Privacy Policy

• Account details — your name, email address, and a hashed password, or a Google account identifier if you sign in with Google.
• Billing details — handled by Stripe. We store your Stripe customer and subscription identifiers and your plan; we never see or store full card numbers.
• Usage data — searches you run, credits consumed, lists you create, and basic technical logs (IP address, browser, timestamps) used to run and secure the Service.
• Content — the notes and tags you add to leads.

When you search, we query third-party providers — primarily Google's Places data — for publicly listed business information (company name, address, phone number, website, rating). This is information a business has chosen to publish. Leadio does not scrape gated networks such as LinkedIn, and does not build profiles of private individuals.

If you save a business to a list, we store that record in your account so you can annotate and export it.

• to provide the Service and your saved lists;
• to meter credits and process payments;
• to secure the Service, prevent abuse, and troubleshoot problems;
• to send you essential account and billing emails, and — if you opt in — occasional product updates;
• to comply with legal obligations.

We do not sell your personal data.

We share data only with service providers that help us operate:

• Stripe — payment processing.
• Google — business data lookups (search queries are sent to Google's Places API).
• Our hosting and database providers — to run the application.

We may also disclose data if required by law or to protect the rights and safety of Leadio, our users, or the public. If Leadio is involved in a merger or acquisition, data may transfer as part of that deal.

Where applicable law requires a legal basis (for example under the GDPR), we rely on: performing our contract with you (running the Service, metering credits, billing); our legitimate interests (securing the Service, preventing abuse, improving the product); your consent (optional marketing email, which you can withdraw at any time); and compliance with legal obligations.

We and our service providers (Stripe, Google, our hosting and database providers) may process data in the United States and other countries. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for transfers out of the EEA, UK, or Switzerland.

We keep account and content data while your account is active and for a reasonable period afterward to meet legal, tax, security, and dispute-resolution needs. Deleting your account removes your profile, lists, and saved leads from active systems within 30 days; residual copies in backups age out on our normal backup rotation. Billing records are kept as long as required by tax and accounting law.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority. California residents have similar rights under the CCPA/CPRA, including the right to know what personal information we hold and to request its deletion; we do not sell personal information. You can exercise most of these rights yourself from your account settings, or by emailing us — see Contact below. We'll respond within the time required by applicable law. You can unsubscribe from non-essential email at any time using the link in the email.

Passwords are hashed (never stored in plain text), data is encrypted in transit via TLS, and access to production data is limited to people who need it to operate the Service. No system is perfectly secure, and we can't guarantee absolute security, but we work to protect your data and will notify you as required by law if a breach affects your account.

We use a small number of first-party, strictly-necessary cookies for authentication and to remember lightweight preferences. We don't use third-party advertising or tracking cookies, and we don't sell or share data for cross-context behavioral advertising.

The “Leadio score” shown next to search results is a simple, transparent scoring calculation based on public business signals (rating, review volume, presence of a website, phone, and social profiles). It is a research convenience for you, not a decision made about you, and it is never used to make any decision about your account.

Leadio is not directed to, and we don't knowingly collect personal data from, anyone under 18. If you believe a child has provided us data, contact us and we'll delete it.

We may update this policy as the Service evolves. We'll update the “Last updated” date above and, if a change is material, notify you by email or an in-app notice before it takes effect.

Questions, requests, or complaints about this policy: [email protected]. See also our Terms of Service.