Privacy Policy

We may collect the following information, depending on how you use Leona:

• Account information, such as your name, email address, username, login method, and profile settings.
• Career document information, such as CV details, cover letter content, portfolio content, employment history, education, skills, references, projects, achievements, job preferences, and other information you choose to add.
• Uploaded content, such as documents, images, profile photos, portfolio files, and any files you upload for parsing, storage, preview, or AI assistance.
• AI usage information, such as prompts, generated responses, document requests, interview turns, usage limits, and feedback you provide.
• Payment and billing information, such as plan type, subscription status, payment confirmation, billing email, and transaction metadata. Full card details are handled by Creem, our merchant of record and payment processor, and are not stored directly by Leona.
• Support and contact information, including emails, feedback form messages, bug reports, and communication preferences.
• Technical information, such as device type, browser type, IP address, approximate location, pages viewed, actions taken, cookies, session data, crash logs, and security logs.

Some CV or portfolio information may reveal sensitive personal information, for example disability status, nationality, demographic information, health-related information, or other details you choose to include. Where you add information of this kind to your documents, we process it on the basis of your explicit consent when you provide it. You should only add sensitive information when you are comfortable doing so and when it is relevant to your document.

Leona is intended for job-seeking, career-development, and document-building purposes. If you are under 18, you may use Leona only with permission and supervision from your parent or legal guardian, and we process a minor's personal information on the basis of consent given by a competent person (the parent or legal guardian), as required by POPIA. By allowing a minor to use Leona, the parent or guardian agrees to these terms and consents to the processing of the minor's personal information where required by law.

We do not knowingly encourage children to provide more personal information than is reasonably necessary for the Services. If you believe a child has used Leona without proper consent, contact us so we can review or delete the information where appropriate.

We use personal information to:

• Create, manage, secure, and verify user accounts.
• Provide CV, cover letter, portfolio, interview practice, AI writing, file parsing, file storage, sharing, and download features.
• Generate, edit, improve, preview, and export career documents.
• Manage plans, subscriptions, payments, quotas, renewals, cancellations, and access limits.
• Send service emails, account emails, security notices, payment notices, product updates, support replies, and, where allowed, marketing emails.
• Detect fraud, abuse, security risks, technical errors, and misuse of the Services.
• Improve Leona, develop new features, measure performance, and understand how users interact with the Services.
• Comply with legal, tax, accounting, regulatory, dispute-resolution, and enforcement obligations.

We only process personal information where POPIA allows it, for example because it is needed to perform our agreement with you, because you have consented, because we have a legitimate interest that does not override your rights, or because we must comply with law. Where we rely on consent, you may withdraw it at any time, subject to the law.

Leona may use artificial intelligence providers to help generate, rewrite, score, analyse, summarise, or improve career documents and interview answers. Our current AI providers include Cloudflare (Workers AI), DeepSeek, and Groq. For interview practice, we also use speech transcription and voice synthesis providers, including models made available through Cloudflare Workers AI such as Deepgram. When you use AI features, the content you submit — such as CV and cover letter text, portfolio content, job details, and audio recordings for interview practice — is sent to these providers for processing so that output can be generated for you.

Interview practice and debriefs (DeepSeek). To keep each interview session consistent, live interview turns and the post-interview debrief are processed by a single provider: DeepSeek, operated by Hangzhou DeepSeek Artificial Intelligence Co., Ltd. in the People's Republic of China. The text of your interview answers, your interview transcript, and related setup details are transferred to and processed in China for this feature. If DeepSeek is temporarily unavailable, the interview pauses and asks you to retry — your interview content is not sent to any other AI provider as a fallback. DeepSeek's terms allow it to use inputs and outputs in de-identified form, to a minimal extent, to maintain and improve its services. For details, review DeepSeek's Privacy Policy. Please only use interview practice if you are comfortable with this processing.

Some tools run entirely on your device and never send your content to a server. This includes the PDF tools (merge, split, compress, reorder, document pack, and image to PDF), the format converter, the image compressor, and the on-device background remover. Content processed by these tools stays in your browser, is never uploaded to Leona, and is never shared with any AI provider or used for training.

We do not use your content to train our own AI models. Cloudflare and Groq process your content only to provide the service to us, and our agreements with them do not permit them to use your content to train or fine-tune their AI models. For interview practice and debriefs, DeepSeek's terms allow it to use de-identified inputs and outputs, to a minimal extent, to maintain and improve its services, as described above.

Google user data. If you connect Google Calendar, we access it only to create, update, or delete the interview events you schedule inside Leona on your own calendar; we do not read, list, or analyse your calendar events. Google Workspace and Google Calendar user data is never sent to any AI/ML provider, and we do not use it — raw, aggregated, or derived — to create, train, or improve foundational or generalized machine learning or artificial intelligence models. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Do not submit information to AI tools that you do not want processed. AI output may be inaccurate, incomplete, biased, or unsuitable for your situation, so you must review and edit generated content before using it.

We may share personal information with:

• Hosting, database, authentication, file storage, email, analytics, payment, security, and AI service providers that help us operate Leona. These providers process information as our operators under written agreements that require confidentiality and appropriate security.
• Creem, our merchant of record and payment processor, for checkout, subscription, fraud-prevention, billing, refund, chargeback, and tax purposes.
• Law enforcement, regulators, courts, or other authorities where required or permitted by law.
• Professional advisers, such as legal, accounting, technical, or security advisers.
• Another business if Leona is involved in a merger, sale, restructuring, acquisition, or transfer of assets, subject to appropriate protections.

We do not sell your CV or career documents.

Because Leona may use international cloud, email, payment, storage, analytics, and AI providers, your personal information may be processed in countries other than South Africa or your country of residence. Where personal information is transferred outside South Africa, we only do so where the recipient is subject to a law, binding rules, or a contract that provides a level of protection comparable to POPIA. In particular, our AI and speech providers process information in the United States and the European Union, and interview practice and debriefs are processed by DeepSeek in the People's Republic of China.

We may use cookies, local storage, session storage, and similar technologies to keep you signed in, remember preferences, improve performance, support security, understand usage, and provide a better user experience. Optional analytics only runs where you have given consent, and you can change your cookie choices at any time in your settings. You can also control some cookies through your browser settings, but disabling them may affect how Leona works.

When you share a CV, cover letter, or portfolio, we create a public link that can be opened by anyone who has that link. Treat shared links as public: only share them with people you trust, and revoke any link you no longer want active.

If portfolio analytics is enabled, we collect limited visitor information for the portfolio owner, such as visitor and session identifiers, pages and links viewed, referrer, approximate location, device and browser details, language, and engagement events. This visitor analytics only runs where analytics consent has been given, and the choice can be changed at any time in settings or through the notice shown on the public page.

We may send transactional and service emails, including login, security, account, billing, support, product, quota, and system notices. These emails are necessary for operating the Services.

We only send electronic direct marketing to people who have opted in to receive it, or to existing customers where the law allows it and with an opt-out included in every message. You can unsubscribe from marketing emails at any time, but we may still send important service or legal notices.

We keep personal information for as long as reasonably necessary to provide the Services, maintain accounts, comply with legal obligations, resolve disputes, prevent abuse, enforce our terms, and keep business records. When information is no longer needed, we will delete, anonymise, or securely archive it where practical.

We use reasonable technical and organisational measures to protect personal information, including access controls, authentication, secure cloud services, monitoring, and other safeguards. However, no online service is completely secure, and we cannot guarantee that unauthorised access, loss, misuse, or interruption will never occur.

If we have reasonable grounds to believe that your personal information has been accessed or acquired by an unauthorised person, we will notify you and the Information Regulator as required by POPIA.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may also have the right to withdraw consent where processing is based on consent, and to object to direct marketing at any time.

To make a request, email support@leona.co.za. We may need to verify your identity before acting on a request, and we aim to respond within a reasonable time and within 30 days where POPIA applies.

If you are not satisfied with how we have handled your personal information or your request, you may lodge a complaint with the Information Regulator (South Africa):

• Website: inforegulator.org.za
• Email: POPIAComplaints@inforegulator.org.za
• Phone: 010 023 5200 or toll free 0800 017 160
• Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191

We would appreciate the opportunity to resolve your concern first.

You may request account deletion through available app features or by contacting us. Some information may be retained where required for legal, accounting, fraud-prevention, security, dispute-resolution, or legitimate business purposes.

We may update this Privacy Policy from time to time. The updated version will be shown on this page with a new "Last updated" date. Where a change is material, we will give reasonable notice by email or in the app before it takes effect, where required by law.

For privacy questions, requests, or complaints, contact Leona's Information Officer at support@leona.co.za.

Leona is a sole proprietorship operated by Solomon Segogoba from Siyabuswa, Mpumalanga, South Africa.

Address: A10221 Maganagobuswa, Siyabuswa, Mpumalanga, South Africa.

Phone: +27 66 356 2272