Privacy Policy
Version
1.0
1. Data Controller
The controller responsible for the processing of personal data through Leadbase is:
Joel Cimpean, trading as Leadbase
Freudenweilerstraße 4
72362 Nusplingen
Germany
Email: support@leadbase.tech
Leadbase is operated as a sole proprietorship.
2. Scope of This Privacy Policy
This Privacy Policy explains how Leadbase processes personal data when you:
visit the Leadbase website,
create or use a Leadbase account,
use Leadbase features,
connect third-party services,
purchase subscriptions or Credits,
contact Leadbase support,
or otherwise interact with the service.
Leadbase is intended for persons aged 18 or older who use the service for business, freelance, self-employed, or other professional purposes.
3. Information We Process
Depending on how you use Leadbase, we may process different categories of personal data.
Account Information
This may include:
name,
email address,
profile image,
location,
company or brand information,
website,
phone number where provided,
professional role,
service focus,
account settings,
language preferences,
currency preferences,
Brand Kit information,
and other profile information you choose to provide.
Billing and Subscription Information
When you purchase a paid subscription or Credits, payments are processed through third-party payment providers.
Leadbase generally does not receive or store complete payment card details.
We may process information such as:
Stripe customer identifiers,
subscription status,
selected plan,
billing interval,
payment status,
invoice information,
transaction identifiers,
purchased Credits,
and billing-related events.
Lead and CRM Data
When using Leadbase, you may process or store information such as:
company names,
company websites,
business addresses,
contact names,
business email addresses,
phone numbers,
lead notes,
campaign information,
lead statuses,
outreach history,
follow-up information,
proposals,
project information,
and related business data.
You are responsible for ensuring that you have an appropriate legal basis for personal data that you upload to or process through Leadbase.
4. Business Lead Data
Leadbase may help users discover businesses and publicly available business information.
The availability of contact information through Leadbase does not mean that a person has consented to receive marketing messages.
Leadbase does not grant users permission to contact any individual merely because their information is publicly available or displayed through the service.
Users remain responsible for determining whether the collection, storage, and use of lead information, including outreach, is permitted under the laws applicable to them and the recipient.
Depending on the specific processing activity, Leadbase may act as a data controller or may process personal data on behalf of a business user.
Where required by applicable data protection law, processing may be subject to a separate data processing agreement.
5. Website Analysis Data
When you analyze a website using Leadbase, we may process information such as:
the website URL,
publicly accessible website content,
technical information,
metadata,
page structure,
performance information,
loading metrics,
website availability,
public business information,
and technical findings.
This information is used to provide website analysis, recommendations, evidence-based findings, and related Leadbase functionality.
6. Artificial Intelligence Processing
Certain Leadbase features use artificial intelligence.
Depending on the feature you use, information processed by AI providers may include:
prompts,
user instructions,
website information,
business information,
lead context,
drafts,
outreach content,
proposal information,
design instructions,
summaries,
and other information required to perform the requested function.
Leadbase aims to transmit only information reasonably necessary to provide the requested feature.
AI-generated output may be inaccurate or incomplete and should be reviewed by the user before being relied upon, published, or sent to another person.
7. Gmail and Email Integrations
If you connect a supported Google or Gmail account, Leadbase may process information required to provide email-related functionality.
This may include:
your email address,
OAuth authorization information,
encrypted access or refresh tokens,
sender and recipient information,
email subject lines,
message content,
message identifiers,
thread identifiers,
timestamps,
reply information,
and message status.
This information may be used to provide functionality such as:
sending outreach requested by you,
synchronizing relevant email conversations,
displaying messages in the Leadbase Inbox,
detecting replies,
managing follow-ups,
preparing reply drafts,
and maintaining the state of your outreach workflows.
You may disconnect your connected Google account through Leadbase where this functionality is available.
8. Google Workspace API Data
Leadbase accesses Google Workspace data only after you explicitly connect your Google account and authorize the permissions requested by Leadbase.
Google Workspace data is used only to provide user-facing features that you request.
Leadbase does not sell Google user data.
Leadbase does not use Google Workspace data for advertising, retargeting, personalized advertising, or determining creditworthiness.
Human access to Google Workspace data is restricted except where:
you explicitly request support requiring such access,
access is necessary to investigate security or abuse,
access is necessary to maintain or repair the service,
or access is required by applicable law.
Leadbase's use and transfer of information received from Google APIs is intended to comply with the Google API Services User Data Policy, including the Limited Use requirements.
Where email content is processed by AI-assisted functionality, only the information required to provide the relevant user-requested feature should be transmitted.
9. Information Collected Automatically
When you use Leadbase, technical information may be processed automatically.
This may include:
IP address,
browser information,
device information,
operating system,
timestamps,
authentication events,
security events,
application usage,
error information,
request information,
and technical logs.
This information may be used for:
platform security,
fraud and abuse prevention,
diagnostics,
service reliability,
performance monitoring,
troubleshooting,
and service improvement.
10. How We Use Personal Data
Leadbase may process personal data to:
create and manage user accounts,
authenticate users,
provide Leadbase functionality,
provide lead and CRM functionality,
analyze websites,
generate AI-assisted content,
provide design-related features,
connect email accounts,
send emails requested by users,
synchronize relevant email conversations,
manage follow-ups,
create proposals,
create and manage projects,
process subscriptions and payments,
manage Credits,
provide customer support,
communicate security information,
detect fraud or abuse,
protect users and infrastructure,
maintain and improve the service,
and comply with legal obligations.
11. Legal Bases for Processing
Where the GDPR applies, personal data may be processed based on one or more of the following legal bases.
Performance of a Contract — Article 6(1)(b) GDPR
Where processing is necessary to provide Leadbase or perform an agreement with you.
Legal Obligation — Article 6(1)(c) GDPR
Where processing is necessary to comply with legal or regulatory obligations.
Legitimate Interests — Article 6(1)(f) GDPR
This may include interests such as:
platform security,
fraud prevention,
abuse prevention,
service reliability,
technical diagnostics,
protecting Leadbase and its users,
and improving the service.
Consent — Article 6(1)(a) GDPR
Where consent is required, for example for certain optional cookies, marketing communications, or integrations.
Consent may be withdrawn where legally permitted.
12. Service Providers and Subprocessors
Leadbase relies on third-party service providers to operate the service.
Depending on the functionality you use, these providers may include:
Supabase
Used for database services, authentication, account infrastructure, and related backend functionality.
Vercel
Used for application hosting, deployment, infrastructure, and delivery of the Leadbase application.
Stripe
Used for payment processing, subscriptions, invoices, and billing-related functionality.
OpenAI
Used to provide certain artificial intelligence functionality.
Used for services including Google Sign-In, Gmail integration, website performance services, and other Google APIs used by Leadbase.
Resend
Used to provide transactional emails such as verification, password reset, and account security notifications.
Framer
Used to host and provide parts of the Leadbase marketing website.
Cloudflare
May be used for domain, routing, DNS, email-routing, security, and related infrastructure.
Third-party providers process personal data only as necessary to provide their respective services and are subject to their own legal and data protection obligations.
The providers used by Leadbase may change where required for technical, security, legal, or operational reasons.
13. International Data Transfers
Some service providers may process personal data outside Germany or the European Economic Area.
Where required by applicable law, international transfers are protected through appropriate safeguards, which may include:
adequacy decisions,
Standard Contractual Clauses,
contractual safeguards,
or other legally recognized transfer mechanisms.
14. Cookies and Similar Technologies
Leadbase may use cookies, local storage, or similar technologies.
These technologies may be used for purposes including:
authentication,
session management,
security,
remembering user preferences,
application functionality,
and performance.
Strictly necessary technologies may be used without consent where permitted by law.
Optional analytics or marketing technologies will only be used where legally required consent has been obtained.
15. Data Retention
Leadbase retains personal data only for as long as necessary for the purposes described in this Privacy Policy.
Retention may depend on:
whether your account remains active,
contractual obligations,
payment and accounting requirements,
legal retention obligations,
security requirements,
fraud and abuse prevention,
dispute resolution,
and technical backup requirements.
When information is no longer required, it may be deleted or anonymized.
Certain billing, tax, accounting, security, or transaction information may need to be retained after an account is deleted where required by law or necessary for legitimate legal purposes.
16. Account Deletion
Users may request deletion of their Leadbase account through the account deletion functionality provided by Leadbase.
Account deletion can be initiated at:
https://app.leadbase.tech/account/delete
Deleting an account may result in the deletion of account-related data, subject to technical processing time and legally required retention periods.
Certain information may continue to be retained where necessary for:
legal obligations,
accounting requirements,
security,
fraud prevention,
enforcement of legal claims,
or dispute resolution.
Disconnecting a third-party integration does not necessarily delete the Leadbase account itself.
17. Data Security
Leadbase uses technical and organizational measures intended to protect personal data against:
unauthorized access,
unauthorized alteration,
accidental loss,
misuse,
disclosure,
and destruction.
Measures may include authentication controls, access restrictions, encryption, secure credential storage, monitoring, and rate limiting.
However, no internet-based service can guarantee absolute security.
Users should use a strong and unique password and secure the email or Google account connected to Leadbase.
18. Your Data Protection Rights
Where the GDPR applies, you may have the right to:
request access to your personal data,
request correction of inaccurate personal data,
request deletion of personal data,
restrict certain processing,
object to certain processing,
receive certain personal data in a portable format,
withdraw consent where processing is based on consent,
and lodge a complaint with a competent supervisory authority.
Legal exceptions may apply.
To exercise your rights, contact:
19. Marketing Communications
If you voluntarily subscribe to Leadbase marketing communications or product updates, Leadbase may send relevant messages to you.
Where consent is required, marketing messages will only be sent after the required consent has been obtained.
You may unsubscribe from marketing communications at any time using the unsubscribe functionality provided in the relevant message.
Transactional emails, billing messages, authentication messages, and important security communications may continue to be sent where necessary.
20. Third-Party Links
Leadbase may contain links to third-party websites or services.
Leadbase is not responsible for the privacy practices, security, availability, or content of third-party websites.
You should review the privacy policies of third-party services separately.
21. Age Requirement
Leadbase is intended only for persons aged 18 years or older.
The service is designed for business, freelance, self-employed, entrepreneurial, and professional use.
Leadbase does not knowingly offer accounts to children.
22. Changes to This Privacy Policy
This Privacy Policy may be updated where necessary to reflect:
changes to Leadbase,
new features,
technical changes,
legal requirements,
service providers,
or security requirements.
The current version and effective date will be published on the Leadbase website.
Material changes may also be communicated through the application or by email where appropriate.
23. Contact
For privacy-related questions, requests, or concerns:
Joel Cimpean, trading as Leadbase
Freudenweilerstraße 4
72362 Nusplingen
Germany
Email: support@leadbase.tech