Privacy Policy

Who we are

Leafscale, LLC (“Leafscale,” “we,” “us,” or “our”) is a Louisiana limited liability company at 70380 Highway 21, STE 2 PMB 299, Covington, LA 70433.

This policy covers leafscale.com, portal.leafscale.com, and hosted Leafscale products (including Isurus tenants). It does not cover Paddle. Paddle has its own privacy policy at https://www.paddle.com/legal/privacy.

Analytics preferences

You can control whether first-party Umami analytics loads in this browser. The setting is stored as ls_analytics on this device only. Missing means enabled, matching the toggle default below.

If you disable analytics, we do not unload a script already on this page. The next page load honors the setting and will not inject Umami.

Roles

• Website visitors, contact form, portal account, billing contact, and support tickets: Leafscale is the controller.
• Content inside a customer’s Isurus tenant (repos, issues, pull requests, CI logs and secrets, tenant user accounts, and similar tenant data): the customer organization is the controller; Leafscale is the processor.
• Cards, tax, invoices, and Paddle checkout: Paddle is an independent controller. Leafscale does not receive card numbers.

What we collect

Information you provide

Name, email, organization, portal credentials, billing contact details, support tickets, and contact-form messages.

Website analytics

When ls_analytics is not disabled, we load first-party Umami at /_stats. Umami may record page, referrer, browser and device class, country, and screen size. This is not advertising measurement.

Cookies and local storage

• ls_session — a first-party session/logging identifier. Duration: 30 days. HTTP-only. It is not used to enable site features.
• ls_privacy_notice — remembers that you have acknowledged the privacy notice. Stored in localStorage.
• ls_theme — stores your color theme preference. Stored in localStorage.
• ls_analytics — stores this device’s analytics preference. Stored in localStorage.

Portal

Account, subscription, plan (size, seats, and region), and license state. Not card numbers or other PAN data.

Hosted product (as processor)

Customer content plus operational logs needed to run the tenant.

Security logs on portal and product systems may include IP addresses. The marketing site may also record a hash of a visitor IP when it issues the ls_session cookie. That logging is not controlled by the analytics toggle.

Why we use information

We use personal information for these purposes and lawful bases:

• Contract: to create and manage your portal account, provide the product, and support you.
• Legitimate interests: security, and improving Leafscale company systems. We do not mine customer repositories for those interests.
• Consent: the analytics toggle on this page, and marketing email if we send it and you have agreed.
• Legal obligation: tax and accounting. Much of that processing is at Paddle.

AI

Tenant content is not used to train AI models and is not shared across customers.

Data residency

Tenant content and backups stay in the region chosen at checkout. The portal, marketing site, and Leafscale company systems may run outside that region. Paddle processes payments in Paddle’s jurisdictions.

Sharing

We do not sell personal information.

We share information with subprocessors who help us operate the services, with Paddle for checkout, when the law requires it, and with a successor in a company transaction. We do not share tenant source with other customers or for advertising.

Subprocessors

We use the following categories of subprocessors and providers. We name a vendor only when it is certain:

• Regional hosting for the tenant region chosen at checkout.
• Email delivery.
• First-party Umami analytics (served at /_stats).
• Paddle for payments. Paddle is a payment provider, not a tenant-content subprocessor.

Retention

• Analytics: retained in aggregated form.
• Contact form: 24 months.
• Portal account: 90 days after closure, except billing records kept as required.
• Tenant content: for the life of the subscription, then an export window, then deletion (see the Product Terms).
• Security logs: about 12 months unless an incident requires longer.

Your rights

Under GDPR and UK GDPR you may have the right to access, correct, delete, or port your personal data, to object or restrict processing, and to withdraw consent.

Under the CCPA you may have the right to know, delete, and correct personal information, and to opt out of sale. We do not sell personal information.

Tenant end users should ask their organization admin first. Leafscale processes tenant content on the customer’s instructions.

To make a request, use the customer portal, email support@leafscale.com, or use the contact form.

Data processing agreement

A data processing agreement (DPA) is available on request.

Cookies

We use minimal first-party cookies and localStorage as listed above. We do not use advertising cookies or ad pixels. Analytics is first-party Umami, controlled by the toggle on this page.

Security

We use TLS in transit, access control, and dedicated tenant isolation for hosted products. No security measure is perfect; we do not claim that data can never be compromised.

Children

The services are not directed at children under 16. We do not knowingly collect personal information from children under 16.

International transfers

Leafscale is a US company. Where Leafscale is the controller and transfers personal data from the EEA, UK, or Switzerland, we use Standard Contractual Clauses or an equivalent mechanism.

Changes

We will post updates to this page and set a new effective date. For material changes we will also notify you by email or through the portal.

Contact

Leafscale, LLC
70380 Highway 21, STE 2 PMB 299
Covington, LA 70433

Product support: portal tickets (primary) or support@leafscale.com
Billing: billing@leafscale.com
Phone: (985) 212-8998
Payments and refunds: also paddle.net