LeanTheCompany — Privacy Policy
Effective date: ⟦date⟧
Controller: Emprowa AB, org.nr 556966-1019, Skräddaregatan 22, 216 18 Limhamn, Sweden. Contact: hello@leanthecompany.com.
What we collect, and why
Your account. Email address and sign-in events — to run your account. Legal basis: contract.
Your content. The projects, maps, cards, and text you create. We store it to provide the service; we do not read it except when you ask for support or the law requires. Legal basis: contract.
Sensei usage. When you use the AI coach, we record which model answered, token counts, and a per-turn id — to meter your plan fairly and watch our costs. We do not store the model's inputs/outputs in this usage log. Legal basis: contract.
Billing. Handled by Stripe (name, email, billing address, VAT ID, payment method). We store your subscription status and Stripe reference ids — never card numbers. Legal basis: contract + legal obligation (bookkeeping, Swedish law: 7 years).
Anonymized benchmarks. We compute aggregated metrics across projects (for example: median changeover-time improvement in Food & Beverage). These aggregates contain numbers and industry categories — never names, free text, or anything traceable to you or your clients. Legal basis: legitimate interest; you can object at hello@leanthecompany.com.
We do not run advertising, sell data, or use third-party tracking cookies. The only cookies are the ones that keep you signed in.
Where your data lives, and who processes it
Your data is stored in the EU. Our processors:
| Processor | What | Where |
|---|---|---|
| Supabase | Database and authentication | EU (eu-west-1, Ireland) |
| Vercel | Application hosting | EU functions (Dublin) |
| Stripe | Payments, invoices, VAT | Stripe's infrastructure; safeguards per Stripe's DPA |
| Resend (Plus Five Five, Inc.) | Sign-in and service emails | US; EU Standard Contractual Clauses per signed DPA (2026) |
| Anthropic | AI coaching (Sensei) | US; EU Standard Contractual Clauses per Anthropic's Data Processing Addendum |
About Sensei and Anthropic — the honest paragraph: when you use the AI coach, the relevant parts of your current map (step names, metrics, your typed answers) are sent to Anthropic's API to generate the coaching response. Under the API terms we use, Anthropic does not train models on this data. Don't put personal data about identifiable people into map labels or coaching answers — Sensei is for processes, not people, and the coach itself refuses to blame individuals by design.
How long we keep things
Your content: for as long as you have an account, plus at least 6 months after your access ends — read-only, exportable, and we email before any deletion. Usage/billing records: as bookkeeping law requires. Backups: rolling ⟦90⟧ days.
Your rights
Access, correction, export, deletion, restriction, objection — email hello@leanthecompany.com and we act within a month. Deletion requests are honored except where bookkeeping law requires retention. You can complain to IMY (Integritetsskyddsmyndigheten), but we'd appreciate the chance to fix it first.