Privacy Policy

This Privacy Policy explains what personal data Leadmato ("we", "us") collects when you use leadmato.com or the Leadmato application ("Service"), how we use it, and the rights you have over it. We are committed to Indian data-protection law (DPDP Act 2023) and to the GDPR where it applies.

• Account data. Your name, email address, and profile picture from Google when you sign in.
• Workspace data. Your brand website, keywords, notes, saved leads, and tags.
• Usage data. Actions you perform (scans, saves) so we can enforce plan limits and improve the Service.
• Payment data. Transaction records (amount, currency, provider reference). Full card details are handled by Stripe / Razorpay - we never see or store them.
• Technical data. IP address, browser, device type, and cookies necessary for session management and fair-use enforcement.

• To provide, secure and operate the Service.
• To enforce quota, fair-use and account safety limits.
• To process payments through Stripe and Razorpay.
• To generate scan results by calling third-party LLM providers (Anthropic, OpenAI, Gemini) - your inputs are transmitted to them under their respective privacy policies.
• To send transactional emails (receipt, security alerts, service updates).
• To respond to your support requests.

We process personal data under one or more of these bases: (a) performance of the contract with you; (b) our legitimate interest in operating a safe, reliable Service; (c) your consent (for marketing emails, which you can withdraw anytime); (d) legal obligation (e.g. tax records).

We share personal data only with:

• Sub-processors: Google Cloud (hosting), MongoDB Atlas (database), Stripe & Razorpay (payments), Anthropic/OpenAI/Gemini (LLM providers), Jina AI (data retrieval), Resend/SendGrid (transactional email).
• Law enforcement and courts when compelled by valid legal process.
• An acquirer or successor entity in the event of a merger or sale.

We never sell your personal data.

We use an essential session cookie (session_token) to keep you logged in. It is HttpOnly, Secure, SameSite=None, and scoped to leadmato.com. We also run the Meta (Facebook) Pixel to measure sign-ups and support advertising, which may set the _fbp cookie. See our Cookie Policy for the full list and how to opt out.

• Account data - while your account is active, plus 30 days after deletion.
• Scan results & saved leads - up to 12 months, then archived or purged.
• Payment records - retained for 7 years per Indian tax and accounting law.
• Server logs - 30 days.

Regardless of jurisdiction, you can request:

• A copy of the personal data we hold about you.
• Correction of inaccurate data.
• Deletion of your account and associated data.
• Export of your saved leads in JSON or CSV.
• Withdrawal of consent for marketing communications.

Email support@aifreedomclub.com and we will respond within 30 days.

All traffic is served over HTTPS. Sessions are token-based with HttpOnly cookies. Passwords are not used (Google-only auth). Databases are access-controlled and regularly backed up. We take reasonable measures but no online service can guarantee absolute security.

Some sub-processors host or process data outside India (e.g. LLM providers in the United States). Where required by law, we rely on Standard Contractual Clauses or equivalent safeguards.

Leadmato is not directed at children under 18. We do not knowingly collect data from minors.

We will notify you of material changes via in-app banner or email. Continued use of the Service after the effective date constitutes acceptance.

Data Protection queries: support@aifreedomclub.com
General support: support@aifreedomclub.com