Privacy Policy - Lesia AI

1. Introduction

Lesia AI ("we", "our", "us") is a personal AI assistant for tour business management with ADHD-friendly features. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our service at lesia.ai.

By using Lesia AI, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Email address
Name
Profile picture (if provided via authentication provider)

2.2 Business Data

Data you enter into the platform, including:

Trip and booking information
Contact/person records
Payment tracking records
Tasks and notes
Custom entity records and attributes

2.3 Uploaded Files

Documents you upload (e.g., passports, visas, insurance documents, contracts). These files are stored securely and are only accessible to authenticated users.

2.4 Connected Services

If you connect third-party services, we may access:

Google Gmail: Email metadata (sender, subject, date) for trip-related emails
Google Calendar: Calendar events for scheduling
Telegram: Chat ID for sending notifications

2.5 Automatically Collected Data

Browser type and version
Pages visited and features used
Authentication cookies (required for login)

3. How We Use Your Information

To provide and maintain the Lesia AI service
To authenticate your identity and secure your account
To send notifications and reminders (via Telegram, if configured)
To process uploaded documents using AI extraction (Anthropic Claude)
To sync with connected services (Gmail, Google Calendar)
To evaluate automated triggers and workflows you configure

4. Data Storage and Security

Your data is stored on secure infrastructure provided by:

Database: Neon (PostgreSQL) with encryption at rest
File Storage: Vercel Blob Storage with access controls
Authentication: Clerk (SOC 2 compliant)
Hosting: Vercel (SOC 2 compliant)

We implement industry-standard security measures including HTTPS encryption, authentication on all API endpoints, input validation, and secure file handling.

5. Third-Party Services

We use the following third-party services to operate Lesia AI:

Clerk - Authentication and user management
Neon - Database hosting (PostgreSQL)
Vercel - Application hosting and file storage
Anthropic - AI document extraction (Claude API)
Google - Gmail and Calendar integration (optional)
Telegram - Notification delivery (optional)

Each service processes data according to their own privacy policies and data processing agreements.

6. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate personal data
Erasure: Request deletion of your personal data
Portability: Export your data in a machine-readable format
Restriction: Limit how we process your data
Object: Object to processing of your personal data

To exercise any of these rights, please contact us at privacy@lesia.ai. We will respond within 30 days.

7. Cookies

Lesia AI uses essential cookies for authentication and session management. These cookies are strictly necessary for the service to function and cannot be disabled.

We do not use advertising or tracking cookies.

8. Data Retention

We retain your data for as long as your account is active. When you request account deletion, we will delete all your personal data within 30 days, except where we are required to retain it by law.

Deleted records are soft-deleted first and permanently purged after 90 days.

9. Children's Privacy

Lesia AI is not intended for use by children under 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the service. Continued use after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or requests, contact us at: privacy@lesia.ai