button is used solely to transcribe your spoken question into text so Leo can answer it. Audio is processed over an encrypted connection and is not used to identify you, build a voice profile, or for advertising. Microphone access is only active when you explicitly start voice input, and you can revoke the permission at any time in your device or browser settings. Declining microphone permission does not affect any other feature — you can always type your Ask instead.

Ask history

The questions you ask Leo, and Leo's responses, are saved to your Ask history so you can revisit past recommendations and so Leo can personalize future answers to what matters to you. Your Ask history is private to your account and is never sold or shared with advertisers. You may ask us to delete your history at any time (see "Your choices" below).

Affiliate and outbound links

Leo's recommendations include links to third-party retailers and vendors. Some of these are affiliate links, which means we may earn a commission if you make a purchase after clicking them — at no extra cost to you. When you click an outbound link, the destination site may record that you arrived from Shop with Leo and will apply its own privacy policy to any information you give it. We do not send your name, email address, or Ask history to retailers along with these links. We encourage you to read the privacy policy of any site you visit.

How we protect your information

All traffic between your device and our services is encrypted with HTTPS/TLS. Access to account data is restricted to authorized systems and a small administrative team, and every account's data is isolated by row-level access controls on our backend.

What we do not do

• We do not sell your personal information to anyone.
• We do not share your email address, Ask history, or voice input with advertisers.
• We do not record your microphone except when you actively use voice Ask.
• We do not use your data to train advertising profiles.

Data retention

We keep your account information and Ask history for as long as your account is active. Support conversations are kept only as long as needed to resolve your request. When you ask us to delete your account, we delete your personal information and Ask history within 30 days, except where we must retain records for legal reasons.

Your choices and rights

• Access or correct your account information by contacting us.
• Revoke microphone permission in your device or browser settings at any time.
• Request deletion of your Ask history or your entire account.
• Unsubscribe from non-essential emails at any time.

Depending on where you live, you may have additional rights under laws such as the CCPA or GDPR. To exercise any of these rights, contact us using the details below.

Children

Shop with Leo is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

If we change this policy, we will post the updated version on this page and update the "Last updated" date above. Significant changes will be announced by email to registered users.

Contact us

Questions about this policy or your data? Email us at support@lionfishtechadvisors.com or use our support form.

Lionfish Tech Advisors · shopwithleo.com