Privacy Policy

LeadsBuck is an AI client acquisition platform for agencies and freelancers. It helps you find businesses, analyze their websites, write personalized outreach, send it from your own mailbox, and track replies and follow-ups in a pipeline. It also includes social media scheduling and can be used from AI assistants such as Claude, ChatGPT and Cursor through the Model Context Protocol (MCP). LeadsBuck is operated by Navtechy, registered in India ("LeadsBuck", "we", "us").

This policy explains what personal information we handle when you visit our website or use LeadsBuck, and what choices you have. It also explains how we handle information about the businesses and people who appear in LeadsBuck as prospects.

Information you give us

• Account details: your name, email address and password. We store passwords only as a one-way bcrypt hash, never in readable form.
• Profile and onboarding details: such as your business type, the services you offer and your ideal customer profile, which we use to tailor search results and AI suggestions.
• Email sending settings: if you connect your own mailbox, we store the SMTP server, port, username, password and sender name you provide so that LeadsBuck can send email on your behalf.
• Content you create: leads you add or import, notes, pipeline stages, email templates, sequences, campaigns, social posts, uploaded images and videos, and messages you write or generate.
• Communications: messages you send us, demo booking details (such as name, email and preferred time) and messages you type into the chat assistant on our website.

Information from connected services

• Social accounts: when you connect LinkedIn, X (Twitter), Facebook or Instagram, we receive access tokens and basic profile or page details from that platform so we can publish and read analytics for posts you schedule. You can disconnect an account at any time.
• Payments: our billing provider tells us your plan, subscription status and purchase history. We do not receive or store your full card details.

Information collected automatically

• Usage data: pages visited, features used, credit usage, log data such as IP address, browser type and timestamps.
• Email engagement: some outreach emails sent through LeadsBuck may include a small tracking image so you can see whether an email was opened.

When you search for prospects, LeadsBuck gathers publicly available business information on your instruction. This includes:

• business listings from Google Places (name, address, phone, website, category, rating and reviews);
• the content of a business's public website, which we fetch to analyze it and to find contact details published there (for example on a contact or team page);
• public web search results, and public posts on forums such as Reddit and Hacker News used for buying signals and social listening.

Prospect records you create, import or collect in your workspace belong to you. For that data you decide who to contact and why, and we process it on your behalf as a service provider (a "processor" under laws such as the GDPR). For your own account data, and for data we use to run and improve LeadsBuck, we act as the controller.

If you run or work at a business, LeadsBuck may hold public information about it, such as the business name, website, address, phone number, a public business email address, review details and an automated analysis of its website. We collect this only from the public sources listed above.

You can ask us what we hold, ask us to correct it, object to its use, or ask us to delete it and stop collecting it again where we can. Email [email protected] with the business name and website. Where a LeadsBuck customer has contacted you, that customer is responsible for their message and must honor your request to opt out; you can also reply to them directly.

• to provide LeadsBuck: search, website analysis, fit scoring, writing and sending emails, pipeline, follow-ups, social scheduling, analytics and MCP access;
• to create and secure your account, including password resets and fraud and abuse prevention;
• to process payments, track credits and manage subscriptions;
• to send service messages, such as account, billing and security notices;
• to respond to support requests and demo bookings;
• to understand how the product is used and improve it;
• to comply with law and enforce our Terms of Service.

Where laws such as the GDPR apply, we rely on performance of our contract with you, our legitimate interests in running and securing the service, your consent (for example for optional analytics where required), and legal obligations. We do not sell personal information.

LeadsBuck uses third-party AI models to analyze websites, score fit, draft emails and create social content. To do this, prompts containing lead details, website content and your instructions are sent to AI service providers, currently Google (Gemini), OpenAI and NVIDIA. They process this data to return a result for your request. AI output can be inaccurate, so please review it before you rely on it or send it.

We share information only as needed to run LeadsBuck, with:

• Hosting and database providers that run our servers and store data;
• AI service providers (Google, OpenAI, NVIDIA), as described above;
• Data sources such as Google Places and a web search API, which receive the search terms you enter;
• Payment provider Polar, which processes subscriptions and credit purchases;
• Email delivery through Resend for system emails (for example password resets and booking confirmations), and through the SMTP mailbox you connect for your outreach;
• File storage on Backblaze B2 for media you upload;
• Social platforms you connect, when you publish or read analytics;
• Analytics through Google Analytics, and our website chat assistant;
• authorities or others where required by law, to protect rights and safety, or as part of a merger or sale of the business, subject to this policy.

We use essential cookies to keep you signed in and to secure your session. Our website also uses Google Analytics, which sets cookies to measure visits and usage, and loads a chat assistant. You can block or delete cookies in your browser; essential cookies are needed for sign-in to work.

We use HTTPS for data in transit. Passwords are stored as bcrypt hashes, social account access tokens are encrypted before they are stored, and API keys and MCP access tokens are stored only as SHA-256 hashes. No system is perfectly secure, so please use a strong, unique password and, for SMTP, an app password where your provider offers one.

We keep your account data and workspace content while your account is active. If you close your account or ask us to delete your data, we will delete or anonymize it within a reasonable period, except where we need to keep some records to meet legal, tax or accounting obligations, resolve disputes or enforce our agreements. Disconnecting a social account removes our ability to use it, and you can revoke API keys at any time in Settings.

Depending on where you live (for example under the GDPR, UK GDPR, US state privacy laws or India's Digital Personal Data Protection Act, 2023), you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, to withdraw consent, and to complain to a data protection authority.

To make a request, email [email protected]. We may need to verify your identity. If your request concerns prospect data held in a customer's workspace, we may refer it to that customer and help them respond.

We and our service providers may process information in India, the United States and other countries whose data protection laws differ from yours. Where required, we rely on appropriate safeguards for these transfers, such as contractual commitments with our providers.

LeadsBuck is a business tool and is not intended for anyone under 18. We do not knowingly collect personal information from children. If you think a child has given us information, contact us and we will delete it.

We may update this policy as LeadsBuck changes. We will post the new version here with a new "Last updated" date and, for significant changes, notify account holders by email or in the app.

For privacy questions or requests, email [email protected].