Privacy Policy

Leav is a mobile self-checkout platform for physical retailers using Shopify in-store. When a shopper scans items on their phone and pays through Leav, or when a merchant signs up for a Leav account, personal information is involved. This policy explains what we collect, why, and how we protect it. Leav Inc. ("the Company," "we," "us," or "our"), with offices at 417 Rue Saint-Pierre, Suite 200, Montreal, QC H2Y 1C6, Canada, is responsible for that information under Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA") and Quebec's Act respecting the protection of personal information in the private sector (Law 25).

1. Accountability

The Company is responsible for personal information collected through getleav.com and the Leav checkout service under PIPEDA and applicable provincial laws, including Quebec's Law 25, British Columbia's PIPA, and Alberta's PIPA. Our designated privacy contact is reachable at [email protected].

2. Personal Information We Collect

Because Leav processes transactions inside physical stores, the personal information we handle is tied directly to that retail context:

• Merchant account information: name, business name, email, phone, billing address, and Shopify store credentials provided when setting up a Leav account.
• Shopper session data: the items scanned during a checkout session, the cart total, and the payment confirmation reference. We do not store full card numbers; payment processing is handled by Stripe and subject to Stripe's own privacy practices.
• Loss-prevention data: exit-verification data generated by our AI item-count reconciliation feature, including session identifiers and mismatch flags. This data is used solely to operate the loss-prevention service and is not used to build shopper profiles.
• Technical and usage information: IP address, browser or device type, pages visited on getleav.com, and analytics events, collected automatically when you use our website or platform.
• Communications: any content you send us by email or through our contact form.

3. Purposes Identified at Collection

We collect personal information to operate and improve the Leav platform, to process and fulfill checkout transactions, to provide merchants with analytics on their store's checkout performance, to run our AI loss-prevention service, and to respond to support and sales inquiries. We also use it to meet legal obligations, including tax and financial record-keeping requirements. We will not use information for materially different purposes without notifying you and, where required, obtaining consent.

4. Consent

Where required under PIPEDA or Law 25, we obtain meaningful consent before or at the time we collect personal information. Merchants consent to our collection practices when they create a Leav account. Shoppers using a store's Leav checkout link are informed of the data handling at the point of transaction. You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting us at [email protected]. Withdrawing consent may mean certain features of the service can no longer be provided.

5. Limiting Use, Disclosure, and Retention

We use personal information only for the purposes identified above, except with your consent or as required by law. We share it with service providers who assist us in operating the platform (including Stripe for payment processing and our cloud infrastructure providers), subject to contractual obligations that restrict their use of the data. Shopper session data is retained for 90 days after a transaction, then purged. Merchant account data is retained for the duration of the account and for such further period as required by applicable law. We do not sell personal information.

6. Safeguards

Session data is encrypted at rest using AES-256. Payment data is handled exclusively by Stripe and never stored in Leav systems in raw card-number form. Canadian merchant data is stored on infrastructure located in Canada. We maintain organizational and technical security measures appropriate to the sensitivity of the information and the size of our operations.

7. Your PIPEDA Rights

Under PIPEDA and, for Quebec residents, Law 25, you have the following rights regarding your personal information:

• Right of access to your personal information held by the Company;
• Right to challenge accuracy and request correction;
• Right to withdraw consent;
• Right to file a complaint with the Office of the Privacy Commissioner of Canada.

Quebec residents under Law 25 also have a right to data portability and a right to object to certain automated decision-making that produces legal or similarly significant effects.

To exercise any of these rights, email [email protected]. We respond within 30 days, extendable by an additional 30 days with notice where complex requests require it.

8. Right to File a Complaint

You may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca. Quebec residents may also file with the Commission d'acces a l'information du Quebec (CAI) at cai.gouv.qc.ca.

9. Cookies and Cross-Border Transfers

See our Cookie Policy for details on how we use cookies and similar technologies on getleav.com. Where personal information is transferred outside Canada (for example, to cloud infrastructure providers with data centres in the United States), we use contractual safeguards consistent with PIPEDA and applicable provincial requirements to ensure that your information receives a comparable level of protection.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects when material changes were made. We encourage merchants and users to review this page periodically.

11. Contact

Leav Inc.
417 Rue Saint-Pierre, Suite 200
Montreal, QC H2Y 1C6, Canada
Email: [email protected]
Phone: +1 514 700 0192