Privacy Policy

1. Introduction

LeadsAndSaaS ("we," "our," or "the Service") is a lead automation, messaging, scheduling, and business management platform. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service, including our website, dashboard, APIs, and embeddable widgets.

2. Information We Collect

We collect information in several ways:

Account Information

When you sign up, we collect your name, email address, company name, industry, and password. We also generate internal identifiers for your organization.

Lead & Contact Data

Through your use of the Service, you may submit or capture lead and contact information including names, email addresses, phone numbers, service requests, appointment details, and conversation histories. You are the data controller of this information; we process it on your behalf.

Conversation & Messaging Data

We store messages exchanged through our platform, including SMS, email, and web chat conversations between you, your agents (human or AI), and your leads.

Integration Credentials

When you connect third-party services (e.g., Twilio, Resend), we store the configuration and credentials you provide. These are encrypted at rest and never returned in plaintext through our API.

Usage & Analytics Data

We collect information about how you interact with the Service, including pages visited, features used, and performance metrics.

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Process lead capture submissions and route them to your team
• Send and receive messages on your behalf through integrated channels
• Schedule and manage appointments
• Manage your billing, subscriptions, and trial periods
• Send transactional emails (account confirmation, password resets)
• Detect and prevent abuse, fraud, and unauthorized access
• Provide customer support

4. Data Sharing & Third Parties

We do not sell your personal information. We may share data with:

• Service providers — Infrastructure (Supabase, Vercel), payment processing (Stripe), messaging (Twilio, Resend), and analytics providers that help us operate the Service
• At your direction — When you configure integrations or webhooks, data flows to the endpoints you specify
• Legal obligations — When required by law, regulation, or valid legal process

5. Data Security

We implement industry-standard security measures including encrypted data storage, secure API authentication, role-based access controls, and secret masking. Integration credentials are stored securely and never exposed in plaintext through our client-facing interfaces. However, no system is perfectly secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account and organizational data for as long as your account is active. Lead data, conversations, and appointment records are retained according to your plan and settings. When you delete your account, we will remove your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict certain processing
• Export your data in a portable format
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at the address below.

8. Cookies & Tracking

We use essential cookies for authentication and session management. We may use analytics tools to understand usage patterns. We do not use third-party advertising trackers.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@leadsandsaas.com.