Developer integrations privacy notice

Depending on the tool a customer chooses to use, Leni may process:

• account, organization, property-access, OAuth-grant, and project-key identifiers;
• requests and tool arguments sent by the customer or connected AI assistant;
• authorized operating and financial metrics returned through the Leni semantic layer;
• analysis messages, status information, results, and authorized attachments;
• private user memory and eligible organization memory consulted for relevant context;
• memory notes created, changed, or deleted only through an authorized memory action; and
• usage, security, diagnostic, and audit information needed to operate and protect the service.

Leni uses this information to authenticate the customer, enforce organization and property boundaries, answer authorized requests, run requested analyses, retrieve relevant context, perform explicit memory operations, apply plan and usage rules, prevent abuse, troubleshoot failures, and maintain the service.

A connected assistant cannot use the MCP runtime for raw SQL, unrestricted warehouse access, money movement, or property-management record changes. Leni applies server-owned tenant and property filters to supported data tools.

The connected assistant provider sends authorized tool requests to Leni and receives the tool results needed to answer the customer. The provider may retain the customer's conversation and returned results under its own terms and privacy policy. Removing the Leni connection stops future access but does not automatically delete copies already retained by that provider.

Leni may also use infrastructure, security, analytics, storage, and model providers to operate requested features. These providers receive only the information needed for their role and are subject to the applicable contractual and security controls.

Analysis records, operational logs, and account data follow Leni's applicable product, contractual, security, and legal retention practices. Durable memories remain available until they are changed or deleted by an authorized user, removed with the associated account or organization, or otherwise handled under the applicable agreement.

Customers can control the integration by:

• approving or denying the requested OAuth scopes during connection;
• removing the connector or revoking its Leni authorization;
• reviewing, correcting, or deleting authorized memory notes;
• using existing Leni account, plan, and access-management controls; and
• contacting Leni for privacy, deletion, or support requests.

Leni verifies the connected user, organization membership, granted scopes, and applicable property access on the server. Private user memory remains user-scoped. Organization memory is available only when the account and plan permit it. Leni does not use client-supplied organization or property filters as the authority for access decisions.

For privacy or integration questions, email info@leni.co. For implementation guidance, see the Leni developer documentation.