Privacy policy
Last updated: October 15, 2026
Who we are
Lefkio is a WhatsApp CRM built and operated by Sociaphase, a trade name of Thriveark Inc. This policy explains what data the lefkio.com website collects and how the Lefkio application treats data. For anything privacy-related, write to us at hello@lefkio.com.
What this website collects
The lefkio.com website does not use advertising trackers or analytics cookies. The only personal data it collects is what you choose to send us through the demo request form: your name, email address and, optionally, a WhatsApp number, business name and message.
Demo requests are delivered to our inbox by email and are used for one purpose: to reply to you and schedule your demo. We do not sell this data, share it with third parties for marketing, or add you to a mailing list you didn't ask for.
Server logs
Like nearly every website, our hosting infrastructure keeps standard access logs (such as IP address, browser type and pages requested) for security and troubleshooting. These are not used to profile visitors.
Data in the Lefkio application
When a business subscribes to Lefkio, the conversations, contacts and related records it manages in the application belong to that business — we process them on the business's behalf to provide the service, and the business can export its data at any time.
- When a business connects its WhatsApp Business Account to Lefkio, Lefkio accesses that account only to set up its phone number for messaging, send and receive messages, manage message templates and show the business its WhatsApp messaging volume and costs, all on the business's behalf. The business can disconnect it at any time from Lefkio's settings or from Meta Business Manager.
- Messages are sent and received through the official Meta WhatsApp Business API, so their transmission is also subject to Meta's terms and policies. Data we receive from the WhatsApp Business Platform (such as phone numbers, profile names and message content) is used only to provide the Lefkio service to the subscribing business, is handled in accordance with Meta's applicable platform terms, and is never sold or used for advertising.
- If a subscriber enables the AI assistant, it runs with OpenAI or Anthropic models, on the subscriber's own API key or on ours when they ask us to provide it; we do not use subscriber conversations to train models.
- Opt-outs (such as STOP replies) are honored automatically.
Service providers
We use a small number of service providers (sub-processors) to run the website and the Lefkio application:
- Supabase — database, authentication and storage, United States
- Hostinger — application hosting and demo-form email, Germany
- Meta Platforms — WhatsApp Business Platform, message delivery
- OpenAI and Anthropic — AI assistant, United States, only when a subscriber enables it
Thriveark Inc. (Canada) is the data controller for personal data collected through this website and for subscriber account information. For the conversations, contacts and records a business manages in Lefkio, that business is the controller and we act as its processor.
Retention, deletion and your rights
We keep demo enquiries only as long as needed to follow up. When a subscription ends, the business's conversations, contacts and records are deleted within 30 days; the business can request an export before then. You can ask us at any time to access, correct or delete the personal data we hold about you by emailing hello@lefkio.com.
To request deletion of your data, email hello@lefkio.com with the subject "Data deletion request" and we will confirm once it is done. If you have messaged a business that uses Lefkio, you can also ask that business to delete your conversation and contact record, or contact us directly and we will assist.
Changes to this policy
If we change this policy, we'll update this page and the date at the top. Significant changes affecting subscribers will be communicated directly.