LENOS SOFTWARE | PRVACY
PRIVACY STATEMENT
Effective August 21, 2026
Privacy by design. Lenos Software minimizes personal data by default. We do not collect, use, or disclose personal data unless it is provided voluntarily, needed to operate or secure our services, or processed under a customer’s documented authorization.
This Privacy Statement explains how Lenos Software ("Lenos," "we," "us," or "our") handles personal data in connection with our corporate website, business communications, and the Lenos Ignite platform. "Personal data" means information that identifies, relates to, describes, or can reasonably be linked with an individual.
1. Scope and our role
This Statement applies when you visit a Lenos corporate website that links to it, contact us, request information or support, or otherwise interact with Lenos in a business capacity.
Lenos has two different privacy roles:
Corporate website and direct business interactions. Lenos generally acts as the controller or business responsible for the limited personal data it receives directly.
Customer programs on the Lenos Ignite platform. Our customer decides what data to collect, why it is collected, who may access it, and how long it is retained. Lenos acts as the customer’s service provider or processor and handles that data only under the customer’s instructions, the applicable agreement, and law.
A customer-created event, registration site, portal, survey, email, or other program may display the customer’s own privacy notice. That notice governs the customer’s collection and use of personal data. Questions or rights requests concerning customer-controlled data should ordinarily be directed to that customer.
2. Our data-minimization practices
We do not sell personal data.
We do not share personal data for cross-context behavioral advertising or use it to build advertising profiles.
We do not buy third-party consumer profiles or lists for data enrichment or targeted advertising.
We do not collect sensitive personal data through our corporate website unless you or a customer specifically provides and authorizes it for a defined purpose.
We do not use customer data for our own advertising, and we do not access or use it except as authorized to provide, secure, support, or improve the contracted services, or as required by law.
3. Personal data we may receive
Depending on how you interact with us, we may receive the following limited categories of personal data:
Information you choose to provide, such as your name, business contact details, company, job title, inquiry, support request, communication preferences, and consent choices.
Account and service information, if you are an authorized platform user, such as credentials, role, permissions, authentication records, and activity necessary to provide or secure the service.
Transaction and relationship information, such as contracting contacts, invoices, payment status, and related business records. Payment-card details, when used, are handled by authorized payment providers rather than stored by Lenos unless expressly stated at collection.
Limited technical and security data that may be generated when systems are used, such as IP address, browser or device type, timestamps, authentication events, error logs, and security events.
We use this information to operate, troubleshoot, protect, and maintain our systems—not to create advertising profiles.
Customer-controlled data submitted to the Lenos Ignite platform, but only as configured or authorized by the customer.
If you do not provide requested information, we may be unable to respond to your request or provide the relevant service. We do not intentionally collect more data than is reasonably necessary for the stated purpose.
4. Cookies and similar technologies
Our corporate website is designed to operate without advertising or cross-site tracking cookies. We may use strictly necessary cookies or similar technologies for security, authentication, session management, consent preferences, load balancing, and core site functionality. These technologies are not used by Lenos to follow you across unrelated websites or deliver behaviorally targeted advertising. Some browsers and devices allow you to control cookies. Blocking necessary cookies may affect login or other requested functionality. Where applicable law requires consent for a non-essential technology, we will request that consent before using it.
5. How and why we use personal data
We use personal data only for a defined and appropriate purpose, including to:
respond to inquiries, demonstrations, support requests, and other communications you initiate;
provide, administer, maintain, configure, and secure our websites and services;
authenticate authorized users and enforce access controls;
manage customer, supplier, and business relationships, contracts, billing, and records;
send requested information or communications you have authorized, with an opt-out where required;
detect, investigate, and prevent fraud, misuse, security incidents, and legal violations; and
comply with law and protect the rights, safety, and property of Lenos, our customers, users, and others.
Where a legal basis is required, we rely as appropriate on your consent, performance of a contract or steps requested before entering a contract, compliance with legal obligations, or legitimate interests that are not overridden by your rights. We do not use personal data for a materially different purpose without appropriate notice and, where required, consent.
6. When we disclose personal data
We disclose personal data only as reasonably necessary and subject to appropriate safeguards:
to service providers and subprocessors that support hosting, security, communications, customer support, payment processing, professional services, or other operations, under contractual obligations appropriate to their role;
to a Lenos customer, at that customer’s direction, for data associated with the customer’s program or account; to professional advisers, auditors, insurers, and authorities when reasonably necessary to obtain advice, protect rights, investigate misconduct, or comply with law; or
in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to confidentiality and applicable law.
We do not authorize service providers to use personal data for their own marketing or unrelated purposes.
7. International data transfers
Lenos is based in the United States. If personal data is transferred across national borders, we use safeguards required by applicable law, which may include contractual protections, transfer assessments, or another recognized transfer mechanism. Our customer contracts may also specify approved data locations and subprocessors.
8. Retention and deletion
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected or processed, including to provide services, follow customer instructions, maintain required business and security records, resolve disputes, and meet legal obligations. We then delete, de-identify, or securely dispose of it, subject to lawful backup cycles and preservation requirements.
Customer-controlled data is retained and deleted according to the customer’s instructions and contract.
Lenos does not independently determine the retention period for that data except as required by law.
9. Security
We use administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, use, alteration, disclosure, loss, or destruction. These safeguards are informed by data minimization, role-based access, encryption, secure development and operations, monitoring, incident response, and vendor oversight. No system can be guaranteed to be completely secure, but we work to reduce risk throughout the data lifecycle.
10. Your privacy rights and choices
Depending on where you live and subject to applicable exceptions, you may have rights to request access, correction, deletion, restriction, portability, or information about our processing; to object to certain processing; to withdraw consent; and to appeal a decision concerning a request. You may also have the right not to receive discriminatory treatment for exercising a privacy right.
Lenos does not sell personal data or share it for cross-context behavioral advertising. If our practices change, we will provide any legally required opt-out mechanism and update this Statement before the change applies.
To submit a request concerning data controlled directly by Lenos, contact us using Section 14. We may take reasonable steps to verify your identity and authority. You may use an authorized agent where permitted by law. If the data was submitted through a customer program, please identify the customer
11. Marketing communications
We send promotional communications only when authorized or otherwise permitted by law. You can opt out through the unsubscribe method in the message or by contacting us. Opting out of marketing does not stop transactional, service, security, or relationship communications that are necessary or requested.
12. Children
Our corporate website and business services are not directed to children, and we do not knowingly collect personal data from children through the corporate website. A customer may use the Lenos Ignite platform for a program involving minors only under the customer’s direction and responsibility, including any required parental notice or consent. If you believe a child’s data was provided to Lenos improperly, please contact us.
13. Third-party sites and services
Our websites or customer programs may link to third-party sites or services. Their privacy practices are governed by their own notices. Lenos is not responsible for a third party’s independent privacy practices.
14. Contact us
To ask a privacy question, submit a request, or raise a concern, contact:
Lenos Software
Attention: Privacy
San Francisco, California, USA
If applicable law gives you the right to complain to a data protection authority, you may contact the authority in your place of residence, work, or the location of the alleged issue.
15. Changes to this Statement
We may update this Statement to reflect changes in our practices, services, or legal obligations. We will post the revised version and update the effective date. If a change materially affects how we use personal data already collected, we will provide additional notice or obtain consent when required by law.