Privacy Policy.

1. Introduction

At LeadPure ("we," "us," or "our"), your privacy is a cornerstone of our service. This Privacy Policy explains how we collect, use, and protect your information when you use our email verification and discovery platform. By using LeadPure, you agree to the practices described in this policy.

2. Data Controller vs. Data Processor

For the purposes of applicable data protection laws (including GDPR and CCPA), you (the customer) act as the Data Controller for any contact lists or email addresses you upload to the Service. LeadPure acts exclusively as a Data Processor, processing this data strictly according to your instructions to perform the email verification services. A standard Data Processing Agreement (DPA) is available upon request for enterprise customers.

3. Information We Collect

We collect minimal information necessary to provide our services:

• Account Data: Name and email address provided during signup, managed securely via Clerk.
• Billing Data: LeadPure does not store or have access to your billing information. All payments are processed entirely by Dodo Payments.
• Technical Data: IP address, browser type, and device information used for security and fraud prevention.
• Service Usage Data: Email addresses and domains you upload for verification or discovery are used exclusively to provide the service to you. We do not use, share, or sell this data.

4. How We Use Your Data

Your data is used strictly for the following purposes:

• To provide and maintain our email verification and discovery services.
• To manage secure authentication through Clerk.
• To send essential LeadPure-related notifications and updates.
• To provide customer support and troubleshoot technical issues.
• To detect and prevent fraudulent or abusive activity.

5. Data Sharing and Sub-processors

LeadPure does not sell, trade, or rent your personal or uploaded information to third parties. We only share data with trusted sub-processors required to operate the platform. Our primary sub-processors are:

• AWS / Vercel: For secure cloud hosting and infrastructure (data hosted in the United States).
• Clerk: For secure user authentication.
• Dodo Payments: For secure payment processing.

6. Data Retention and Deletion

Uploaded Contact Lists: We understand the sensitivity of your lead lists. Any CSV files or email lists uploaded for verification are automatically and permanently purged from our storage servers within 60 days after the verification process is complete.

Account Data: We retain your account information for as long as your account is active. Upon account deletion, all remaining data is permanently purged within a maximum of 60 days.

7. Security

We implement industry-standard encryption (SSL/TLS in transit, AES-256 at rest) and use Clerk's secure authentication infrastructure to protect your account. While no method of transmission over the internet is 100% secure, we prioritize the safety of your data through modern security protocols.

8. GDPR & CCPA Rights

If you are a resident of the European Economic Area (EEA) or California, you have specific rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Erasure (Right to be Forgotten): Request the permanent deletion of your account and personal data.
• Right to Portability: Export your account data in a structured, commonly used format.
• Right to Opt-Out: Opt out of any non-essential communications or tracking.

To exercise any of these rights, contact us at the email below.