Privacy policy

It covers two groups: customers, meaning people who create an account and use LeadPilot, and prospects, meaning people whose business contact details our customers work with in the app.

For prospect data, our customer decides who to contact and why, and we process that data on their behalf. For account data, we decide how it is used.

• Account data: your name, email address, password (stored only as a secure hash), agency name, website and settings.
• Workspace content: your agency profile, services, case studies, targeting profiles, campaigns and email drafts.
• Prospect data: business names, websites, public business information, and the names, job titles and work emails of contacts, imported by you or found at your request.
• Mailbox data: connection details and sign-in tokens for mailboxes you connect, and replies to emails sent through LeadPilot. Other messages in your mailbox are not stored.
• Billing data: invoice requests, plan and payment status, amounts, payment dates and transaction references. Payoneer handles the payment details entered on its payment pages; we do not collect card details.
• Technical data: log records such as IP addresses and error reports, used to keep the service secure and working.

• To provide the service: finding and researching businesses, drafting and sending emails you approve, and reading replies.
• To send account emails: address confirmation, password resets, notifications you choose and the weekly summary.
• To bill you, prevent abuse, and keep the service secure.
• To answer you when you contact us.

We share data only with providers that help us run LeadPilot, and only what each one needs:

• AI provider (OpenAI) to write research briefs, fit assessments and email drafts.
• Contact data provider (SalesQL) to find work emails when you ask for them.
• Email verification providers (NeverBounce or ZeroBounce) to check addresses before sending.
• Google (Maps and PageSpeed) for business search and website checks, and Google or Microsoft when you sign in a mailbox.
• Payoneer to send payment requests and process payments, using your billing contact details and invoice information.
• Hosting and email delivery providers that store and transmit our data.

We do not sell personal data.

Data is encrypted in transit. Mailbox passwords and sign-in tokens are encrypted at rest. Access to production systems is limited to people who need it. No system is perfectly secure, but we work to protect your data and will tell you promptly about any breach that affects it.

We keep account and workspace data while your account is open. Raw website text collected for research is deleted after 90 days; the research summary remains. When you close your account we delete or anonymise your data within a reasonable period, except where we must keep it by law (for example, billing records).

Every email sent through LeadPilot includes the sender's details and an unsubscribe link. Unsubscribing or replying “stop” adds the address to the sender's do-not-contact list at once. If you received an email and want to know what data a sender holds about you, contact that sender; you can also contact us and we will pass on your request.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how we use it. To make a request, contact us. You can also complain to your local data protection authority.

We will update this page when our practices change, and tell customers by email about significant changes.