Draft template — not legal advice. This starter policy was generated to cover LeadsThatWin.AI's actual data flows, but it must be reviewed and finalized by a qualified attorney before publishing. Fill in the bracketed items and confirm every third-party processor.

Privacy Policy

Last updated: [DATE] · LeadsThatWin.AI ("we", "us"). Contact: [privacy@leadsthatwin.ai]

This policy explains what information we collect when you use our website and services, how we use it, who we share it with, and the choices you have.

1. Information we collect

Information you give us — when you join the waitlist, request a demo, or contact us: name, email, company, industry, team size, and anything you write to us.
First-party behavioral data (analytics) — with your consent, we record pages viewed, time on page, scroll depth, form interactions, and CTA clicks, tied to a first-party session ID. This powers our lead-intelligence features.
Payment information — if you purchase, payments are processed by Stripe. We do not store your full card number; Stripe does, under its own terms.
Technical data — IP address, browser type, and similar data your browser sends, used for security and rate limiting.

2. How we use it

To provide and operate the service, including scoring and qualifying leads.
To respond to you and provide support.
To secure the service (bot defense, rate limiting, fraud prevention).
To improve our product. We do not sell your personal information.

3. Consent & cookies

Essential cookies (security, basic function) are always active. Functional and analytics tracking are off until you accept via our cookie banner. We honor Global Privacy Control (GPC) and Do Not Track (DNT) signals as a rejection of non-essential tracking. You can change your choice at any time via the "Cookie preferences" link in the footer.

4. Third parties who process data for us

We share data with service providers only as needed to run the service, under their respective terms: Supabase (database hosting), Anthropic / Claude (AI lead scoring), Resend (email), Stripe (payments), Cloudflare Turnstile (bot defense), Vercel (hosting)[, and any enrichment providers you enable, e.g. RB2B]. Confirm and finalize this list with counsel.

5. Data retention

We keep personal information only as long as needed for the purposes above or as required by law. [Specify retention periods.]

6. Your rights

Depending on where you live (e.g., GDPR/UK GDPR, CCPA/CPRA), you may have the right to access, correct, delete, or port your data, and to opt out of certain processing. To exercise these rights, contact [privacy@leadsthatwin.ai]. We will respond within the timeframes required by applicable law.

7. Security

We use industry-standard measures including encryption in transit, signed webhooks, PII redaction in logs, and access controls. No method is 100% secure, but we work to protect your data.

8. Children

Our service is for businesses and is not directed to children under 16. We do not knowingly collect their data.

9. Changes

We may update this policy; we will post the new date above and, for material changes, provide notice.

10. Contact

Questions: [privacy@leadsthatwin.ai] · [mailing address].

← Back to LeadsThatWin.AI · Terms of Service