Privacy Policy
Scentline — operated by Leker Projects LLC
Effective date: [DATE OF PUBLICATION] · Last updated: September 24, 2026
This Privacy Policy explains how Leker Projects LLC, a New Mexico limited liability company doing business as "Scentline" ("Scentline", "we", "us"), collects and uses personal data in connection with the Scentline platform at getscentline.com (the "Service"). It covers three groups: visitors to our site, customers and their users ("Customers"), and business prospects whose professional information is processed through the Service ("Prospects").
Contact for all privacy matters: legal@getscentline.com.
1. Data we collect
Account and application data. When you apply for access or use the Service: full name, work email, company name, your application answers, and — if you sign in with Google or Microsoft — your name, email address, and basic profile information received from that provider. Authentication is passwordless; we never collect or store passwords.
Usage and log data. Standard technical logs: IP address, browser and device information, pages and features used, timestamps, and API activity. We use these for operation, security, and abuse prevention.
Billing data. Payments are processed by Stripe. We receive plan, transaction, and billing-status information; we do not receive or store full card numbers.
Customer campaign data. Content you create or configure in the Service: your product and targeting profiles, message drafts and templates, approval decisions, and sending activity.
Prospect data. Professional, business-context information about companies and the people who work at them: name, job title, business email address, business phone number, employer, and company-level signals (for example, hiring activity or funding announcements). This data is obtained from third-party business-data providers and from publicly available sources. We do not collect Prospect data about children, and the Service is not directed at consumers.
2. How we use data
We use the data above to: provide and operate the Service (including scoring signals and generating drafts with AI models); send outreach emails at Customers' direction; manage accounts, applications, and billing; secure the Service and enforce our Terms and sending rules (including suppression, bounce, and quota controls); communicate with Customers about the Service; and comply with legal obligations. We do not use Customer campaign data or Prospect data to train generalized AI models.
3. Legal bases (where GDPR or similar laws apply)
We process account, billing, and campaign data to perform our contract with the Customer. We process usage and security data, and Prospect data used to surface business signals, on the basis of legitimate interests in operating a B2B service and enabling relevant, low-volume business-to-business communication — balanced by the safeguards in Section 5. Where consent is required, we rely on consent. We process data to comply with law where a legal obligation applies.
4. Roles
For account, application, billing, and usage data, Scentline is the data controller. For Prospect data processed in a Customer's campaigns — targeting, message content, and sending decisions — the Customer determines the purposes of the outreach and Scentline processes the data on the Customer's instructions as a service provider/processor. Customers are responsible for the lawfulness of their own campaigns.
5. Prospects: safeguards and your choices
If you received an email sent through Scentline: every such email identifies the sender, includes a postal address, and includes a working unsubscribe link. Unsubscribing adds you to a suppression list that is checked before every future send across the Service. You may also contact us at legal@getscentline.com to have your details suppressed or deleted from the Service; we honor such requests without requiring an account. The Service enforces volume limits and does not send to jurisdictions we block.
6. Sharing
We share personal data only with: service providers (subprocessors) who process it on our behalf under contract — currently Vercel (hosting), Supabase (database and authentication), Stripe (payments), Anthropic (AI processing), Resend (email delivery), Google and Microsoft (sign-in), and our business-data providers; authorities where required by law or to protect rights, safety, or the integrity of the Service; and a successor entity in connection with a merger, acquisition, or sale of assets, under this Policy. We do not sell personal data, and we do not share personal data for cross-context behavioral advertising.
7. International transfers
The Service is hosted in the United States. Where data of individuals in the EEA, UK, or similar jurisdictions is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses with our subprocessors.
8. Retention
We retain account and billing data for the life of the account and as required for legal, tax, and audit purposes. Campaign and sending records are retained while the account is active and for a reasonable period thereafter. Suppression entries are retained indefinitely, because deleting them would defeat their purpose. Log data is retained for a limited period for security and operations. We delete or anonymize data when it is no longer needed.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent where processing is based on consent. Prospects may exercise these rights without holding an account. To exercise any right, contact legal@getscentline.com; we will respond within the period required by applicable law and may need to verify your identity. If you are in the EEA or UK, you may also lodge a complaint with your supervisory authority. California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and you may exercise access and deletion rights as described above, without discrimination.
10. Cookies
The Service uses only essential cookies and similar technologies required for authentication, session management, and security. We do not use advertising or cross-site tracking cookies.
11. Security
We use technical and organizational measures appropriate to the risk, including encryption in transit, hashed API credentials, access controls, and separation of production secrets. No system is perfectly secure; if a breach affecting your personal data occurs, we will notify you and the relevant authorities as required by law.
12. Children
The Service is for business users aged 18 and over. We do not knowingly process children's data; if you believe we hold such data, contact us and we will delete it.
13. Changes
We may update this Policy. Material changes will be announced through the Service or by email, with the new effective date shown above.
Leker Projects LLC (d/b/a Scentline), New Mexico, USA — [REGISTERED AGENT ADDRESS, NEW MEXICO — paste from your LLC formation documents]