Your data. Your leads. Your control.
We process lead data on your behalf. This policy explains what we collect, how we use it, and the controls you have over your workspace data.
Introduction
LeadsBot operates a lead capture and response layer used by businesses to route, score, and follow up on inbound enquiries. When you connect widgets, forms, landing pages, or APIs to LeadsBot, we process data to provide the service and support configured workflows.
This policy applies to the LeadsBot services and connected interfaces used to capture, route, and manage lead data.
LeadsBot generally acts as a data processor for lead submissions captured through your workspace and as a data controller for account, billing, and operational data.
Information we collect
We collect two distinct categories of data, treated under different legal bases and with different retention policies.
| Category | Examples | Legal basis | Role |
|---|---|---|---|
| Business account data | Name, email, company, billing address, password hash, plan tier | Service performance and legitimate interests where applicable | Controller |
| Lead submission data | Prospect name, email, phone, custom form fields, session metadata, IP address, and related submission context | Your workspace’s chosen lawful basis where applicable | Processor |
| Usage & technical data | Browser type, OS, widget load events, API request logs, and error traces | Legitimate interest for service reliability and abuse prevention | Controller |
| Payment data | Billing email, country, invoice history. Card data is tokenized by payment processors and not stored on our servers. | Contract performance; legal obligation for financial records | Controller |
How we use your data
Every use of data at LeadsBot is tied to a service purpose. Access is limited to the people and systems that need it for operation, support, security, or debugging.
| Purpose | What this means in practice |
|---|---|
| Service delivery | Routing lead alerts to Telegram, scoring leads, sending automated follow-up sequences, firing webhooks to your connected CRM or spreadsheet. |
| AI features | Generating lead summaries, drafting suggested replies, and scoring intent using your lead's submitted content. |
| Service reliability | Diagnosing delivery failures, debugging webhook errors, monitoring uptime, and preventing abuse. Technical logs are retained for 30 days and then purged. |
| Billing & compliance | Processing subscription payments via our payment processors, issuing invoices required by applicable law, and maintaining financial records as needed. |
| Product improvement | Analysing aggregated usage patterns to improve the product. Individual lead records are not used for marketing purposes. |
| Security | Detecting and blocking bot submissions, rate limiting abuse, verifying webhook signatures, and maintaining audit logs of privileged account actions. |
Information sharing
We share data only with service providers that help operate the product. We do not share data with advertisers or data brokers for their own marketing purposes.
We may also disclose data when required by law, court order, or governmental authority, or when necessary to protect the rights, property, or safety of LeadsBot, our customers, or the public.
Retention & deletion
We retain data only as long as needed to provide the service, meet legal requirements, resolve disputes, and enforce agreements. You can request deletion of workspace data through the support channel below.
Your data rights
Depending on where you and your customers are located, you may have rights to access, correct, delete, restrict, or object to processing of personal data. Submit requests to security@leadsbot.tech with your registered email and a description of the data concerned.
As a workspace operator, you are responsible for handling the rights requests that apply to the leads you capture. LeadsBot provides export and deletion tools to help support those requests.
Right to access
Request a complete, machine-readable record of all data we hold about you — account details, billing history, and associated metadata.
Right to portability
Receive your data in a structured, machine-readable format when available. Export directly from the dashboard where supported.
Right to erasure
Request deletion of your workspace and associated data. Some records may be retained for legal or accounting reasons.
Right to rectification
Correct inaccurate account information from your dashboard when available. For lead record corrections, contact support with the relevant record IDs.
Right to restriction
Temporarily pause certain processing activities during a dispute while we investigate. Lead routing continues unless you disable the relevant workflows.
Right to object
Object to processing based on legitimate interest where applicable, including some analytics and operational processing.
Cookies & tracking
LeadsBot uses local storage and session handling that support account access and basic product operation. We do not intentionally use third-party advertising cookies on the public marketing site.
The LeadsBot capture widget (widget.js) is designed for lead capture and does not intentionally add advertising cookies.
Security commitments
Security is a first-order concern at LeadsBot. If you discover a vulnerability, please report it to security@leadsbot.tech and include enough detail to let us reproduce and assess the issue safely.
Policy changes
We may update this Privacy Policy to reflect changes in our data practices, legal requirements, or service features. When we make material changes, we may notify registered account holders by email or in-product notice where appropriate.
Minor clarifications, formatting corrections, and changes that reduce our data use may be posted without advance notice. The date at the top of this page reflects the most recent revision.
Continued use of LeadsBot after a change takes effect means you accept the updated policy. If you do not agree, you may export your data and close your workspace.
Contact us
For privacy-related enquiries, data rights requests, and security disclosures, contact us at the address below.
Registered in England & Wales
For postal enquiries: contact us by email first to obtain the current registered address.