Privacy

What Leftoff is

Leftoff keeps short notes about your work (we call them saves) so that any AI you connect, and anyone you invite, can pick up where you left off. This page says what we keep, why, who can see it, and how to take it away.

What we keep

• Your account: name and email address, from the sign-in you choose or that you type in.
• If you answer “About you”: what you use Leftoff for, and your university or organisation if you add one. It only changes the tips you see. Edit or clear it on Your data.
• If you use “My card”: the lines you or your AIs add about how you work, facts about you and what to avoid. They are sent only to AI apps you connected yourself. Edit or remove them on My card; they are in your download and are deleted with your account.
• Your projects and what is in them: saves, decisions, next steps, topics, and any chats you paste in or import.
• A log of reads: which AI app read which project, when, and how much. It holds no copy of what was read.
• Guest links you make, workspaces you belong to, and AI apps you block.

What we never keep

Passwords, API keys, tokens and private keys are hidden before anything is saved, so they are not stored. This is done by pattern matching, which catches the common formats but not every possible secret, so please keep secrets out of your saves anyway. We run no advertising trackers.

Who can see it

• Your private projects and Inbox: only you.
• Team projects: the people invited to them, with the role they were given.
• Workspace projects: the workspace's admins also see project names, owners and rules, and on Business can download a record of reads and saves.
• AI apps: only the ones you connect, and only what they ask for. Once an AI app has read something, that app's own privacy policy applies to it.

Who helps us run it

Clerk handles sign-in. Neon hosts our database. Vercel runs our servers, in Frankfurt, Germany. Resend sends our emails once email is switched on. Each processes data only to provide its part of the service.

How long we keep it

Until you delete it, or until your workspace's own schedule deletes old saves (a Business option). Deleting your account removes everything private to you straight away. Our database provider keeps backups for a short time so the service can be restored after a fault; deleted data stays in those backups until they age out, and is never restored for any other reason.

Your choices

• Download everything you have in Leftoff, in one file, from Your data.
• Block any AI app from your account, from Your data.
• Delete your account from Your data. In shared projects, the chats you pasted and your comments are deleted. Saves you wrote stay with those teams, shown as by Deleted user, unless you choose to remove them too.

Your rights

Wherever you live, you can see, download, correct or delete what Leftoff holds about you, and withdraw consent by deleting your account. Your data has Download everything, About you and Delete my account; for anything else, write to {{contact email}}.

In India (Digital Personal Data Protection Act, 2023) you can also ask for a summary of what we process and who we share it with, name someone to act for you, and raise a grievance with our grievance officer at {{contact email}}. If we don't resolve it, you can complain to the Data Protection Board of India.

In the EU and UK (GDPR) we rely on running the service you signed up for (contract) and, for optional emails and analytics, on your choice. You can object, restrict processing, and complain to your data protection authority.

Children and students

Leftoff is for people 18 and over. Students aged 13 to 17 may use it only through a school or university workspace that has agreed to be responsible for their use, including getting a parent's consent where the law asks for it. We don't knowingly keep data about children under 13; if you think we do, tell us and we'll delete it.

Where data goes

Your data is stored in the EU and processed by the services listed above, some of which are based in the United States. Where data leaves India or the EU, we rely on those providers' standard data protection terms.

If we ever have a breach that affects your data, we'll tell you and the authorities that need to know, as the law requires.

The old waitlist

Before Leftoff opened, people could join a waitlist. We kept those email addresses, and a salted hash of the IP address used, only to limit abuse. We use them once, to say Leftoff is open. Email us to have yours removed.

Contact

Questions, or anything you want removed: {{contact email}}.