Who is responsible
Leone Intelligence Systems FZE LLC, a free zone company established in Dubai, United Arab Emirates, is the controller of the personal data described here. Write to hello@leoneis.com for anything in this notice.
The brief you send from the contact page
When you ask for a workflow review we store your name, work email, company where given, the brief itself, the engagement path you chose, the budget range, the target start, your role in the decision, the procurement stage, the language you used, the page you sent it from, and the consent you gave. We use it to answer the brief, to decide whether the calendar opens at once or a person reviews first, and to schedule and hold the review. The legal basis is the steps you asked us to take before any contract, and our legitimate interest in answering a business enquiry properly.
Each brief is screened automatically on five answers you give: whether you are a decision maker or budget owner, whether you named a budget range at or above the published floor, whether you named a start date rather than an intention, whether you named an organisation, and whether the brief is long enough to carry the four answers the form asks for. A brief that meets all five opens the calendar immediately. Any other brief goes to a person who replies within two business days. The screening never declines a request and produces no decision with legal or similar effect; it only decides whether you pick a time now or hear from us first. The result and its reason are recorded against the brief so you can ask us about it.
Booking a working session
An invitation is a private link tied to your brief. When you book, reschedule or cancel we store the chosen time, your time zone, and the calendar messages we sent you. Links are stored as hashes; the plain link exists only in the email you received, and it expires.
The Production AI Brief newsletter
Subscribing stores your email address, your language, where you subscribed, and the consent you gave. We send one note a month and nothing else. Reply to any issue, or write to the address above, to be removed; the address is deleted when you do.
Career signals
A career signal stores your name, email, the role you chose, and the portfolio link or note you left. It is read for recruitment only, is never treated as a sales lead, and is removed when the role closes or when you ask.
Optional analytics
Analytics is off until you allow it. If you do, a pseudonymous session identifier is kept in your browser's storage and page views and clicks on this site are recorded against it, with the page, the language, and the broad category of the site you came from. There are no third-party trackers, advertising pixels, or cross-site identifiers. If you later send a brief, that session can be linked to the resulting lead so we can see which pages led to it. You can decline or withdraw at any time from the control in the footer; declining never blocks a form.
Separately, and whatever you choose, the site keeps a plain count of page views per day: the page, the language, and whether the visit came from search, social, email, a link, or directly. That count holds no identifier, no cookie, and nothing stored in your browser, so it cannot describe a person or a session — it only tells us which pages are read.
Technical logs and abuse control
To keep the forms usable we rate-limit requests using short-lived counters derived from the requesting address, and we keep request identifiers to stop a duplicate submission being recorded twice. Those counters and records expire automatically within days and are then deleted.
Where the data is processed
The site runs on Vercel, with its server functions in the Frankfurt region. Leads, bookings, content, and analytics events are held in a managed Postgres database operated by Supabase. Email is sent through Hostinger's SMTP service. Each provider acts under its own data-processing terms; where data leaves the European Economic Area or the United Arab Emirates it does so under those providers' standard contractual safeguards.
How long we keep it
A brief and the records around it are kept while the enquiry or engagement is live and for a limited period afterwards so that we can evidence what was agreed. Newsletter addresses are kept until you unsubscribe. Career signals are kept until the role closes or you ask. Rate-limit counters and duplicate-submission records expire automatically. Analytics events are pseudonymous and are kept only as long as they are useful for measuring the site.
Your rights
You can ask to see the data we hold about you, to correct it, to have it deleted, to restrict or object to its use, to receive it in a portable form, and to withdraw any consent you gave. Write to hello@leoneis.com. If you are in the European Economic Area you can also complain to your supervisory authority; in the United Arab Emirates the federal Personal Data Protection Law applies and the UAE Data Office is the authority.
Confidentiality
Every brief is treated as confidential. No production data and no NDA are needed for the first review; an NDA is available before any sensitive material is shared. We publish a client name, logo, or figure only with written permission.
Changes
When the site starts processing something new this notice changes in the same release, and the date at the top moves.