Privacy Policy

Overview and Scope

Effective date: January 20, 2026.

This Privacy Policy describes how Leucadia LLC collects, uses, and discloses information in connection with the Leucadia website, marketing activities, and the Leucadia platform (the Services).

If your organization has a written agreement with Leucadia, that agreement governs how we process Customer Data on your behalf.

Information We Collect

We collect information in three main ways: information you provide, information generated through use of the Services, and information collected automatically.

• Contact and account information such as name, company, role, email address, phone number, and login credentials.
• Customer Data submitted to the Services, such as call recordings, transcripts, evaluations, scorecards, complaint records, coaching notes, and related metadata.
• Usage, device, and log data such as IP address, browser type, access times, authentication activity, event logs, and error reports.
• Marketing and communications data such as demo requests, meeting notes, and email preferences.
• Cookie and analytics data from the website and product interfaces.

How We Use Information

We use information to operate, secure, and improve the Services and to communicate with you.

• Provide and administer accounts, authentication, and access controls.
• Process Customer Data to generate transcripts, evaluations, evidence, analytics, and reports.
• Monitor for security, prevent abuse, and maintain audit logs.
• Respond to inquiries, provide support, and deliver required notices.
• Develop and improve product features, quality, and performance.
• Comply with legal obligations and enforce agreements.

Legal Bases for Processing

Where required by law, we process personal data based on contractual necessity, legitimate interests such as securing and improving the Services, consent for marketing communications, and compliance with legal obligations.

You may withdraw consent where applicable by contacting us or using unsubscribe mechanisms.

How We Share Information

We share information only as necessary to provide the Services, operate our business, and comply with law.

• Service providers and subprocessors that support hosting, storage, transcription, communications, analytics, and customer support.
• Professional advisors and auditors under confidentiality obligations.
• Law enforcement or regulators when required by law or to protect rights and safety.
• Business transfers in connection with a merger, acquisition, or asset sale.
• Other parties at your direction or with your consent.

Subprocessors

We maintain a list of subprocessors upon request and flow down data protection obligations to them.

Leucadia remains responsible for their performance of contracted services.

Data Retention

We retain information for as long as needed to provide the Services, meet contractual commitments, comply with legal obligations, and resolve disputes.

Customer Data is retained according to customer-configured settings and instructions, subject to backup and archival cycles.

Upon termination, we will return or delete Customer Data consistent with our agreements unless retention is required by law.

Security and SOC 2 Alignment

We maintain a security program designed to align with SOC 2 expectations for security, availability, and confidentiality.

Controls include encryption in transit and at rest, role-based access, least-privilege administration, logging and monitoring, vulnerability management, incident response procedures, and business continuity planning.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International Transfers

We may process information in the United States and other locations where we or our service providers operate.

Where required, we use appropriate safeguards such as standard contractual clauses for cross-border transfers.

Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal data.

If you are an end user of a customer, please contact your organization to exercise rights related to Customer Data.

You can opt out of marketing emails using the unsubscribe link or by contacting us.

Children's Privacy

The Services are not directed to children under 16, and we do not knowingly collect personal data from children.

Changes to This Policy

We may update this policy from time to time. We will revise the effective date and post the updated policy on this page.

If changes are material, we will provide additional notice as required by law.

Contact

For privacy or legal questions, contact legal@leucadia.ai. For general inquiries, contact support@leucadia.ai.