← Back to home

Privacy Policy

Effective date: [TO BE SET AT LAUNCH] · Last updated: [TO BE SET AT LAUNCH]

1. Who we are

LeadSite, operated from Brazil, is the controller of the personal data described in this policy. Contact: adm@useleadsite.com.

2. Data we collect

  • Account data: name, e-mail and phone number, provided at sign-up (authentication is operated by Clerk).
  • Billing data: processed by Stripe. We do not store card numbers.
  • Usage data: product actions (searches, generated sites, plan and quota usage), technical logs and approximate location derived from your IP (used to show prices in the right currency).
  • Business listings data: information about local businesses (names, addresses, public phone numbers, ratings, reviews and photos) sourced from publicly available services such as Google’s business listings, processed so you can prospect and generate websites.
  • Cookies: essential cookies for session and preferences; analytics and marketing cookies only with your prior consent where required (see section 6).

3. Why we process it (legal bases)

  • Contract: operating your account, generating sites, billing and support.
  • Legitimate interests: product analytics, fraud and abuse prevention, service security.
  • Consent: analytics/marketing cookies and marketing e-mails, where required by law. You can withdraw consent at any time.
  • Legal obligation: accounting and tax records.

4. Sharing and processors

We share data with the processors that run the service: [CONFIRMAR LISTA — suggested: Clerk (authentication), Stripe (payments), Supabase (database), Anthropic/OpenAI/Google (AI generation), Google Maps Platform (business listings), Resend (e-mail), Hetzner/Cloudflare (hosting and CDN)]. We do not sell personal data.

5. International transfers

Our processors may store data outside the UK/EEA (notably in the United States and Brazil). Where that happens, transfers rely on adequacy decisions or standard contractual clauses.

6. Cookies and consent

If you visit from the UK or the European Economic Area, analytics and marketing cookies only run after you accept them in the consent banner, and rejecting is as easy as accepting. Essential cookies (session, security, preferences such as language) do not require consent.

7. Your rights

Under the UK GDPR and the EU GDPR you have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interests, and to withdraw consent. To exercise them, write to adm@useleadsite.com. You can also complain to your supervisory authority (in the UK, the ICO).

8. Retention

Account data is kept while your account exists and for [PRAZO — CONFIRMAR] after deletion, except where longer retention is required by law (e.g. billing records). Published websites are removed when you delete them or your account.

9. Security

Data is encrypted in transit, access is restricted by role, and payment data never touches our servers. No system is 100% secure; we notify affected users and authorities of breaches as required by law.

10. Data about the businesses you prospect

LeadSite shows publicly listed business information so you can offer them a website. If you are a business owner and want a listing-derived record removed from our caches, contact us at adm@useleadsite.com.

11. Changes

We may update this policy; material changes will be announced in the product or by e-mail.

Privacy Policy | LeadSite