Privacy Policy

LeadSync ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our platform at goleadsyncs.com and any associated applications (the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.

2.1 Information You Provide Directly

When you register for or use our Service, we may collect:

• Account Information: Name, email address, business name, phone number, and contact details
• Payment Information: Billing address, payment method details (processed securely by Creem.io, our merchant of record; we never store your card details)
• Business Data: Lead information, conversation histories, AI agent configurations, flow designs, and knowledge base content you create within the platform
• Communications: Messages you send to our support team or through our contact channels

2.2 Automatically Collected Information

We automatically collect certain information when you use the Service:

• Usage Data: Features accessed, pages visited, time spent, and interactions with the platform
• Device Information: Browser type, operating system, IP address, and device identifiers
• Log Data: Server logs, error reports, and performance metrics
• Cookies: Session and preference data as described in Section 6

We receive information through the following channels:

• Direct account registration and profile updates
• Your active use of the Service and its features
• Payment Processor: Transaction confirmations from Creem.io
• GoHighLevel API sync when you connect your GHL account
• Third-party integrations you explicitly authorise (Google Calendar, Slack, Meta, Twilio, ElevenLabs)
• Customer support interactions via email or other channels

We use the information we collect to:

• Provide, operate, maintain, and improve the Service
• Process payments and manage your subscription
• Send service-related communications including account alerts, invoices, and support replies
• Personalise your experience and remember your preferences
• Monitor for security incidents and protect against fraud
• Comply with our legal obligations
• Analyse aggregate usage patterns to improve the platform

4.1 Service Providers and Sub-Processors

We share data with trusted service providers who assist in delivering the Service, including:

• Cloud hosting (Render, Neon, Vercel), AI processing (Groq), payment processing (Creem.io)
• Communication services (Twilio)
• CRM integration (GoHighLevel)

All service providers are contractually required to protect your data and use it only for the purpose of providing services to us. We do not permit our service providers to use your data for their own independent purposes.

We do not sell your personal data to third parties. We may disclose your data in the following limited circumstances:

• Service Providers: As described in Section 4.1, to provide and operate the Service
• Legal Requirements: When required by law, court order, or legal process, or to protect the rights and safety of LeadSync, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users
• With Your Consent: For any other purpose with your explicit consent

We use cookies and similar tracking technologies to improve your experience, maintain session state, and analyse platform usage. Types of cookies we use include:

• Essential Cookies: Required for the Service to function, including authentication and session management
• Analytics Cookies: Used to understand how users interact with the platform to inform improvements
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

We retain your personal data for as long as your account is active or as needed to provide the Service. If you cancel your subscription:

• Your account data is retained for 30 days to allow for reactivation
• After 30 days, your data is permanently deleted from our systems
• Some data may be retained longer where required by law or for legitimate business purposes (e.g., billing records)

We implement industry-standard technical and organisational security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and authentication requirements for our staff
• Regular security reviews and vulnerability assessments
• Secure cloud infrastructure via Render, Neon, and Vercel

While we take reasonable precautions to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your personal data ("right to be forgotten")
• Portability: Request your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from marketing communications at any time
• Objection: Object to certain processing activities

To exercise any of these rights, please contact us at hello@goleadsyncs.com. We will respond within 30 days.

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 18, we will take immediate steps to delete that information. If you believe we may have collected information from a child, please contact us at hello@goleadsyncs.com.

Your data may be transferred to and processed in countries other than your own, including the United States, where our cloud hosting and AI processing services operate. We ensure appropriate safeguards are in place for such transfers, including contractual obligations with our service providers that meet applicable data protection standards.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by email or by posting a notice within the Service.

Your continued use of the Service after changes take effect constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: