Privacy Policy

1. Scope

This Privacy Policy explains how Leads Lord ("Leads Lord", "we", "us", or "our") collects, uses, stores, and shares data when you use our website at https://www.leads-lord.com, lead discovery tools, connected email and WhatsApp outreach features, API and MCP integrations, and customer support channels.

If you connect a third-party mailbox such as Gmail or Microsoft Outlook, additional practices in Section 4 apply to data obtained through those providers.

2. Data We Collect

• Account data: name, email, company, authentication details, and workspace settings.
• Usage data: page events, campaign actions, and product interaction logs.
• Operational data: lead queries, selected filters, exports, outreach drafts, and campaign history.
• Connected mailbox data: when you authorize Gmail or Microsoft, we store the mailbox address, display name, encrypted OAuth tokens, and connection metadata needed to send mail and sync replies on your behalf.
• Email activity data: messages you compose or send through Leads Lord, delivery status, bounces, complaints, unsubscribes, and limited inbox metadata used for reply detection (see Section 4).
• Billing data: subscription and payment metadata from payment processors.
• Support data: inquiries and communication history with our team.

3. How We Use Data

• Provide and maintain lead generation, email outreach, WhatsApp outreach, and related workflow features.
• Send email from mailboxes you connect and operate, only when you initiate or schedule outreach in the product.
• Detect replies to your outreach so sequences and campaign status can update accurately.
• Improve data quality, deliverability checks, and AI-assisted lead relevance.
• Prevent abuse, secure the platform, and investigate incidents.
• Process subscriptions, billing, and related notifications.
• Provide product support and operational communication.

We do not use Google user data for serving advertisements, and we do not sell Google user data.

4. Google Gmail and Microsoft Outlook Integrations

Leads Lord lets you optionally connect your own Gmail or Microsoft mailbox in Settings so you can send outreach from your real sender address. Connection is voluntary. We access third-party mailbox data only after you complete the provider's OAuth consent screen.

4.1 Google Gmail (Google OAuth)

When you choose Connect Google (Gmail), we request the following Google OAuth scopes:

• openid and userinfo.email — to identify the Google account you connected and display the mailbox address in Leads Lord.
• gmail.send — to send email you compose or approve in Leads Lord from your connected Gmail address.
• gmail.readonly — to read limited inbox metadata from recent messages so we can detect replies to outreach you sent through Leads Lord. We read sender address and received date metadata only for this purpose; we do not use Gmail access to read unrelated personal mail for advertising, profiling, or resale.

Leads Lord's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We store Google OAuth refresh and access tokens in encrypted form. Tokens are used only to provide the connected mailbox features you enable. We do not share Gmail content with unrelated third parties. Human access to mailbox content is limited to what is necessary for security, abuse prevention, compliance, or support at your request.

4.2 Microsoft Outlook / Microsoft 365

When you connect Microsoft, we request permissions to read your profile email, send mail, and read limited inbox metadata for reply detection, similar to the Gmail integration above. Microsoft tokens are also stored in encrypted form and used only to operate connected-mailbox features you enable.

4.3 Disconnecting or revoking access

You can stop our access at any time by:

• Removing the connected mailbox in Leads Lord under Settings → Email.
• Revoking Leads Lord in your Google Account security settings at myaccount.google.com/permissions.
• Revoking Leads Lord in your Microsoft account app permissions, if applicable.

After disconnection, we stop using the associated OAuth tokens. Historical send logs needed for billing, compliance, deliverability, or support may be retained as described in Section 7.

5. Data Sharing

We do not sell personal data. We may share limited data with trusted processors and service providers needed to operate the platform, such as infrastructure, analytics, authentication, messaging, and billing providers. Google user data obtained through Gmail APIs is not sold or transferred to data brokers, advertising networks, or unrelated third parties.

We may also disclose data when required by law, legal process, or to protect platform integrity.

6. International Use and Regional Compliance

Customers worldwide use Leads Lord. You are responsible for using platform data and outreach in line with the laws and regulations that apply to you and your recipients.

• Privacy rights requests (e.g. access, deletion) can be made through our contact channels where applicable.
• Email and messaging campaigns must follow applicable anti-spam, consent, and privacy rules in your jurisdiction.
• Review local requirements before contacting prospects in any market.

7. Retention and Security

We retain data for as long as needed to provide services, comply with legal obligations, and resolve disputes. Connected mailbox OAuth tokens are retained while the mailbox remains connected and are deleted or invalidated when you disconnect the account or revoke provider access.

We apply technical and organizational safeguards, including encryption for stored OAuth credentials, access controls, and security monitoring, to help protect data from unauthorized access, loss, or misuse.

8. Your Rights

• Access, correction, and deletion requests for account data.
• Objection to certain processing where applicable by law.
• Request for export of your account-related data where technically feasible.
• Disconnect third-party mailboxes and revoke OAuth access through product settings or your provider account.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice in the product or by email.

10. Contact