Privacy Policy
Last updated: July 30, 2026
Who we are
Leo is operated by Aslan AI Systems LLC, a company registered in the United States. We are the controller for the data described below, and a processor acting on the business owner's instructions for the call data of their customers. Questions go to info@leoanswers.com.
What we collect from business owners
When you create an account we process your name, email address, business name, address, hours, services, and the operating rules you configure. Billing is handled by Stripe: we store your subscription status and the last four digits and brand of your card, never the full card number. If you connect Google Calendar we store an access token scoped to your calendars, plus the busy or free times and the appointments Leo creates on your behalf.
What we process from your callers
For each call we process the caller's phone number, the call audio, its transcript, and the details the caller gives (name, requested service, appointment time, and any message). Call recording is a per-tenant setting. Where a business turns it on, the assistant announces at the start of the call that the caller is speaking with an automated assistant and that the call may be recorded, before any conversation is processed.
Why we are allowed to process it
For business owners: to perform the contract you signed up for, and our legitimate interest in operating, securing, and supporting the service. For callers: the business you called is the controller, and the announcement at the start of the call is the basis for recording. If you are a caller and want your data removed, contact the business you called or write to us and we will pass the request on.
Sub-processors
We use: Twilio (telephony — phone numbers, call transport, SMS, recording storage), Google LLC (conversational AI, speech, calendar integration, cloud infrastructure), OpenAI (speech processing), Microsoft (speech synthesis), Stripe (payments), Neon (database hosting), Resend (transactional email), and Vercel (website and portal hosting). Each processes data only to deliver the features above and under its own terms. This list is kept current; material changes are announced before they take effect.
How long we keep it
Retention is configured per business. Call logs, recordings, documents, notifications, and audit records each have their own window; a scheduled job deletes anything past it, and a recording is never unlinked before the provider copy is deleted. Account and billing records are kept while your subscription is active and afterwards only as long as tax and accounting law requires. Contact and demo enquiries are kept while we are in touch with you.
We do not sell your data
We do not sell or share personal information for cross-context behavioural advertising, and we do not use call content to train third-party AI models. We run no advertising trackers on this website; the only analytics we use is Vercel Analytics, which is cookieless and does not build a profile of you.
Your rights
You may ask us to access, correct, export, or delete your data, and to restrict or object to processing. Business owners can export or delete their own account data from the portal. Otherwise email info@leoanswers.com; we verify the request and respond within 30 days. If you are in a US state with its own privacy law, or in the EEA or UK, you may also complain to your regulator.
Changes
If we make a material change we update the date above and notify account holders by email before the change takes effect.