Privacy Policy

We collect information that you provide directly to us when you create an account, use our services, or communicate with us.

If you connect Instagram

When you connect your Instagram professional account, we receive its username and ID, and a key that lets us read and answer its messages for you. We store that key encrypted.

• We keep the DMs and comments people send you, the replies you send from Leenkies, and the notes you add. We also keep copies of the photos, videos and other media in them, and of the posts people comment on.
• For each person who messages or comments, we keep their name, their Instagram username, the ID Instagram gives us for them, and whether they follow you. They're added to your contacts.
• If someone unsends a message, we delete it from your inbox, along with our copy of anything they sent with it.
• Links in the replies you send become Leenkies short links. A link sent to one person, in a DM or a private reply, is made just for them, so when they open it we note that they did and when, and show it on their contact and in your inbox. Like other short link clicks, we also record the kind of device, the country and the site it was opened from. If you delete that contact, their link keeps working but no longer tells you who opened it.

We use this only to run your inbox and your contacts. You can delete it at any time (see Deleting your Instagram data).

We use the information we collect for various purposes, including:

• Providing, maintaining, and improving our Services.
• Personalizing your experience and providing content relevant to your interests.
• Processing transactions and sending related information, including confirmations and invoices.
• Sending technical notices, updates, security alerts, and support messages.
• Responding to your comments, questions, and requests.
• Monitoring and analyzing trends, usage, and activities in connection with our Services.
• If you opt in, sending you news about new features, offers and updates. Every such email will include a link to unsubscribe, and you can withdraw consent at any time.

We do not sell your personal data. We may share information about you as follows:

Requests from public authorities

Sometimes a court, the police or a regulator asks us for someone's data. When that happens:

• A director checks that the request is lawful before we share anything.
• If a request is unclear, too broad or looks unlawful, we ask for it to be narrowed, or we refuse or challenge it.
• We share only the minimum the request needs.
• We keep a record of every request, what we decided and why.

We use the following third-party services to operate Leenkies. Each service has its own privacy policy governing how they handle your data:

• Stripe: Processes payments for subscriptions, digital product sales, bookings and invoices. Every Leenkies account, on every plan, has a Stripe billing customer holding your name and email address. Stripe collects payment information directly and is PCI-DSS compliant. Stripe Privacy Policy
• Google: Lets you sign in with Google, which shares your name, email address and profile photo with us. It also provides calendar sync and Google Meet links for bookings: when you connect your calendar, we see when you're busy and can create events on your behalf. Google Privacy Policy
• Meta (Instagram): If you connect Instagram, Meta sends us the DMs and comments for your account, and we send your replies through Meta. We ask only for permission to see your account's basic details and to read and answer its messages and comments. Meta Privacy Policy
• Paystack: Processes payments for digital product sales and bookings for sellers who connect a Paystack account. Paystack collects payment information directly. Paystack Privacy Policy
• Resend: We use Resend to send our emails, such as account, order and booking emails. Resend Privacy Policy
• Intercom: Runs the support chat in your dashboard. We share your name, email address, profile photo, username, time zone, currency, sign-up date and subscription details with it, plus a record of what you do in your account, such as publishing a page or making a sale, with amounts. That way we can help you quickly when you get in touch. Intercom Privacy Policy
• Hetzner: Hosts the servers that run Leenkies, in Germany. Hetzner Privacy Policy
• Scaleway: Stores the files you upload, such as images and digital products, in its European data centers. Scaleway Privacy Policy
• Cloudflare: Protects and delivers our site. It sees your IP address and approximate country when you visit. Cloudflare Privacy Policy
• New Relic: Stores our app's logs, which we use to find and fix problems. Logs can include IDs, such as your user ID and the IDs of connected Instagram accounts and their messages. New Relic Privacy Policy
• Google Analytics: With your consent, we use Google Analytics 4 to collect anonymized usage data about how you interact with our platform. Google Analytics uses cookies to distinguish users and track sessions. No personally identifiable information is shared with Google. Google Privacy Policy
• Meta: With your consent, we use Meta's advertising tools on the Leenkies website (not on the pages people build here) to measure how well our ads work. This tells Meta about visits and steps such as signing up or choosing a plan. To do this we may share hashed (scrambled) identifiers such as your email address, along with technical details like your IP address, browser and cookie IDs. Meta Privacy Policy

We request only the minimum permissions necessary: calendar read/write access to manage bookings and the ability to create Google Meet links for virtual appointments.

Page Owner Tracking Services

Leenkies users (page owners) may optionally connect the following third-party analytics and advertising services to their public pages. When enabled, these services may collect data about page visitors:

• Google Analytics (user-configured): Page owners may add their own Google Analytics 4 measurement ID to track visitor activity on their pages. Google Privacy Policy
• Meta (Facebook) Pixel: Page owners may add a Meta Pixel to track conversions and build advertising audiences. Meta Privacy Policy
• TikTok Pixel: Page owners may add a TikTok Pixel to track conversions from TikTok ad campaigns. TikTok Privacy Policy

Page owners may also connect their own Mailchimp or Kit account. When they do, the name and email address (and, for Mailchimp, the phone number) of their contacts, such as people who buy from them, book with them or fill in their contact form, are copied to that account, where the page owner's own privacy practices apply.

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Account Data: Processed on the basis of contract performance — necessary to provide you with our services.
• Usage Data: Processed on the basis of legitimate interest — to improve and secure our platform.
• Billing Data: Processed on the basis of contract performance and legal obligation — necessary to process payments and comply with tax and accounting requirements.
• Marketing Emails: Processed on the basis of consent — you may opt in to receive marketing communications and withdraw consent at any time.
• Transactional Emails: Processed on the basis of contract performance — necessary to deliver service-related communications such as order confirmations and appointment reminders.
• Analytics Cookies: Processed on the basis of consent — analytics cookies are only set after you explicitly accept them via the cookie consent banner. You may withdraw consent at any time by clearing your browser storage, and the consent banner will reappear.
• Advertising Measurement: Processed on the basis of consent in regions that require it (such as the EEA, the UK and Switzerland); in other regions it is on by default. Your cookie choice applies to your account too.

We and some of our service providers (including Stripe, Paystack, Google, Meta, Resend, Intercom, Cloudflare and New Relic) are based outside the European Union. When your data is transferred to us or to these providers, it may be processed in countries that don't offer the same level of data protection as the EU.

We rely on our providers' data protection terms, such as the Standard Contractual Clauses approved by the European Commission, to protect these transfers.

We use essential cookies necessary for the platform to function, such as session and authentication cookies. These do not require consent.

When you're signed in, the Intercom support chat in your dashboard sets its own cookies so it can keep your conversations with us together.

When someone follows a Leenkies short link, we set a sid cookie for 180 days so the link's owner can see how many different people clicked it. It holds a random ID and nothing else.

Leenkies also counts visits to the pages people build here, for their owners. We record the type of device, the country, the site a visitor came from and what they clicked, using a random ID that's kept in the browser only until the tab is closed. We delete these individual visits, and short-link clicks, after 60 days. After that we keep only daily totals for pages and a running click count for each short link.

In addition, with your explicit consent, we use Google Analytics 4 which sets the following cookies:

• _ga: Used to distinguish unique users. Expires after 2 years.
• _ga_<container-id>: Used to persist session state. Expires after 2 years.

With the same consent, Meta's advertising tools on the Leenkies website set cookies (such as _fbp and _fbc) that last about 90 days, and we may keep their IDs on your account to measure our ads. If you later decline cookies, we stop and delete them.

Analytics and advertising cookies are only set after you explicitly consent via the cookie banner shown to users in regions where consent is required (such as the EEA, UK, and Switzerland). In other regions, this data is collected by default.

You can withdraw consent at any time by clearing your browser's local storage. The consent banner will reappear on your next visit. You can also set your browser to refuse cookies, though some parts of the platform may not function properly.

Page Owner Tracking

Leenkies users (page owners) may enable third-party analytics and advertising pixels on their pages, including Google Analytics, Meta (Facebook) Pixel, and TikTok Pixel. When enabled, these services may set their own cookies and collect visitor data as described in their respective privacy policies. These tracking scripts are only loaded after you provide consent in jurisdictions where consent is required. You can withdraw consent at any time by clearing this site's data in your browser; the consent banner will then ask again.

We retain your personal information for as long as necessary to provide you with our services and as described in this Privacy Policy.

• Active Accounts: We retain your data while your account is active and for a reasonable period thereafter.
• Transaction Records: We keep payment and transaction records for at least 7 years, as tax and accounting rules require.

Deleting your account

You can delete your account yourself at any time from your account settings, or ask us to by emailing [email protected]. Here's what happens:

• We don't send you a copy of your data when you delete your account, so download anything you want to keep first.
• Your account is deleted on or shortly after 14 days. You can sign in and cancel the deletion at any time before then.
• If you never made a paid sale or took a paid booking, we then permanently delete your account and everything in it, including your pages, products, contacts, uploaded files and analytics.
• If you did, we keep your sales and booking records for at least 7 years, as tax and accounting rules require. We also keep your name, your products and booking types, and the files of products people paid for, so buyers can still use the download links they were sent until those links expire. We remove your email address, username, profile photo, time zone and sign-in details, and delete your pages, contacts, short links, analytics, availability, projects and clients.
• Either way, we cancel any active subscription and delete your profile from our support tool. In our own systems we keep only a secured one-way fingerprint of your email address, and whether the account was banned. The address can't be read back from the fingerprint; we use it only to recognize the address if it's used to start another free trial. Stripe keeps its own billing record of you under its privacy policy.

Deleting your Instagram data

You can delete your Instagram data without deleting your Leenkies account. There are two ways:

• In Leenkies, go to Settings, then Integrations, then Messaging, and disconnect Instagram.
• In Instagram, open your settings, find Apps and websites, and remove Leenkies. Instagram then lets you ask us to delete your data, and gives you a confirmation code and a link to check that it's done.

Either way, we straight away delete your Instagram connection and its key, every DM and comment in your inbox, your notes on them, and our copies of their media. The people who messaged you stay in your contacts, because they're your own customer records. You can delete them from Contacts at any time. Deleting your Leenkies account also deletes all of your Instagram data.

The inbox is part of Pro. If your Pro plan ends and your account moves to the free plan, we disconnect Instagram and delete the same data in the same way.

We use appropriate technical and organizational measures to protect the personal information that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information.

While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. No method of transmission over the Internet, or method of electronic storage, is 100% secure.

Leenkies is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us so we can delete such information.

Users between 13 and 18 may use Leenkies only under the supervision of a parent or legal guardian who agrees to be bound by our Terms of Service.

Depending on your location, you may have the following rights regarding your personal information:

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.