Privacy Policy
Last updated: March 11, 2026
1. Introduction
LEC Group Inc. ("LEC Group," "we," "our," or "us") is a technology holding company headquartered at 6900 N Highlands Drive, Paradise Valley, AZ 85253. We operate multiple application brands, including:
- Sebenza — a workforce management platform serving the New Zealand market
- Stokvel — a digital community savings group platform serving the US market
- AI Office Incubator — an AI productivity and workforce automation platform serving the US market
- Symmetry — an SAP change management and workflow orchestration platform for enterprise customers
- InfusionDesk — an AI-powered SAP incident prevention and service delivery platform
- CredentialBridge — a KYC credential-as-a-service platform for XRPL permissioned finance
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our websites, use our applications, or otherwise interact with our services. Please read this policy carefully. By using any of our services, you acknowledge the practices described in this policy.
2. Information We Collect
2.1 Information You Provide
We collect personal information that you voluntarily provide when you register for an account, make a purchase, contact us, or otherwise interact with our services:
- Identity information: name, username, profile photo
- Contact information: email address, phone number, mailing address
- Account credentials: passwords and security questions
- Payment information: credit/debit card details, bank account information (processed securely through Stripe)
- Employment information: work history, skills, visa status, tax information (Sebenza)
- Financial group information: savings contributions, group membership details (Stokvel)
- Organization information: company name, industry, team size (AI Office Incubator, Symmetry, InfusionDesk)
- SAP system information: system logs, transport requests, landscape configuration (Symmetry, InfusionDesk)
- Identity verification data: KYC/AML documents, wallet addresses (CredentialBridge)
- Communications: messages, support requests, feedback you send us
2.2 Information Collected Automatically
When you access our services, we automatically collect certain information:
- Device information: device type, operating system, browser type, unique device identifiers
- Usage data: pages visited, features used, actions taken, time spent, click patterns
- Network information: IP address, internet service provider, general location
- Log data: access times, error logs, referring URLs
2.3 Information from Third Parties
We may receive information about you from third-party services you connect to your account, identity verification providers, payment processors, or publicly available sources.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our services
- Process transactions and send related confirmations and receipts
- Create and manage your account
- Send administrative messages, security alerts, and support communications
- Send SMS notifications (see our SMS Terms for details)
- Facilitate workforce management, job matching, and scheduling (Sebenza)
- Manage savings group contributions, payouts, and governance (Stokvel)
- Provide AI employee configuration, assessment, and deployment services (AI Office Incubator)
- Manage SAP change workflows, transport requests, and landscape monitoring (Symmetry)
- Analyze SAP system logs, predict failures, and manage incident resolution (InfusionDesk)
- Verify identity credentials and issue on-chain credentials on the XRPL (CredentialBridge)
- Personalize and improve your experience
- Analyze usage patterns to improve our products and services
- Detect, prevent, and address fraud, abuse, and security issues
- Comply with legal obligations and enforce our terms
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service providers: We share information with third-party vendors who perform services on our behalf (see Section 6 below)
- Organizations and groups: Information may be shared with employers, team administrators, or group members as necessary for the platform's function (e.g., an employer on Sebenza can see worker profiles; Stokvel group members can see contribution status)
- Legal requirements: We may disclose information when required by law, subpoena, court order, or governmental request
- Safety and rights: We may disclose information to protect the safety, rights, or property of LEC Group, our users, or the public
- Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction
- With your consent: We may share information for other purposes with your explicit consent
5. Data Storage and Security
We store your data on secure servers provided by our infrastructure partners. We implement industry-standard security measures to protect your personal information, including:
- Encryption in transit (TLS/SSL) and at rest
- Row-level security policies on database tables
- Regular security audits and vulnerability assessments
- Access controls limiting employee access to personal data
- Secure authentication mechanisms including multi-factor authentication
While we take reasonable measures to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
6. Third-Party Services
We use the following third-party services to operate our platforms:
| Provider | Purpose |
|---|---|
| Supabase | Database hosting, authentication, and backend infrastructure |
| Twilio | SMS messaging and phone verification |
| Stripe | Payment processing, subscriptions, and payouts |
| Vercel | Website and application hosting, edge delivery |
Each of these providers has their own privacy policies governing how they handle data. We encourage you to review their respective policies. We only share the minimum information necessary for each service to perform its function.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Remember your preferences (e.g., theme, language)
- Authenticate your session and keep you logged in
- Analyze site traffic and usage patterns
- Improve our services based on how they are used
You can control cookies through your browser settings. Disabling cookies may affect the functionality of our services. We do not use cookies for third-party advertising.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct inaccurate or incomplete personal information
- Deletion: Request that we delete your personal information, subject to certain exceptions
- Portability: Request a machine-readable copy of your data
- Opt-out of communications: Unsubscribe from marketing emails or reply STOP to SMS messages
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, contact us at greg@lecgroup.com. We will respond to your request within 30 days.
9. California and Colorado Privacy Rights (CCPA / CPA)
If you are a resident of California or Colorado, you have additional rights under the California Consumer Privacy Act (CCPA) and the Colorado Privacy Act (CPA):
- Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collection, and the categories of third parties with whom we share it
- Right to delete: You may request deletion of your personal information, subject to certain legal exceptions
- Right to opt out of sale: We do not sell personal information. If this practice ever changes, we will provide a clear opt-out mechanism
- Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights
- Right to correct: You may request correction of inaccurate personal information
To submit a verifiable consumer request, contact us at greg@lecgroup.com or call +1-303-715-8102. We may need to verify your identity before processing your request.
10. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us.
11. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our services. We may also retain certain information as required by law, to resolve disputes, enforce our agreements, or for legitimate business purposes. When information is no longer needed, we securely delete or anonymize it.
12. International Data
Our services are operated from the United States and New Zealand. If you access our services from outside these countries, your information may be transferred to, stored, and processed in a country with different data protection laws than your own. By using our services, you consent to such transfer.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where required, notify you by email or through our services. We encourage you to review this policy periodically.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: greg@lecgroup.com
- Phone: +1-303-715-8102
- Mail: LEC Group Inc., 6900 N Highlands Drive, Paradise Valley, AZ 85253