Privacy

Privacy policy

Last updated August 17, 2026

Who operates this site

Leaf is operated by Harvest Labs. This policy applies to leafsmartgrowth.com and the forms and assessment tools published on it.

Information we collect

We collect information you submit, such as your name, email, company, website, requested service or plan, agency client-domain range, application context, and marketing preference. Service applications may also record the submitting page, selected CTA, first landing path, referring domain, and campaign parameters so Leaf can respond with the right context. The free assessment also processes the public website URL you request, observable page signals, request timestamps, IP-derived abuse controls, and basic browser information.

How we use it

We use submitted information to provide the requested assessment, verify inbox access, evaluate audit fit, respond to applications, prevent abuse, improve the funnel, and provide marketing updates only when you opt in. We do not treat an assessment score as a guarantee or make automated decisions with legal or similarly significant effects.

Service providers

The production flow may use Vercel for hosting, Cloudflare Turnstile for abuse prevention, Resend for transactional email, Airtable for lead and application records, Stripe for checkout, Calendly for scheduling, and PostHog for configured product analytics using bounded event names and offer, page, and CTA categories rather than submitted form values. PostHog autocapture, automatic page events, and person profiles are disabled. Event properties are projected onto an explicit allowlist; URL paths, referrers, campaign parameters, advertising-click identifiers, and unknown SDK-added properties are discarded. Each provider processes data under its own terms and privacy commitments.

Retention

Assessment links are designed to expire. Lead, application, transaction, and consent records are retained only as long as needed for the request, business records, security, and applicable legal obligations. Suppression records may be retained to honor opt-outs.

Your choices

Marketing consent is optional and can be withdrawn. You can request access, correction, or deletion of personal information by replying to a Leaf message or contacting tamyres@clovergrowth.com.br. Legal and security obligations may require limited retention.

Security and international processing

We use access controls, server-side secrets, bounded retrieval, signed expiring links, and abuse protections. No internet service can promise absolute security. Providers may process information in countries other than yours.

Changes

We may update this policy as the service changes. The date above identifies the current version.