Privacy Policy

Last updated: August 14, 2026

leadrack is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights over it. We never sell your personal data.

Data we collect

Identity and access

When you sign up, we collect your name and email address. We use this to authenticate your account and communicate service updates. We never sell your personal information to third parties.

Lead and contact data

Your account stores the pipelines, stages, contacts, and cards you or your agents create — names, emails, companies, and any custom fields your team defines. This is the product: it exists so your team and your agents can see it, and it is visible to no one outside your team.

Agent API keys

API keys are stored as one-way hashes; only the key prefix is kept for display. Every request made with a key is scoped to the team that issued it and logged to the lead's activity timeline, so agent actions are as visible as a teammate's.

Outbound email

Email sent from leadrack, whether triggered by a person or an agent, is delivered through our email provider (Resend) on your team's own verified sending domain. We store the message content and delivery status needed to show it in your lead timeline.

Billing information

Payment details are processed directly by our payment processor (Stripe) and never touch leadrack servers. We retain transaction records and billing addresses for invoicing and fraud detection.

Analytics and cookies

We use Pirsch (privacy-friendly, cookie-free, EU-hosted analytics) on our marketing site. We do not use Google Analytics, and no personal data is shared with advertisers. First-party cookies are used only for authentication and session management; we do not use third-party tracking or advertising cookies.

How we use your data

To provide, maintain, and improve the leadrack service
To authenticate you and manage your account and team
To run the operations your team and its agents request
To send outbound email on your team's behalf
To process payments and send invoices
To send service-related communications (e.g., security alerts, downtime notices)
To detect and prevent fraud and abuse
To comply with legal obligations

Data access and disclosure

People working on leadrack access your account data only with your permission (e.g., when troubleshooting a support request) or as a last resort when investigating potential abuse. We may disclose data when legally required or to the third-party subprocessors that help run the service: our hosting and database provider (Supabase), email delivery (Resend), payment processing (Stripe), and website analytics (Pirsch).

Your rights

Under the GDPR and other applicable data protection laws, you have the following rights:

Right to know — what personal data we collect and why
Right of access — request a copy of your personal data
Right to correction — correct inaccurate personal data
Right to erasure — request deletion of your personal data (this may prevent continued service use)
Right to restrict processing — limit how we use your data
Right to object — object to our processing of your data
Right to portability — receive your data in a machine-readable format
Right to complain — lodge a complaint with your local supervisory authority

To exercise any of these rights, contact us at hello@leadrack.io.

Security

All data in transit is encrypted via TLS. All data at rest is encrypted, and database backups are encrypted. We use row-level security policies to keep data isolated between teams.

Data retention

Account data is retained for the duration of your account. Upon account deletion, all data is permanently removed from active systems within 30 days and from backups within 60 days. Recovery is not possible afterward.

Changes to this policy

We may update this privacy policy from time to time. Material changes will be communicated via email to account holders. The “last updated” date at the top reflects the most recent revision.

Contact

Questions about this privacy policy? Contact us at hello@leadrack.io.