Privacy policy

This policy explains how Leadsprig (operator to be configured) (“we”) processes personal data when you use Leadsprig, and how we process data about business contacts that our customers prospect.

1. Data about our customers

• Account data: name, email address, password hash, workspace membership.
• Business data you provide: company profile, ideal customer profile, offers, brand voice.
• Billing data: processed by Stripe. We store the subscription status and invoice records, never full card numbers.
• Usage data: actions taken, credits used and audit logs, used to operate, bill and secure the service.

2. Data about prospects

Our customers decide which prospects to contact and are the controllers of that data; we act as their processor. Prospect data comes from licensed B2B data providers, lists our customers attest they may use, or synthetic demo data. We process business contact details (name, job title, company, business email) and publicly documented company information.

Anyone who receives an email sent through Leadsprig can opt out with the link in that email. Opted-out addresses are suppressed so the customer's workspace cannot contact them again. To request access to or deletion of your data, email privacy@leadsprig.com.

3. Legal bases

We process customer data to perform our contract and for legitimate interests such as security and fraud prevention. Customers are responsible for having a lawful basis for their outreach, such as legitimate interest for relevant B2B communication where local law allows it.

4. Sub-processors

• Hosting and database (for example Vercel and Supabase)
• Payments (Stripe)
• Email delivery (for example Resend)
• AI model providers (for example Anthropic), used to analyze business information and draft messages
• Calendar providers you connect (for example Google Calendar)

5. Retention and deletion

Workspace owners can set a lead retention period, delete individual contacts (which also suppresses them) and export or delete their workspace. Account deletion removes your profile and, if you are the only owner, your workspace data. Suppression entries are kept so opted-out people are not contacted again.

6. Security

Data is isolated per workspace with database row-level security. OAuth tokens and integration secrets are encrypted at rest. Access to production systems is restricted and audited.

7. Contact

Questions or requests: privacy@leadsprig.com.