LeadForge
Русский Start free

Privacy Policy

Last updated:

This policy explains how LeadForge AI, operated by LeadForge AI, processes personal data. It covers two different situations: data about you as our customer, and business lead data that you research with the Service.

1. Roles

  • For your account, billing and usage data we act as the controller.
  • For the lead data you collect and store in your workspace (companies, business contacts, drafts) you decide the purposes and means, so you are the controller and we process it on your behalf. You are responsible for having a lawful basis for your outreach.

2. Data we process about you

  • Account data: email address, name, organisation name, a hashed password and, if enabled, two-factor settings.
  • Workspace data: search profiles, leads, notes, drafts, campaign records and settings you create.
  • Credentials you connect (AI, search and mail keys), stored encrypted.
  • Billing data: plan, status and payment references from our payment processors. We do not store full card numbers.
  • Technical data: IP address, browser type, request logs and security events, kept to run, secure and debug the Service.

3. Business lead data and public sources

The Service reads publicly available business information such as company websites, store pages, public feeds and search results. The data usually describes organisations (name, website, description, business email or contact form). Sometimes it can include a named individual in a professional role. We respect robots.txt, do not log in to third-party sites and do not bypass protections. Data is kept in your workspace for a retention period you can configure, 365 days by default.

4. Opt-out and suppression

If you are a person or company whose contact details appear in the Service and you do not want to be contacted, tell us using the contact details below, or reply to the opt-out line in any message. Addresses on a workspace suppression list are never contacted again by that workspace. We will assist the customer responsible in honouring your request and will remove the data where we are responsible for it.

5. Why we process data and on what basis

  • To provide the Service and perform our contract with you.
  • To secure the Service, prevent abuse and fix errors, based on our legitimate interests.
  • To meet legal obligations such as tax and accounting.
  • On the basis of your consent where the law requires it, which you can withdraw at any time.

6. Cookies

We use only strictly necessary cookies: a session cookie that keeps you signed in. We do not use advertising, analytics or tracking cookies and we do not load third-party scripts, fonts or trackers on this website. Because only strictly necessary cookies are used, no cookie banner is required.

7. Who receives data

  • Hosting and infrastructure providers that run the Service.
  • Payment processors, to take payment and manage subscriptions.
  • AI, search and mail providers that you connect. Page text and prompts are sent to the AI provider you choose, and emails are sent through the mail account you connect. Their policies apply to what they receive.
  • Google Cloud Translation, only if you choose "More languages" in the app: the server then sends Google the fixed interface texts (button labels, headings and help text) to translate them into that language, once per language. No customer data, leads, emails or account details are sent, and the machine translation may be inaccurate.
  • Authorities, when the law requires it.

We do not sell personal data.

8. International transfers

Providers may be located in other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses.

9. Retention

We keep account data while your account is active and for the period needed for legal, accounting and security reasons afterwards. Workspace data is kept according to the retention setting of the workspace and is removed when you delete it or close the account, subject to short backup cycles.

10. Security

We use encryption for stored credentials, access control by workspace, protection against server-side request forgery when fetching pages, and logging of security events. No system is perfectly secure, so use a strong password and enable two-factor authentication where available.

11. Your rights

Depending on where you live (for example under the GDPR) you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive it in a portable format, to withdraw consent and to complain to a data-protection authority. You can export your workspace data from the settings. For other requests, contact us below.

Under the laws of some countries, such as the Russian Federation, additional rules on the storage and processing of citizens' personal data may apply. Contact us if you have a request under such rules.

12. Children

The Service is intended for businesses and professionals and is not directed at children.

13. Changes and contact

We will post updates to this policy here and change the date above.

Questions about these terms, privacy requests and opt-out requests: no-reply@valkiria.website.