1. Controller
The controller responsible for data processing on this website and within the Services is:
Martin Spieß
leopard.ki
Prinz-Eugen Straße 13/1
74388 Talheim
Germany
Email: ms(at)leopard-ki.com
Imprint: https://leopard-ki.com/imprint

‍2. Overview of processing activities
This Privacy Policy explains which personal data we process, why we process it, how long we store it, which rights you have, and which third-party providers are involved when you use our website or our Services leo.page and leo.live.

3. Categories of processed data
Depending on your interaction with our website or Services, we may process contact data, contract data, communication data, website usage data, analytics interaction data, AI interaction inputs, and technical metadata.

4. Categories of data subjects
Processing may affect customers, prospective customers, website visitors, communication partners, business partners, and users interacting with leo.page and leo.live environments.

5. Purpose of processing
Personal data is processed for the provision of contractual services, operation of AI advisory systems, visitor interaction analysis, demand signal extraction, communication, technical platform operation, analytics and optimization, security monitoring, and compliance with legal obligations.

6. Legal bases for processing
Processing is based on Article 6 (1) (a) GDPR (consent), Article 6 (1) (b) GDPR (contract performance), Article 6 (1) (c) GDPR (legal obligation), and Article 6 (1) (f) GDPR (legitimate interests).Legitimate interests include improving AI system performance, ensuring platform stability, preventing misuse, and analyzing aggregated demand signals.

7. Data processing within leo.page and leo.live
When interacting with AI assistants powered by leo.page or analytics features provided through leo.live, structured interaction data may be processed. This includes visitor text inputs, structured advisory responses, navigation signals, and intent indicators.Processing occurs exclusively for guiding users through advisory workflows, identifying customer demand signals, improving system performance, and enabling analytics insights for business optimization.Where technically possible, personal identification is avoided. Customers remain responsible for lawful operation of their own websites and lawful collection of visitor data.

8. Processing through AI providers
Our Services integrate external artificial intelligence infrastructure providers including OpenAI, xAI, and Mistral.User inputs may be transmitted to these providers solely for generating structured responses and improving advisory interaction quality.Processing may involve transfers to countries outside the European Economic Area, including the United States. Where required, appropriate safeguards under GDPR Chapter V are applied.

9. Payment processing (Stripe)
Payments are processed via Stripe Payments Europe Ltd., Ireland.During payment processing, billing information, contact details, subscription metadata, and payment identifiers may be transmitted to Stripe. Stripe processes personal data under its own privacy policy available at https://stripe.com/privacy.Processing is based on Article 6 (1) (b) GDPR.

10. Hosting and infrastructure
Our platform is hosted on secure infrastructure providers located within the European Economic Area where possible.Temporary processing outside the EEA may occur when interacting with AI providers or supporting infrastructure services.Appropriate safeguards under GDPR apply.

11. Cookies and analytics technologies
We use cookies and similar technologies to operate the website, improve usability, analyze traffic, and measure campaign performance.Cookies may include technical cookies required for platform functionality and analytics cookies used only with user consent where legally required.

12. Google Analytics
This website may use Google Analytics, a web analytics service provided by Google Ireland Ltd.Google Analytics collects anonymized usage information including visited pages, session duration, device type, and traffic sources.Where supported, IP anonymization is enabled.Data transfers to the United States may occur under applicable safeguards.

13. Meta Pixel
We may use Meta Pixel provided by Meta Platforms Ireland Ltd. to measure marketing performance and optimize advertising campaigns.Meta Pixel enables conversion tracking, audience creation, and campaign optimization.

14. Contact requests
If you contact us via email, contact form, demo request, support request, or showcase access request, we process your data exclusively for responding to your request and providing the requested information.Processing is based on Article 6 (1) (b) GDPR.15. Storage durationPersonal data is stored only as long as necessary to fulfill contractual obligations, meet legal retention requirements, maintain service functionality, and ensure platform security.After expiration of applicable retention periods, data is deleted.

16. Data subject rights
Under the GDPR you have the right to request access to your personal data, correction of inaccurate data, deletion of your data, restriction of processing, data portability, objection to processing, and withdrawal of consent.You also have the right to lodge a complaint with a supervisory authority.

17. Security measures
We implement technical and organizational safeguards including encryption, secure transmission protocols, access control mechanisms, and data minimization practices.However, complete protection against all internet-based risks cannot be guaranteed.

18. Social media presence
We maintain profiles on LinkedIn, X (Twitter), and YouTube.Interactions on these platforms may involve data processing by the respective providers.

19. Updates to this Privacy Policy
We may update this Privacy Policy when legal requirements change, services evolve, or infrastructure providers are modified. The latest version is always available on our website.