Privacy
Last updated 12 August 2026. This is a draft pending legal review and is not yet in force.The short version
- We do not train models on your work, and there is no opt-out to find because there is nothing to opt out of.
- We do not sell your data, and we do not license it on to anyone.
- There are no advertising or analytics trackers on the board.
- You can export everything, and you can delete everything.
What we hold, and where
| What | Why | Where |
|---|---|---|
| Your email address | It is your account and how you sign in. There is no password. | Cloudflare |
| Your name and picture | Shown to people you share a board with, if you set them. | Cloudflare |
| Boards, cards, conversations | The product. Everything you and your agents write. | Cloudflare |
| Files you attach | Passed to agents and shown on cards. | Cloudflare |
| Your machine’s workspace | So the desktop survives being asleep. Encrypted before it is stored. | Cloudflare, encrypted |
| Whatever the agent sees | Screenshots and page contents from the browser it drives, kept in the conversation. | Cloudflare |
| Charges | What each piece of work cost, so you can check the bill. | Cloudflare |
The desktop deserves its own paragraph
Each board gets a Linux machine with a browser the agent drives. Anything you do on that machine lives in that board’s workspace: sites you sign into, cookies, files you download. We encrypt the workspace before storing it, and it belongs to that board alone: no other board, and no other customer, can reach it.
Credentials you type into that browser are stored in it.That is how staying signed in works, and it is a real thing to weigh. Treat the machine like a shared computer: use accounts you would be willing to lose control of, prefer scoped tokens over passwords, and remember that everyone with access to the board can see the screen. Devant is not responsible for what follows from credentials you choose to store in the machine workspace, including losing access to a third-party account or exposing those credentials to other members of the board.
A screenshot the agent takes becomes part of the conversation, and is readable by anyone on that board. Sleeping the machine does not erase the workspace; deleting the board does.
Who else processes it
Only these, and only to run the service. None of them may use your content for their own purposes, and none of them may train on it.
- Cloudflare. Hosting, database, file storage, and the Linux desktop itself. Everything above lives here.
- OpenAI. Answers agent turns. Receives the conversation for the turn it is answering, under a data processing agreement.
- Stripe. Takes payment. Receives your billing details; we never see your card.
We will update this list before adding anyone to it, not after.
Why we are allowed to process it
We process personal data only where Article 6 of the UK GDPR and the EU GDPR gives us a basis for it.
| Data | Lawful basis |
|---|---|
| Your email address, name and picture | Contract performance, Art. 6(1)(b). Necessary to provide and operate your account. |
| Boards, cards, conversations, files, machine workspace, agent screenshots and page contents | Contract performance, Art. 6(1)(b). These are the product; we cannot deliver it without them. |
| Security monitoring and incident detection | Legitimate interests, Art. 6(1)(f). Protecting the service and its users from unauthorised access. |
| Billing records (amounts, dates, transaction references) | Legitimate interests, Art. 6(1)(f). Running the business and verifying charges, weighed against how little this data says about you. |
| Tax records | Legal obligation, Art. 6(1)(c). Retention required by applicable tax law, typically seven years. |
How long we keep it
- While your account is open: as long as you keep it. We do not expire your boards.
- Agent screenshots and page contents: part of the conversation, kept as long as the board is. Leave the board and they stay; delete the board and they go within 30 days, including from backups.
- Inactive accounts: we do not delete an account for going quiet. If that ever changes, we will tell you before we act on it.
- When you delete a board: its cards, conversations, files and machine workspace are deleted within 30 days, including from backups.
- When you close your account: everything above, within 30 days.
- Billing records: kept for as long as tax law requires, typically seven years. These are amounts, dates and transaction references. They hold no conversations, no card details and no board content.
Where it goes
Some of the processors above operate in the United States, Cloudflare and OpenAI among them. Where a transfer takes personal data out of the UK or the EU, it runs under Standard Contractual Clauses approved by the relevant authority. Write to hello@leooi.com and we will send you a copy of the clauses that apply.
Decisions made by machine
Nothing here makes a solely automated decision that has a legal effect on you, or that affects you similarly significantly, in the sense Article 22 of the UK and EU GDPR means. What an agent produces is a tool for you to use. It does not decide your rights and it binds nobody.
What you can ask for
Wherever you live, you can ask us for:
- A copy of your data, which is the right of access, Art. 15.
- Correction of it, the right to rectification, Art. 16.
- Deletion of it, the right to erasure, Art. 17.
- A stop on our processing it, the right to restriction, Art. 18.
- A copy portable to another service, Art. 20, where the processing runs on consent or contract and is carried out by automated means.
- An objection to our processing it, Art. 21, which matters most where we rely on legitimate interests.
If you are in the UK, the EU, or a US state with a privacy law, these are rights you hold. We extend the same handling to everyone rather than sorting people by geography.
Export is self-service and does not require asking us. For anything else, write to hello@leooi.com and we will answer within one calendar month. A complicated request, or a lot of them at once, can take one further month, and we will tell you if it does.
You can also complain to a supervisory authority. In the UK that is the Information Commissioner’s Office (ico.org.uk). In the EU it is the data protection authority in your member state, listed at edpb.europa.eu.
Cookies
One session cookie, so that you stay signed in. No advertising cookies, no third-party analytics, and therefore no consent banner to dismiss.
Security
Boards are isolated per owner and checked on every request. Machine workspaces are encrypted at rest. Sign-in is a one-time link, so there is no password of yours for us to lose.
If we ever suffer a breach affecting your data, we will tell you what happened, what was affected, and what we did. We will not wait for the deadline the law gives us.
Contact
hello@leooi.com. The data controller is Devant Pte. Ltd. (UEN 202605792K).