Privacy Policy

1. Information We Collect

We collect the following categories of information to provide and improve our B2B lead generation platform:

• Account information: Name, email address, password hash, and system profile information when you sign up for LeedFinder.
• Gmail OAuth tokens: Encrypted access and refresh tokens to safely connect to your Gmail account and send B2B campaign emails on your behalf.
• Search data: Specific niches, locations, and cities you search for inside the platform.
• Lead data: Business details, names, physical addresses, ratings, and social links discovered publicly via Google Places API and our scraper index.
• Usage data: Page views, feature interactions, metrics counts, navigation logs, and timestamps.

2. How We Use Your Information

Your data is utilized solely for B2B operations and service improvement, specifically:

• To provide relevant B2B lead search results using public data directories and APIs.
• To construct and send personalized cold outreach campaigns from your connected Gmail address.
• To monitor and display lead replies inside your Campaigns dashboard inbox.
• To train and optimize search suggestion models and active filter conflicts validators.
• To communicate service notifications, subscription billing status, and platform security updates.

3. Gmail Data

LeedFinder connects with your email inbox using Google OAuth 2.0. We maintain strict compliance with Google API Services User Data Policy standards:

• We only compose and send emails when you explicitly instruct a B2B campaign to run.
• We only scan incoming threads to match subject/sender identifiers and log direct replies from B2B prospects.
• We never read, harvest, store, or share any personal, non-campaign emails, inbox threads, or unrelated records.
• All authorization tokens are encrypted immediately and kept securely inside our secure database (Supabase).
• You can revoke our access tokens instantly from your Email Management dashboard or directly in your Google Account Settings.

4. Third Party Services

We integrate with high-security industry services to ensure stable and secure features:

• Google Places API: To collect maps and business listings directory data.
• Google Gmail API: To transmit campaign emails and recognize direct B2B replies.
• Supabase: For account storage, standard authentication, and secure database hosting.
• ZeroBounce: To verify and validate lead email deliverability.
• Resend: To deliver transactional platform emails.

5. Data Retention

• Your account listings, settings, and credit balances remain active until you explicitly request profile deletion.
• Connected Gmail OAuth tokens and configuration variables are purged instantly when you disconnect Gmail from the dashboard.
• Historical lead queries, search logs, and temporal results are archived and pruned automatically after 90 days.

6. Data Security

LeedFinder implements comprehensive technical shields to safeguard your data. All connections are encrypted in transit using Transport Layer Security (TLS 1.3) and protected at rest. Crucially, your Gmail OAuth credentials are encrypted using industry-standard AES-256 before being written to our storage layers, ensuring maximum security for your connected inbox.

7. Your Rights

You hold complete control over your B2B profile. You can review your parameters, opt-out of notifications, or request immediate full account deletion directly from the Account Settings panel by clicking the Permanently delete account button. Deleting your account will immediately cancel any active Stripe subscription and permanently erase all search histories, campaigns, and active logs from our servers. Alternatively, you can request account deletion by emailing us directly at ryheeme@gmail.com.