Legal
Privacy Policy
Effective date: May 15, 2026
1. Who we are
Benjamin is operated by Lean it 101, a company providing AI-powered customer support automation. When this policy refers to “Benjamin,” “we,” “us,” or “our,” it means Lean it 101 operating the Benjamin platform.
For privacy-related enquiries, contact us at privacy@leanit101.com.
Benjamin is a B2B platform. Our direct customers are businesses (the “clients”) who use Benjamin to handle their own customers’ support conversations. For the personal data of end-customers flowing through those conversations, Benjamin acts as a data processor on behalf of our clients, who are the data controllers.
2. What data we collect
We collect the following categories of data:
Account data
When a business signs up for Benjamin, we collect the name, work email address, company name, and role of the people who register and manage the account. This is data about our direct clients.
Conversation data
Support messages and conversation transcripts are processed through the Benjamin platform on behalf of our clients. This data is processed under the instruction of the client and is governed by our data processing agreement with them. We do not use one client’s conversation data to improve AI responses for any other client.
Usage data
We collect information about how clients use the Benjamin dashboard: pages visited, features used, and session times. This helps us improve the product.
Technical data
Standard web server logs include IP addresses, browser type and version, and referring URLs. These are retained as described in Section 5.
3. How we use data
- ·To provide, operate, and maintain the Benjamin service.
- ·To improve response accuracy and platform performance, using aggregated and anonymised signals.
- ·To send product updates, onboarding guidance, and (with your consent) marketing communications.
- ·To detect fraud and maintain the security of our systems, under legitimate interest.
We do not sell personal data to third parties.We do not use your customers’ support conversation data to train AI models that serve other clients.
4. Legal basis for processing (GDPR)
If you are located in the European Economic Area, our legal bases are:
- ·Contract performance: processing account data and conversation data is necessary to deliver the Benjamin service under our agreement with you.
- ·Legitimate interest: security monitoring, fraud prevention, and product analytics where our interest is not overridden by your rights.
- ·Consent: marketing and promotional communications. You can withdraw consent at any time.
5. Data retention
- ·Account data is held for the duration of your contract plus 90 days after termination, after which it is deleted or anonymised.
- ·Conversation data is retained according to the configuration set by each client tenant. Clients may request earlier deletion.
- ·Log and technical data is retained for 90 days for security and debugging purposes.
6. Third-party processors
We use the following sub-processors, each of whom processes data only under our instruction and pursuant to data processing agreements:
| Processor | Purpose |
|---|---|
| OpenAI | AI inference: processing conversation messages |
| Amazon Web Services (AWS) | Cloud infrastructure and file storage (S3) |
| SendGrid | Transactional and product email delivery |
| Stripe | Payment processing and billing |
| Weaviate | Vector search for knowledge base retrieval |
7. Your rights
Depending on your location, you may have the following rights regarding your personal data:
- ·Access: Request a copy of the personal data we hold about you.
- ·Rectification: Ask us to correct inaccurate data.
- ·Erasure: Request deletion of your data (subject to legal retention obligations).
- ·Portability: Receive your data in a structured, machine-readable format.
- ·Restriction: Ask us to limit processing while a dispute is resolved.
- ·Objection: Object to processing based on legitimate interest.
- ·Do Not Sell (CCPA): California residents may opt out of the sale of personal information. We do not sell personal data, but you may contact us to confirm.
To exercise any of these rights, email privacy@leanit101.com.
8. Cookies
We use session cookies strictly necessary to maintain authenticated sessions in the Benjamin dashboard. These are not optional.
We do not use advertising or tracking cookies. We may use analytics tools (such as Google Analytics) to understand aggregate usage patterns. If you prefer not to be tracked by Google Analytics, you can install the Google Analytics opt-out browser add-on.
9. Updates to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at least 30 days before the changes take effect. The updated policy will also be posted at this URL with a revised effective date. Continued use of Benjamin after the effective date constitutes acceptance of the updated policy.
10. Contact
For any privacy-related questions, requests, or complaints, contact us at privacy@leanit101.com. We will respond within 30 days.