Who is responsible for your data
LeadFindr for your account, you for the people you contact.
LeadFindr is the controller for your account, billing and support data. For the leads you save, export or contact, and for the emails and replies in your campaigns, you decide what happens to that data and you are its controller; we process it on your behalf to run the service. Contact: [email protected].
The data we process
Only what is needed to run your account, your searches and your outreach.
- Account data: your email address, your name and your sign in details. Passwords are stored only as a secure hash.
- Billing data: handled by Stripe. We receive your billing contact and invoice details, and we never store card numbers.
- Search and lead data: the searches you run and the business information they return, collected from Google Maps listings and from each business's own public website, including the names and work emails published there.
- Mailbox data: the login details of each mailbox you connect for the cold email autopilot, stored encrypted, and the emails sent and received through it.
- Usage logs: technical records of what happened in your account, used for security and troubleshooting.
- Ad measurement: when you reach LeadFindr from an ad and then buy, the ad click id and a hashed (scrambled) copy of your email go to that ad platform, such as Meta, so it can count the purchase.
Why we process it, and on which legal basis
Mostly to perform our contract with you.
| Purpose | Legal basis |
|---|---|
| Creating and running your account, and providing the service | Performance of the contract |
| Billing, invoicing and tax records | Performance of the contract and legal obligation |
| Security, abuse prevention and troubleshooting | Legitimate interest in a safe, working service |
| Improving the service | Legitimate interest in a service that works well |
| Counting purchases that came from our ads | Legitimate interest in measuring our advertising |
| Service emails about your account, billing and changes | Performance of the contract |
| Product news and marketing email | Consent, which you can withdraw at any time |
How long we keep it
For the life of your account, then deleted within 30 days, except invoices.
- Account, search, lead, mailbox and campaign data: kept while your account exists, and deleted within 30 days after you ask us to delete the account.
- Invoices and billing records: kept for 7 years, because Dutch tax law requires it.
- Usage logs: short lived, kept only as long as needed for security and troubleshooting.
Who receives your data
Only the service providers that help us run LeadFindr.
We do not sell personal data and we do not share it with advertisers. The companies that process data for us, such as hosting, payments, email delivery, email verification and AI processing, are listed with their country and purpose on our sub-processor list, each only for that purpose and under a contract. We give 14 days notice by email before adding a new one. We may also disclose data where the law requires it.
Sub-processors: every company that processes data for LeadFindr, with its country, purpose and the data it receives.
Transfers outside the EU
Where data leaves the EU, Standard Contractual Clauses protect it.
LeadFindr is hosted in the EU. Some service providers are based outside the European Economic Area, for example in the United States. Those transfers are covered by the European Commission's Standard Contractual Clauses, with extra safeguards where they are needed.
Your rights
You can ask us to show, correct, delete or hand over your data at any time.
- Access: ask for a copy of the personal data we hold about you.
- Rectification: have inaccurate data corrected.
- Erasure: have your data deleted.
- Portability: receive your data in a machine readable format.
- Restriction: ask us to limit how we use your data.
- Objection: object to processing based on legitimate interest.
- Withdraw consent: stop marketing email at any time, with the link in each email or by writing to us.
- Complaint: lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Email [email protected] to use any of these rights. We answer within one month. If you are a business owner whose public details appear in LeadFindr, or you received an email from a LeadFindr customer, you can write to the same address to object or to have your details removed, and we will also pass your request to the customer who contacted you.
Cookies
No advertising or analytics trackers on leadfindr.ai.
We use only strictly necessary cookies, those Stripe sets during checkout, and Cloudflare's bot check on the free try it step. Strictly necessary cookies keep you signed in and the app secure. We do not use advertising or analytics trackers. We may update this policy; material changes are announced by email, and the date at the top always shows the current version.