Your information

Privacy notice

A practical explanation of what Lean handles, why it is used, and how to ask for help. Updated 2 November 2026.

Who operates Lean

Lean is a lead analytics and customer-service CRM service provided by Thumbuh, independently operated by Wahyu Ajinegoro. Thumbuh is an independently owned business name, not a claim of registered company status. Contact thumbuh.id@gmail.com about privacy or data requests.

When a business uses Lean to serve its customers, that business decides the purposes for which its customer information is used. Customers can contact the business they dealt with, or ask us for help directing a request.

This public website

This website has no marketing trackers, analytics scripts, or advertising cookies. The website hosting and network providers may process technical request information, such as IP addresses and browser information, to deliver and protect the site. Hosting uses Sites and Cloudflare infrastructure.

If you email us, we receive the information you choose to send and your email contact details. Please do not send passwords, access tokens, or sensitive identity documents.

Information in the connected service

The information processed depends on the service and integrations enabled for a business. It can include:

  • Customer names, contact details, WhatsApp messages and conversation metadata, orders, and payment records.
  • Meta campaign and account identifiers, report dates, advertising costs, impressions, clicks, and currency.
  • Conversion and attribution information, including customer identifiers and normalized, hashed phone numbers, email addresses, names, or city information. Hashing does not make this information anonymous.
  • Browser and click identifiers and user-agent information used for attribution. Where enabled, a native IP address may be held in memory for up to 15 minutes for this processing.

We use this information to operate the CRM, support customer service, report campaign activity, attribute conversions, troubleshoot issues, and maintain the service.

Integrations and service providers

Depending on the business’s configuration, information may be processed through Meta and WhatsApp, Google Ads, Google Sheets, n8n automation, and Claude-assisted reporting or chat classification. These features are enabled for the agreed service; they are not marketing trackers on this public website.

The CRM runs on application-server and cloud infrastructure. Relevant information is shared with the providers needed to deliver an enabled integration. Each platform may also retain its own copies under its terms and privacy practices. Provider infrastructure may process information outside your country.

Access and security

Connections require authorization from the relevant business or account owner. Access should be limited to what is necessary for the agreed service. We take reasonable steps to restrict access and protect credentials and records, but no system can guarantee absolute security.

Retention

Retention varies by record type and the business’s operational requirements. Current chat copies are retained for at least 60 days, and some metadata is currently retained without a scheduled deletion date. Business records may be kept for ongoing operational, accounting, dispute, or other applicable requirements.

Backups rotate separately. A deletion from active systems may not immediately remove a backup copy or a copy held by another platform. We cannot promise a single deletion deadline for every system or record.

Your choices and requests

Contact thumbuh.id@gmail.com to ask about access, correction, disconnection, or deletion. We may verify your identity and authority before making changes. The response depends on the information involved, the business’s instructions, and applicable requirements.

Disconnecting an integration stops future authorized access; it does not automatically delete information already stored. Our data deletion instructions explain how to request a review of stored information.

Changes to this notice

We may update this notice as the service changes. The date above identifies this version. Contact us if you need clarification about a particular business configuration.