Privacy Policy

LeanAi Systems, LLC. operates AI Blueprint and is responsible for the personal information described in this policy. Our business address is 8000 Avalon Blvd, Alpharetta GA 30022, United States. Contact us at solutions@leanaisystems.ai.

We operate in Georgia, United States, and serve international customers. This policy applies to information collected through our assessment and contact pages.

When you request a blueprint, the site collects your name, email address, optional company name, five assessment answers, calculated readiness score, and whether you want a consultation.

When you contact us, the site collects your name, email address, optional company name, and message. Please do not submit passwords, payment information, sensitive personal information, or confidential client records.

Your assessment answers generate the personalized recommendations and free-advice blueprint displayed on the site. Submitted details are saved to handle your request, respond to your message, and follow up about a consultation where requested.

We plan to email people about their blueprint, inquiry, or requested consultation, and separately offer marketing emails such as promotions and service updates. Automated sending and marketing signup are not currently enabled. Submitting an assessment or contact form does not opt you into marketing. Before marketing begins, we will provide a separate, optional permission choice and any notices required by applicable law. Declining marketing will not prevent you from receiving your blueprint.

Marketing messages must identify LeanAi Systems, LLC., include our postal address and a working opt-out, and allow you to withdraw permission. You can also email solutions@leanaisystems.ai to request that marketing stop. A marketing opt-out will not prevent a necessary response to an inquiry you initiate.

The current assessment uses predefined scoring and tool-selection rules. Do not assume assessment answers are sent to an external generative AI service.

Where applicable law requires a legal basis, responding to your request may involve steps taken at your request before an agreement, or our legitimate interest in handling business inquiries. Optional analytics and marketing will rely on consent where required. The legal bases applicable to our international customers require review before finalizing this policy.

The site uses Lovable Cloud to store submitted requests and Google Fonts to load typefaces. Requests to these services may include technical information such as an IP address. Site error reporting may process technical diagnostics when enabled by the hosting environment.

We use Umami, a privacy-focused analytics service, to understand visits and site usage. Umami loads only after you accept analytics in the cookie consent banner and is configured not to use tracking cookies. It may process page views, interactions, browser and device information, and approximate location derived from technical data. We do not intentionally send names, email addresses, company names, contact messages, or assessment answers to Umami.

Recommended tools link to independent websites. Their own privacy policies apply when you visit or use them.

Because we operate in the United States and use external service providers, information from international customers may be processed outside their country. Privacy laws and protections can differ between countries.

Provider processing locations and safeguards for transfers, including any protections required for customers in the European Economic Area or United Kingdom, still require confirmation. We do not claim that any particular transfer mechanism is already in place. Contact us for information about your data.

Browser storage may support session functionality if sign-in is used. The public assessment does not require a user account. See our Cookie Policy for details and the limits of the current storage review.

Our retention rule is six calendar months after the last substantive interaction about your assessment or inquiry. It covers the name, email address, company name, assessment answers, readiness score, consultation preference, and contact message stored with that request. If there is no further interaction, the period starts when you submit it. An automated marketing message does not restart the period.

At the end of that period, the operator is responsible for deleting the identifiable request data or irreversibly anonymizing it. Automatic deletion is not currently enabled, so carrying out this rule requires a manual review and deletion process. You may request earlier deletion, subject to applicable legal exceptions.

If a request becomes a paid client engagement, necessary engagement records will need a separately disclosed retention schedule. Records may be kept longer only where needed to meet a legal obligation or establish, exercise, or defend a legal claim; any exception should be limited to the necessary information and duration. No separate retention schedule for future marketing subscriptions has yet been set, and the marketing signup service is not active.

Deletion from active records does not establish when provider backups or technical logs expire. Their retention periods and deletion capabilities have not been verified; we do not promise immediate removal from every backup or provider system.

No online service can guarantee absolute security. Avoid including confidential or sensitive information in assessment answers or contact messages.

Depending on your location, you may have rights to access, correct, delete, restrict, or receive a copy of personal information, or to object to certain processing. You may also withdraw consent where processing relies on consent, without affecting earlier lawful processing, and complain to your local data-protection authority. These rights and any applicable exceptions depend on local law.

Email solutions@leanaisystems.ai or use the contact page to submit a privacy request or withdraw a consultation request. Include the email used for your submission and what you want us to do, but do not send passwords or identity documents unless a necessary, secure verification method has been agreed.

We will respond within the period required by applicable law. Where the GDPR applies, the usual period is without undue delay and within one month of receipt. Where legally permitted, complex or numerous requests may take up to two additional months, with notice and reasons provided within the initial month. Requests are normally free; any lawful exception must be explained. Marketing opt-outs must be acted on promptly and, for messages subject to the U.S. CAN-SPAM Act, within ten business days.

This service is intended for business owners and service teams, not children. If you believe a child has submitted personal information, contact us.

This policy may be updated when the service or its practices change. The date shown above identifies the current draft.