Privacy Policy

FindyLeads ("we", "us", or "our") operates the website findyleads.com and the FindyLeads platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service.

By using FindyLeads, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

Account information. When you create an account we collect your email address, name, and password (stored as a bcrypt hash).

Product configuration. URLs, keywords, and subreddits you add to configure your workspace.

Usage data. Pages visited, features used, clicks, and session duration collected via server logs and in-product analytics.

Payment data. We use Stripe for payment processing. We do not store your card number or CVV. Stripe's privacy policy governs payment data.

Third-party contact data. When you enrich a lead, we retrieve verified email and phone data from third-party data providers on your behalf. This data is stored in your account and governed by those providers' terms.

Communications. Emails you send us (support, feedback) are retained for customer-service purposes.

• To provide, operate, and improve the Service.
• To authenticate your identity and secure your account.
• To process payments and manage subscriptions via Stripe.
• To send transactional emails (password reset, billing receipts, usage alerts).
• To send product updates and newsletters — you can opt out at any time.
• To analyze aggregate usage and improve features.
• To comply with legal obligations.

We do not sell your personal information. We share data only with:

• Service providers who process data on our behalf: our cloud hosting provider, Stripe (payments), our transactional email provider, our AI provider, and third-party data providers (lead enrichment on your behalf).
• Legal requirements — when required by law, court order, or to protect our rights.
• Business transfers — if FindyLeads is acquired or merges, data may transfer to the successor entity.

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law or legitimate business need (e.g., billing records for 7 years).

FindyLeads uses industry-standard security measures: SSL/TLS in transit, encrypted databases at rest, JWT-authenticated API access, and bcrypt-hashed passwords. No transmission method is 100% secure, and we cannot guarantee absolute security.

We do not use your personal data or the content of your campaigns to train third-party AI models. OpenAI processes prompts we send on your behalf; OpenAI's API terms prohibit using API data for model training by default.

We use strictly necessary cookies for session management and authentication. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect Service functionality.

Depending on your jurisdiction (GDPR, CCPA, etc.) you may have rights to:

• Access a copy of your personal data.
• Correct inaccurate personal data.
• Delete your account and personal data.
• Restrict or object to processing.
• Data portability (receive your data in a machine-readable format).

To exercise these rights, email support@findyleads.com.

FindyLeads is not directed at individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected such data, we will delete it promptly.

We may update this Privacy Policy periodically. We will notify you of material changes by email or in-app notice at least 7 days before the change takes effect. Continued use after that date constitutes acceptance.

Questions about this policy? Contact us at support@findyleads.com.