Last updated September 4, 2026
Privacy Policy
Leafage is a desktop app for creating Cloud Projects with AI-generated text, images, and video. This policy explains what information we process when you use the app, Cloud Projects, Codex, hosted models, billing, support, and updates.
Information We Collect
We process your email address, account identifiers, sign-in challenges, session records, app version, platform, user agent, and security information associated with requests. We may use IP addresses for authentication, fraud prevention, abuse prevention, and service security.
Cloud Projects store project names, canvas data, prompts, imported references, generated outputs, selected versions, project history, and the metadata needed to keep that work available across signed-in devices. The desktop app may keep temporary local copies so it can display and export your work.
Codex and Hosted Models
Local Codex generation runs through the Codex installation and ChatGPT account on your Mac. OpenAI processes those requests under your agreement with OpenAI. Leafage receives the completed output so it can add it to your Cloud Project.
If you choose a hosted model, Leafage sends the prompt, selected settings, and any references required for that generation through Leafage infrastructure to the model provider shown in the app. Leafage receives the result and stores it in your Cloud Project. Available providers can change as models are added, disabled, or retired. We disclose the provider before you submit a hosted generation.
Payments and Credits
Dodo Payments is our merchant of record for subscriptions and credit top-ups. Dodo Payments processes checkout, payment, refund, dispute, invoice, and customer-portal information under itsprivacy policy. Leafage receives payment, subscription, product, payment-status, refund, and dispute records needed to maintain your plan, storage allowance, and credit balance. Leafage does not receive or store your full card number.
Resend delivers sign-in codes, account messages, billing notices, and service emails. We send Resend your email address and the content of the message. Resend publishes itsprivacy policy online.
Infrastructure
Leafage uses Cloudflare for API delivery, security checks, private media storage, and durable generation workflows. We use Neon Postgres for account, Project, billing, credit-ledger, and generation records. These services may process account data, Project data, media, request metadata, IP addresses, and operational logs as needed to provide the service. Cloudflare'sprivacy policy describes its practices.
How We Use Information
We use this information to authenticate accounts, store and synchronize Cloud Projects, run generations, calculate and reserve credits, process billing events, enforce storage limits, prevent abuse, deliver updates, diagnose failures, and answer support requests.
Leafage does not use advertising identifiers, third-party behavioral analytics, or automatic tracking of canvas interactions in the desktop app. We aggregate server records already needed to secure billing, reconcile credits, operate the service, measure checkout and generation reliability, plan capacity, and improve Leafage. Those records may include opaque account, Project, quote, job, order, model/version, state, timing, credit-amount, error-code, latency, and request identifiers. We do not copy prompt text, private media, generated output, full account email, payment-card details, provider credentials, or signed media links into a separate analytics system.
Sharing
We do not sell personal information. We share information with Dodo Payments, Cloudflare, Neon, and Resend to operate accounts, storage, email, and billing. Depending on which model is available and you select, we may share the required generation input with OpenAI, Google, xAI, Black Forest Labs, BytePlus, Kling AI, Alibaba Cloud, MiniMax, or another provider identified before submission. We otherwise share information with service providers only as needed to operate Leafage, comply with law, or protect the service and its users.
Retention
We keep account, Project, asset, and generation records while your account is active. After a verified account-closure request, we aim to delete or anonymize operational account and Project data within 30 days and remove it from routine backups within 90 days. Export Projects before requesting closure.
Unattached customer uploads are scheduled for deletion after 24 hours. Unattached hosted-generation staging outputs are kept for a seven-day recovery window after a terminal failure or cancellation and are then deleted. Authentication and security records are normally kept for up to 90 days after they expire or are no longer needed. Routine operational events are also kept for no more than 90 days after they are no longer needed. A record needed as billing, fraud, security-incident, dispute, or legal-claim evidence moves to that restricted record category instead of remaining in routine analytics. Resolved support correspondence is normally kept for up to two years.
We retain the minimum billing, invoice, refund, dispute, and credit-ledger records needed for accounting, fraud prevention, and legal claims for up to seven years after the related transaction, or longer when law or an unresolved dispute requires it. Dodo Payments keeps its own records under its privacy policy. If a cancelled plan leaves an account over its storage allowance, its existing Projects remain readable and exportable for at least 12 months, but imports and generations that add storage are blocked until usage falls or the allowance increases. Leafage will give repeated notice before over-limit data becomes eligible for deletion.
Your Rights and Choices
You can export Cloud Projects from Leafage. You can also contact us to request access, correction, restriction, portability, objection, or deletion of information associated with your account, where applicable. We normally respond within one month after verifying the request. We may retain billing, ledger, fraud-prevention, and legal records when the law or a legitimate operational need requires it.
Contact
Questions about privacy can be sent to support@leafage.app.