Privacy Policy
Effective .
Leeway is a drive for you and your agents, made by The Primal Team LLC (“Leeway”, “we”, “us”). This policy explains what personal information we collect when you use Leeway’s website, apps, command line, and Leeway in Claude and other connected apps (together, the “Services”), why we collect it, who we share it with, and the choices and rights you have. It forms part of our Terms.
1. What we collect
What you give us.
- Account information: your email, the name you give us if you give one, what’s needed to recognise your passkeys, and your plan.
- Your content: the files you and the apps you connect put in your drive, their earlier versions, and the trash, which keeps deleted files for 30 days.
- Payment information, if you make a founding reservation or buy a plan: the amount, the time, your email and the payment’s reference. Our payment processor takes your card; we never see its number.
- What you send us: messages to support@leeway.to or through leeway.to/support, and the waitlist, if you joined it: your email, when you joined and, if you said, which kind of computer you use.
What we collect as you use the Services.
- Devices and apps: each computer or phone you sign in, with its name and when it last checked in (for an iPhone or iPad, also the address its push service gives the Leeway app), and each app you connect, with the folder and permissions you chose and when it last used them.
- Sign-ins: when you approve a new computer, the city and country its network is in, so you can tell your sign-ins apart.
- Security records: short-lived records about the networks requests come from, to protect the Services from abuse, deleted within two days.
- Health reports from your computers: which versions they run and what worked or didn’t, as codes and counts, never file names, folder names or what’s in your files, kept for 90 days. You can turn them off and see exactly what was sent; the home page says how.
- Doors: when you open a door to one file for someone outside your drive, the questions asked through it and the answers given, kept for 90 days after the last one.
- Website use: how you use leeway.to, through cookies and similar tools (section 4).
What others give us. People you share with, or who invite you, may give us your email. Apps you connect send us the requests they make in your drive.
2. How we use it
- To provide the Services: store, sync and share your content as you direct, sign you in, and run the apps you connect.
- To keep them safe: prevent abuse, fraud and attacks, and enforce our Terms.
- To improve them: find and fix problems and understand how features are used.
- To communicate with you: answer you, and tell you about your account, changes and, where the law allows, Leeway’s plans and features. You can opt out of marketing messages at any time.
- To promote Leeway: understand visits to leeway.to and measure our marketing (section 4).
- To meet legal obligations, such as tax and accounting.
We don’t sell your information, and what’s in your drive is never used for ads. Nobody at Leeway opens your files unless you ask for help with one and point us to it, or the law requires it.
Where EU or UK law applies, we rely on these legal bases: to perform our contract with you (providing the Services), our legitimate interests (keeping the Services safe, improving them and promoting Leeway, balanced against your rights), your consent (for example, for cookies that need it), and legal obligations.
3. Claude and other apps
- When Claude works in your drive, Leeway sees the requests Claude makes, like “list this folder” or “write this file”, and answers them inside the folder and permissions you approved.
- Leeway never asks Claude for your conversation, its memory or anything outside your drive, and it doesn’t record what Claude sends or reads. What Claude changes goes into your drive’s history under its name, such as “Claude on Mac”, the same as a change you make.
- What an app does with what it reads from your drive is governed by that app’s own terms and privacy policy. Remove an app at any time from leeway.to/activate?people. It stops working at once.
4. Cookies, analytics and advertising
leeway.to may use analytics and advertising tools, including cookies, to understand visits and measure our marketing. They see how the website is used, never what’s in your drive. Where the law needs consent first, we ask.
- The sign-in cookie keeps you signed in on leeway.to for up to 30 days, and ends when you sign out. Leeway can’t work without it.
- Analytics and advertising cookies come from the tools above, and only on the website.
You can block or delete cookies in your browser. Where the law gives you the right to opt out of advertising that uses your information, you can, including with a browser signal such as Global Privacy Control.
5. Who we share it with
- Service providers who handle it for us, under contract, only to provide their service to
us:
- The hosting and storage providers we contract with, which run leeway.to and Leeway in Claude and store your account and your content.
- A payment processor, if you make a founding reservation or buy a plan.
- Your iPhone or iPad’s push service, to tell the Leeway app that your drive changed. It gets that address and your drive’s id on the device, never a file or its name.
- Analytics and advertising providers, which see how leeway.to is used, never what’s in your drive.
- Email and support tools, to answer you.
- People and apps you choose: the people you put on your drive, guests in the folder you gave each of them, someone you open a door for, and the apps you connect, each with the access you chose. You can see and remove all of them at leeway.to/activate?people.
- For legal reasons: when we believe in good faith that the law requires it, such as a valid court order, or to protect the safety of any person, prevent fraud or abuse, or protect Leeway’s rights and users. Where we can, we tell you before handing over your information.
- If Leeway is sold or merged: to the buyer or the new company, which takes on this policy. We’ll tell you before your information becomes subject to a different policy.
- With your consent, for anything else.
6. How long we keep it
- Account information and your content: while you have an account. Deleted files stay in the trash for 30 days.
- Health reports: 90 days. Door questions and answers: 90 days after the last one. Security records: two days.
- When you delete your account, we delete the drives it made and everything in them, its computers, apps and sign-ins, and the messages it sent us; copies held by our storage providers clear within 30 days. People it shared a folder with lose access. Files you put in someone else’s drive are theirs, and stay. If you hold a founding reservation, it’s refunded first.
- We keep a short record that an account was removed, and when, and your request itself, as the record that we did it, and anything else the law requires us to keep, such as payment records, for as long as it requires.
7. Security
Your account and your content are encrypted in transit and at rest. You sign in with passkeys, and access within Leeway is limited to what running the Services needs. No service can promise perfect security; if a breach affects your information, we’ll tell you as the law requires. Keep your devices secure, and tell us at support@leeway.to if you think your account has been misused.
8. Where it’s processed
Leeway is based in the United States. Our providers may process your information in the United States and other countries where they operate, which may not have the same data protection laws as yours. When personal information from the EU, UK or Switzerland is transferred, we rely on safeguards the law recognises, such as the standard contractual clauses our providers offer.
9. Your choices and rights
- Your files are files: copy them out of your drive whenever you like, and see and remove the people and apps with access at leeway.to/activate?people.
- To get a copy of what we keep about you, correct it, or delete your account, write to support@leeway.to or ask at leeway.to/support. A person answers each request within 30 days, and confirms it with the account’s email before deleting anything. You can ask someone to make a request for you; we’ll check they may.
- You can turn off health reports, opt out of marketing messages, and block cookies in your browser.
10. EU, UK and California residents
EU and UK. You also have the right to object to how we use your information, to restrict it, to take it with you in a portable form, and to withdraw consent at any time without affecting what came before. You can complain to your local data protection authority. The Primal Team LLC is the controller of your information.
California. In the last 12 months we collected the categories this policy describes: identifiers (email, name), customer records (account and payment references), commercial information (reservations and plans), internet activity (how you use the Services and leeway.to), approximate location (city and country at sign-in), and the content you store. We collect them for the purposes in section 2 and share them only as in section 5. We don’t sell personal information. If we use it for cross-context behavioral advertising on leeway.to, you can opt out, including with Global Privacy Control. You have the right to know what we collect and how we use and share it, to delete it, to correct it, and not to be treated differently for using these rights. Make a request as in section 9.
11. Children
Leeway isn’t for children under 13, and we don’t knowingly collect their information. If you think a child has given us theirs, tell us and we’ll delete it.
12. Changes to this policy
When this policy changes, the date at the top changes with it. If a change matters, we’ll tell you by email or in Leeway before it takes effect. Earlier versions are available on request.
13. Contact us
The Primal Team LLC, support@leeway.to or leeway.to/support.