Security & data handling
What happens to what you type into LeverageOS — stated plainly.
Your inputs are not used to train AI
Analyses run on Anthropic's Claude API. API inputs and outputs are not used to train Anthropic's models. We never sell your data or share it with advertisers.
The landing-page demo stores nothing
Text you type into the guest demo is sent to the analysis engine, returned, and discarded — it is never written to our database. What we record per run is anonymous only: the input's character count, the score bucket, and the industry if you chose to share it. These anonymous aggregates power the public index; the text itself never does.
Where your data lives
Account data, work inputs and analyses are stored in Supabase (PostgreSQL) with row-level security: every table is scoped so you can only ever read your own rows.
Generated artifacts stay yours
Skeleton ZIPs are stored under a folder only you can access, served through short-lived signed URLs with ownership re-verified on every download. Exporting never sends your code anywhere else.
Payments
Payments are processed by Stripe. We never see or store your card number. Webhook events are verified and idempotent.
Reporting a vulnerability
Found something? Email support@leverageos.dev or see /.well-known/security.txt. We take reports seriously and respond quickly.