Privacy Policy

This Privacy Policy explains how LeadPulse ("LeadPulse", "we", "us", or "our") collects, uses, discloses, and protects information when you use our website, dashboard, and the AI chatbot widget we provide (collectively, the "Service"). By using the Service, you agree to the practices described here.

1. Who we are

LeadPulse is an AI-powered conversational marketing platform that lets businesses ("Customers") embed an AI chatbot on their websites to capture leads, receive notifications, and run email campaigns. This policy covers two groups of people: (a) our Customers and the visitors to our own website, and (b) end users who interact with a chatbot that a Customer has deployed ("End Users").

2. Information we collect

2.1 Information you provide

• Account data: name, email address, business name, and password when you register.
• Billing data: subscription tier and payment details, processed by our payment provider (Stripe). We do not store full card numbers on our servers.
• Configuration data: chatbot settings, prompts, notification preferences, and email campaign content you create.

2.2 Information collected through the chatbot

• Conversation content: messages exchanged between End Users and the chatbot.
• Lead data: contact details an End User shares, such as name, email, phone number, and company.
• Source metadata: the page URL where a conversation took place and timestamps.

2.3 Information collected automatically

• Usage and device data: IP address, browser type, pages viewed, and interactions, collected to operate and secure the Service.
• Cookies: we use strictly necessary cookies for authentication and session management. We do not sell this data.

3. How we use information

• To provide, maintain, and improve the Service.
• To generate AI chatbot responses and summaries of conversations.
• To deliver lead notifications by email and Telegram to the relevant Customer.
• To process subscriptions and prevent fraud.
• To respond to support requests and communicate service updates.
• To comply with legal obligations.

4. AI processing

Chatbot conversations are processed by third-party large language model providers to generate responses and summaries. Conversation text is sent to these providers solely to produce a reply and is not used by us to train foundation models. Customers control the prompts and the data their chatbot requests from End Users.

5. How we share information

We do not sell personal information. We share data only as follows:

• With the relevant Customer: lead and conversation data captured by a chatbot belongs to the Customer who deployed it.
• With subprocessors that help us run the Service, under contractual confidentiality obligations:
• Supabase: database, authentication, and hosting
• Anthropic: AI language model processing
• Resend: transactional and campaign email delivery
• Telegram: optional lead notifications
• Stripe: payment processing
• For legal reasons: when required by law or to protect our rights, users, or the public.

6. Data retention

We retain account and lead data for as long as a Customer account is active. When an account is closed, we delete or anonymize personal data within 90 days, except where retention is required by law. Customers may delete individual leads and conversations at any time from the dashboard.

7. Security

We protect data with encryption in transit (TLS), database row-level security, access controls, and infrastructure hosted on SOC 2 compliant providers. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard safeguards.

8. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing (for example, under the GDPR and CCPA). To exercise these rights, contact us at the address below. End Users should contact the Customer who operates the chatbot they interacted with, as that Customer is the controller of that data; we will assist as a processor where applicable.

9. International transfers

Our infrastructure is hosted in the United States. If you access the Service from outside the United States, your information may be transferred to and processed there. We rely on appropriate safeguards for such transfers where required.

10. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance.

12. Contact us

For privacy questions or to exercise your rights, email adrianoreef@hotmail.com.