Privacy Policy

1Information We Collect

Information you give us. When you contact us, purchase a report, or complete an intake form, we collect details such as your name, email address, business name, website URL, and any information you choose to include in your message or intake responses.

Payment information. Payments are processed by Stripe. We do not see or store your full card number; Stripe handles card data under its own security and privacy terms.

Publicly available business information. To prepare your report we review information that is already public, your website, Google Business Profile, reviews, and search results. We do not access private accounts, logins, analytics, or dashboards.

Custom website and software projects. If you hire us to build a custom website, software system, dashboard, or tool, we also collect the content, brand assets, text, images, workflow details, business data, and any account access you choose to grant so we can build and deliver your project.

Automation projects. If an automation connects to a phone number, calendar, inbox, customer list, store or other business system, it processes only the information needed for the job you asked it to perform. The exact connection and permissions are reviewed with you before setup.

Business contact details for outreach. We may collect publicly listed business contact information, such as a business name, website, email, or phone number, to send a brief, relevant introduction to our services. This is business-to-business outreach, and you can ask us to stop at any time (see Your Choices and Rights).

Chat assistant. If you use the chat assistant in the corner of our site, the messages you type are sent to Anthropic, the Claude AI service, to generate replies. A recent copy is stored in your browser for up to 7 days so the conversation can continue if you return; clearing your browser data removes that browser copy. If you share contact details or ask for follow-up, we may also store the conversation and those details with our hosting and email providers so we can deliver the inquiry and respond.

Analytics and technical data. Like most websites we use Google Analytics to see which pages are visited, and our servers log basic technical details such as IP address and browser type to run the free scanner, limit abuse, and keep the site secure.

2How We Use Information

We use the information we collect to deliver and improve our reports, respond to your messages, process payments, send you your report and related updates, and meet legal or accounting obligations. We do not sell your personal information.

Where we send a business introduction by email, we use the information only to reach out about services that may be relevant to that business, and every message includes a way to opt out. For custom builds and automations, we use the materials and connected data you provide only to design, build, operate, deliver and support the service you requested. We do not sell that information or use it for unrelated advertising.

3Service Providers We Use

We rely on a small number of trusted providers to operate, each governed by its own privacy terms:

• Stripe, payment processing.
• Netlify, website hosting, form handling (contact and kickoff forms), and running our self-built free website scanner on a URL you submit. The address you enter is used only to run that scan.
• Anthropic (the Claude AI service), which generates the chat assistant’s replies from the messages you send it.
• Google Analytics, anonymous website-usage measurement, and Google Workspace, our business email.
• Brevo, email delivery and follow-up messages.
• GoHighLevel, the messaging and workflow platform we use to run text-back, scheduling, follow-up and similar automations for subscribed clients, along with the messaging and voice carriers it registers on your behalf.

These providers process data only as needed to provide their service to us. If you subscribe to an automation or the General Manager, we set it up on the platforms above and, only where you choose to connect them, systems you already use, such as your calendar, your invoicing tool (for example QuickBooks), or your Google Business Profile. We will tell you which ones apply to your setup. For those services we process the messages, call details, and records your own customers and systems provide, only to run the service you asked us to run on your behalf.

4Security and Access

Private by design. An automation is not a window into your business. It receives only the information and connections required for its defined task. We do not routinely monitor your day-to-day business activity. If human support access is needed for setup or troubleshooting, it is limited to that purpose and the permissions you approved.

Kept separate, and stoppable. For our managed services, your records are kept in a per-client store that is structurally not mixed with another business’s. Anything that reaches one of your customers waits for your one-tap approval where the service is set up that way, and a kill switch can halt a managed service instantly on request.

Least access necessary. We use read-only, read-and-draft, or approval-first permissions where the service allows it. You decide which systems are connected, what the automation may do, and when work must wait for approval or hand off to a person. You can revoke a connection or ask us to remove it.

Technical safeguards. Our public site is delivered over HTTPS and protected by browser-security headers. We limit administrative access, use reputable hosting and payment providers, and avoid storing full payment-card details. No online system can be promised to be risk-free, but we use reasonable technical and organizational safeguards appropriate to the service.

5Data Retention

We keep customer and report information for as long as needed to provide the service, support you afterward, and satisfy legal, tax, and accounting requirements, after which it is deleted or anonymized.

Two specifics worth naming: the recent browser copy of your chat clears itself after up to 7 days. If a chat or form includes contact details or a request for follow-up, we may retain that conversation as a lead record for as long as needed to respond, support the inquiry, and meet legal or accounting obligations. You can ask us to delete it at any time, subject to records we are legally required to keep (see Your Choices and Rights).

For our ongoing managed services, including the General Manager, your stored data is exportable on request in plain formats, and after you cancel it is deleted within 30 days of offboarding, except for records we are legally required to keep.

6Your Choices and Rights

You may request access to, correction of, or deletion of the personal information we hold about you by emailing hello@leadleakai.net. You can opt out of non-essential emails at any time by replying to ask us to stop.

7Children’s Privacy

Our service is intended for businesses and is not directed to children under 16. We do not knowingly collect information from children.

8Changes to This Policy

We may update this policy from time to time. The “Effective” date above shows when it last changed. Material changes will be posted on this page.

9Contact Us

Questions about this policy? Email hello@leadleakai.net or write to LeadLeak, PO Box 1386, Westerly, RI 02891.