Privacy Policy

What we collect

Account data: your name, work email, agency name, password (stored hashed by our authentication provider) and workspace settings.

Billing data: subscription plan, status and renewal date, plus identifiers from our payment processor. Card details are entered on Stripe's own checkout and are never stored by us.

Lead data you provide: contact details and history you upload or connect, such as name, company, email, phone, status, notes, message history and appointment records.

Service logs: technical records of requests, errors, message delivery events and activity inside your workspace.

Why we use it

To provide and secure the service, run your account and subscription, generate follow-up drafts you review, deliver approved messages, record outcomes, support you, and meet legal obligations.

Your role and our role for lead data

For lead data, you decide what is collected and contacted, so you are the controller and we process it on your behalf. You are responsible for having the legal right and any consent required to upload, store, process and contact those people, and for complying with applicable marketing and privacy laws — including honouring unsubscribe and deletion requests.

Processors we use

• Supabase — database, authentication and file storage for your workspace.
• Stripe — subscription payments and billing records.
• Resend — sending and delivery tracking for approved emails.
• Cloud hosting and AI providers used to run the app and draft message text.

Each processor only receives what it needs to perform its function.

Retention

We keep workspace data while your account is active. You can delete leads and related records inside the app. After your account ends, we delete or anonymise workspace data after a reasonable period, except records we must keep for accounting or legal reasons.

Your choices

You can access, correct, export or delete data in your workspace, and request account deletion by email. If you are a lead who received a message from a LeadThreads customer, contact that business directly, or email us and we will pass the request on.

Security

Data is encrypted in transit, access is restricted per workspace by database-level rules, and secret keys are held server-side only. No system is perfectly secure, so we also keep the amount of data we hold to what the service needs.

Contact

Privacy questions or requests: hello@leadthreads.app.