Privacy Policy

Effective date: [EFFECTIVE DATE]

1. Who We Are

[LEGAL ENTITY NAME, e.g. LeadSprint LLC] (“LeadSprint,” “we,” “our,” or “us”) operates the LeadSprint CRM and AI lead-engagement service available at leadsprint.app (the “Service”). LeadSprint is a business-to-business product designed for companies operating in the United States.

Privacy questions or requests: [PRIVACY CONTACT EMAIL — suggest privacy@leadsprint.app]

2. Our Two Roles: Your Data vs. Your Leads’ Data

LeadSprint handles two distinct kinds of personal information, and our responsibilities differ for each:

• Your account data — information about you and your team members as users of the Service. For this data, LeadSprint is the data controller and this policy describes how we handle it.
• Your leads’ data — information about your leads, contacts, and customers that you upload, import, or receive through the Service. For this data, you are the controller and LeadSprint acts as your service provider (processor): we process it only on your instructions to operate the Service, and we look to you to have the legal right and any required consent to bring that data into LeadSprint and to contact those individuals.

3. Information We Collect

We collect the following categories of information when you use the Service:

• (a) Account data — your name, email address, and workspace information provided through our authentication provider (Clerk) when you sign up or sign in.
• (b) Lead data — names, email addresses, phone numbers, company details, notes, and messages belonging to your own leads and contacts, which you upload, import, or capture through intake forms and connected channels.
• (c) Communications content — the text of emails and SMS messages sent and received through the platform on your behalf, including AI-generated draft replies and the conversation context used to produce them.
• (d) Knowledge-base content — documents and business context you choose to upload so the AI can answer questions about your business accurately.
• (e) Payment data — subscription payments are processed by Stripe. Your card number is transmitted directly to Stripe and never touches or is stored on LeadSprint servers; we retain only subscription status and billing metadata.
• (f) Usage and operational logs — IP addresses, browser type, pages visited within the Service, timestamps, and error logs used for security, support, and service improvement.

We do not knowingly collect sensitive personal information such as government ID numbers or health data through the Service, and we ask that you not upload such data about your leads.

4. How We Use Your Information

We use the information we collect to:

• Provide and operate the LeadSprint CRM and AI reply service;
• Send email and SMS communications on your behalf to your leads (using the channels you configure);
• Generate AI-assisted replies — as drafts for your review, or sent automatically where you have enabled and configured automated sending;
• Retrieve relevant passages from your knowledge base to ground AI replies in your business facts;
• Schedule meetings and manage bookings you or your leads confirm;
• Authenticate users, prevent fraud and abuse, and enforce our Terms of Service;
• Process subscription billing through Stripe;
• Provide customer support and respond to your requests;
• Monitor service health, debug errors, and improve the Service; and
• Comply with legal obligations.

We do not use your account data, lead data, or communications content to train AI models, and we do not permit our AI subprocessors to use content submitted through their APIs for model training.

5. How AI Processing Works

To generate replies and insights, relevant conversation content, lead context, and knowledge-base passages are transmitted to our AI providers (listed in the subprocessor table below) for processing. This happens only to produce output for your workspace. AI provider API terms prohibit use of this content for model training. You control whether AI replies are sent automatically or held as drafts for human review, and automated sending is subject to per-workspace guardrails including verification checks, intent restrictions, and daily send caps.

6. Subprocessors (Third-Party Service Providers)

We share data with the following third-party subprocessors to deliver the Service. Each provider handles data only as necessary to perform its function and is bound by its own privacy and security commitments.

Separately from the subprocessors above, you may choose to connect optional integrations to your workspace — for example a Google or Microsoft account for email or calendar sync, or a Calendly account for scheduling. Data flowing through a connected integration is governed by that provider’s own terms and privacy policy, and you can disconnect these integrations at any time from your workspace settings.

This list may be updated as we add or change providers. When we add a subprocessor that handles lead data, we will update this page.

7. Data Retention

We retain your account data and lead data for as long as your workspace is active. Following account closure, data is retained for [RETENTION PERIOD — suggest 90 days] and then deleted, or deleted sooner if you request it. Operational logs are retained for a shorter period as needed for security and debugging.

You may request deletion of your data at any time by contacting [PRIVACY CONTACT EMAIL]. We will process verified deletion requests within 30 days.

8. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you;
• Correction — request that inaccurate information be corrected;
• Deletion — request that we delete your personal information, subject to legal retention obligations;
• Data portability — request an export of your data in a machine-readable format.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

To exercise any of these rights, contact us at [PRIVACY CONTACT EMAIL]. We will verify your identity before processing requests. If you are a lead or contact of a LeadSprint customer and wish to exercise rights over data that customer holds about you, we will refer your request to that customer and assist them in responding.

9. Data Location

The Service is hosted in the United States. If you access LeadSprint from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

10. Cookies and Essential Storage

LeadSprint uses only the cookies and browser storage necessary to operate the Service: authentication and session cookies (provided by Clerk), security cookies used for bot protection on public forms, and local preferences such as your theme choice. We do not use third-party advertising cookies or cross-site tracking technologies.

11. Children’s Privacy

The Service is a business tool and is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us at [PRIVACY CONTACT EMAIL] and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective date” at the top of this page and, where required by law, provide additional notice (such as an email notification). Continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions, requests, or complaints, contact us at:

• Email: [PRIVACY CONTACT EMAIL]
• Legal entity: [LEGAL ENTITY NAME]
• Address: [MAILING ADDRESS]