Privacy Policy

1. Information We Collect

We collect information you provide directly (account email, billing details), information generated as you use Leadora (search queries, scrape jobs, exported leads), and minimal technical data (IP address, browser type) needed to operate the Service.

2. Google OAuth and Google Sheets

When you connect Google Sheets, we use Google OAuth 2.0 to obtain a scoped access token. We request only the permissions needed to read and write the Google Sheet you specify. We do not access any other files in your Google Drive.

OAuth refresh tokens are stored encrypted at rest and are used solely to keep your Google Sheets sync working. You can revoke access at any time from the Google Sheets page in the dashboard or from your Google Account permissions.

Leadora's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Lead Data Storage

Lead records you generate (business name, address, phone, website, email, ratings) are stored in our database so you can re-export them and review job history. You may delete your leads at any time. Deleted leads are removed from our active database within 30 days.

4. How We Use Information

We use the information we collect to operate, maintain, and improve the Service; process payments; provide customer support; and send service-related communications. We do not sell your personal data.

5. Sharing

We share data only with: (a) infrastructure providers (hosting, database, email); (b) payment processors; and (c) authorities when required by law. Each provider is bound by confidentiality and data-protection obligations.

6. Security

We use industry-standard safeguards including TLS in transit, encryption at rest for sensitive credentials, and least-privilege access controls. No system is 100% secure, but we work hard to protect your data.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. Contact us to exercise these rights.

8. Data Retention

We retain account data while your account is active. After deletion, residual backups are purged within 90 days.

9. Children

Leadora is not directed to children under 16 and we do not knowingly collect their personal data.

10. Changes

We may update this policy. Material changes will be communicated via email or in-app notice.

11. Contact

Privacy questions? Email privacy@leadora.app.