Leafstash Privacy Policy

Last Updated: March 6, 2025

Introduction

At Leafstash, Inc. (“Leafstash”, “we”, “us”, or “our”), we value the trust you place in us when you use our services, and we are committed to safeguarding your personal information. This Privacy Policy describes the information we collect, how we use, share, and protect your data, and your rights regarding your personal information. This policy applies to all users of the Leafstash Service, including our websites, mobile applications, and related services (collectively, the “Leafstash Service”), and is governed by the laws of Canada. 

This Privacy Policy is implemented in conjunction with our Data Compliance Policy, which outlines our internal procedures for complying with data protection like PIPEDA.

By using the Leafstash Service and accepting this Privacy Policy, you consent to the collection, use, and disclosure of your personal information as described herein. You may withdraw your consent at any time by emailing us at contact written at the bottom of this document.

1. Information We Collect

We collect personal information in several ways, including:

• Information You Provide Directly: We collect personal details you provide to us when registering for or using our services, such as your name, email address, mailing address, payment details, and phone number.
• Information Collected Automatically: We use cookies, web beacons, and other tracking technologies to gather information about your use of the Leafstash Service. This includes your IP address, browser type, device information, and usage patterns on our website and mobile applications. We also collect geolocation data where legally permitted.
• Third-Party Data: We may receive personal information about you from third-party partners, such as payment processors or other service providers, to facilitate your use of the Leafstash Service.
• Member-Generated Content: If you contribute content to the Leafstash Service (e.g., reviews, comments, and feedback), we collect and store this information.
• Referral Information: If you refer a friend to Leafstash, we may collect their name, email address, and other contact information, and use this to send an invitation.

1. How We Use Your Information

We use your personal information to provide and improve the Leafstash Service, and for the following purposes:

• To process transactions, deliver services, and manage your account.
• To personalize and enhance your experience by providing tailored content, offers, and recommendations.
• To communicate with you about updates, new features, promotions, or customer support inquiries.
• To conduct market research and analyze user behavior (e.g., how users interact with the Leafstash Service, which features are most popular) to improve our services, develop new features, and enhance user experience.
• To detect and prevent fraudulent activities such as unauthorized account access, fraudulent transactions, and misuse of the Leafstash Service.
• To share aggregated data with our clients, business partners, and affiliates for marketing, research, and analysis purposes.

AI-powered features and data usage

Leafstash utilizes Artificial Intelligence (AI) to enhance receipt management and provide users with actionable insights. Our AI-powered features operate under strict privacy controls to ensure your data remains protected and is used only as intended.

1. Document OCR and data parsing

• We use Optical Character Recognition (OCR) to extract relevant details from documents you upload, such as receipts.
• This AI is solely used for processing your documents and providing you with relevant insights; it does not use your personal information to train AI models unless you provide explicit, separate consent.
• The AI only reads and interprets the data in the documents you provide; it is not used in large language models (LLMs) for generative AI purposes or for creating synthetic data outputs.

2. Anonymized data for model fine-tuning (with opt-out option)

In some cases, we may use anonymized data from receipts and other uploaded documents to improve the accuracy and efficiency of our AI models.

• This process removes all personally identifiable information (PII) before any data is used for model training.
• By default, your anonymized data is included in AI model improvements to enhance overall service accuracy.
• You have the option to opt out of this data usage at any time through your account settings.
• The AI models trained with anonymized data are designed to improve performance generally and do not retain any link to your individual data.
• We ensure full compliance with PIPEDA principles of consent, limiting use, and accountability, and AI models do not retain, share, or store data beyond your specified configuration.

Expense analysis & user insights generation

Leafstash provides expense analysis and user insights to help you track spending habits, manage receipts, and gain financial clarity.

1. How we process expense data

• When you upload receipts, Leafstash categorizes your transactions based on merchant, purchase date, expense type, and payment method.
• AI-powered analytics may identify spending patterns, recurring transactions, and potential cost-saving opportunities.
• You can manually edit or adjust expense categories within the app to improve accuracy.

2. User insights and financial recommendations

• Based on your receipt data, Leafstash may generate insights such as:
  • Spending trends (e.g., monthly expenses, frequent merchants).
  • Expense summaries to assist with budgeting or tax preparation.
  • Reminders for warranties, refunds, and expense reimbursements based on stored receipts.
• Leafstash does not provide financial, tax, or legal advice but offers general insights to help users manage expenses effectively.

3. Data privacy and control

• Expense insights are generated solely for your use and are not shared with third parties unless you explicitly choose to do so (e.g., exporting data for accounting purposes).
• You have full control over your data, including the ability to delete, modify, or disable expense tracking features.
• We ensure that your financial data remains secure and is never used for targeted advertising or profiling.

1. Sharing and Disclosure of Your Information

We may share your personal information in the following situations:

• Service Providers: We may share your information with third-party service providers who assist us with payment processing, data storage, customer support, and other essential services. These providers are obligated to handle your data in accordance with this Privacy Policy.
• Business Partners: We may share your information with trusted business partners for joint ventures, promotions, or analytics purposes. In these cases, we ensure that only aggregated or anonymized data is shared, unless we have your explicit consent to share personal details.
• Legal Compliance: We may disclose your personal information to comply with applicable laws, respond to subpoenas, or protect our legal rights, property, and safety, or the rights, property, and safety of others.
• Corporate Transactions: If Leafstash undergoes a merger, acquisition, or sale of assets, your personal information may be transferred to the new entity, subject to the terms of this Privacy Policy.

1. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience with the Leafstash Service. Cookies allow us to remember your preferences, personalize content, and analyze website traffic. You can manage your cookie preferences through your browser settings or by visiting our cookie management page.

We use the following types of cookies:

• Required Cookies: Necessary for basic website functionality, such as login and payment processing.
• Functional Cookies: Used for analytics and to improve user experience.
• Advertising Cookies: Used for personalized advertising based on your browsing behavior.

In accordance with Canadian law, you have the right to refuse the use of non-essential cookies. You can adjust your cookie preferences through your browser settings at any time.

1. Your Privacy Rights in Canada

Under Canadian privacy law, you have the right to:

• Access and Correction: You can access, update, or correct your personal information by logging into your Leafstash account or contacting us directly.
• Deletion: You can request the deletion of your personal information, subject to legal retention requirements.
• Opt-Out: You can opt-out of receiving marketing communications by following the unsubscribe link in emails or by contacting us directly.
• Targeted Advertising: You can opt-out of targeted advertising through your account settings or by using the opt-out options provided on third-party platforms.

1. How We May Share Personal Information with Third Parties

We may share aggregated and anonymized insights and reports about consumer and purchase behavior with clients, affiliates, partners, or other third parties for research, marketing, analysis, and other purposes.

From time to time, we may share personal information related to your purchase or receipt information and/or survey responses with clients or other third parties for advertising, marketing research, or analytics purposes. In these cases, we limit the types of identifiers we may share (e.g., mobile ad ids, hashed emails) and restrict the ways in which third parties may use this data. We will only engage in this type of sharing if we have obtained your consent to do so or if we believe we have another appropriate legal basis to do so under applicable law.

We may share information with government organizations and agencies, law enforcement, and regulators (1) to comply with all applicable laws, regulations, and rules, and requests of law enforcement, regulatory, and other governmental agencies; (2) to establish, exercise, or defend our legal rights; (3) when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; or (4) in connection with an investigation of suspected or actual illegal activity.

1. Transferring Personal Information Globally

Leafstash operates globally, and your personal information may be transferred to and stored in countries outside of your country of residence, including the United States. We take appropriate measures to protect your data in compliance with applicable data protection laws, including using Standard Contractual Clauses for transfers outside Canada.

1. Data Security and Retention

We implement industry-standard security measures to protect your personal information. However, no security system is impenetrable, and we cannot guarantee the absolute security of your data.

We retain your personal information for as long as your account is active, plus 5 years, to fulfill the purposes outlined in this Privacy Policy, or as required by law, or business purposes such as complying with tax regulations, after which your data will be securely deleted or anonymized.

1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or through a prominent notice on our website. The “Last Updated” date at the top of this Privacy Policy indicates when the latest version was posted.

1. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy, or if you wish to exercise any of your privacy rights, please contact us at:

Leafstash, Inc.
Email: [email protected]
Address: 3200 – 650 West Georgia Street, Vancouver, BC V6B 4P7, Canada

This Privacy Policy reflects our commitment to protecting your personal information while providing you with a safe and personalized experience. We encourage you to review it periodically to stay informed about how we are safeguarding your data.