Privacy Policy

We collect information you provide directly and information generated through your use of the service:

• Account information: Your name and email address when you register for an account.
• Search queries: ZIP codes, business categories, and radius settings you enter while using the search feature.
• Saved leads and notes: Leads you bookmark, status updates, and private notes you add within the platform.
• Usage data: Pages visited, features used, timestamps, browser type, device type, and IP address.
• Payment information: When you upgrade to a paid plan, billing is handled by Stripe. We do not store your full card number; only a payment token and the last four digits of your card are retained.

• Create and manage your account and authenticate your sessions.
• Provide, maintain, and improve the LeadZipp service.
• Process subscription payments and send billing receipts via Stripe.
• Send transactional emails (password resets, account notifications). We do not send marketing emails without your explicit consent.
• Analyze aggregate usage patterns to improve features and performance.
• Detect, investigate, and prevent fraud or abuse.
• Comply with legal obligations.

Your data is stored in Supabase, a secure cloud database platform. All data is encrypted at rest and in transit using industry-standard TLS. We use Supabase Row Level Security (RLS) to ensure you can only access your own data.

While we take reasonable precautions to protect your information, no security measure is 100% foolproof. We encourage you to use a strong, unique password for your account.

We work with a limited set of trusted third-party services:

• Supabase — Database hosting and authentication. Data is stored in Supabase-managed infrastructure. Supabase Privacy Policy
• Stripe — Payment processing. Stripe is PCI-DSS compliant and handles all card data securely. Stripe Privacy Policy
• Google Analytics (GA4) — Anonymous usage analytics to help us understand how the product is used. Data is anonymized and not linked to your account. Google Privacy Policy

We do not sell your personal information to third parties and we never will.

You have the right to access, correct, or delete your personal information at any time. To exercise these rights:

• Access or correction: Log into your account settings or email us at hello@leadzipp.com.
• Account deletion: Email us at hello@leadzipp.com with the subject “Delete My Account” and we will permanently delete your data within 30 days.

If you are located in the European Economic Area (EEA), you may have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with your local supervisory authority.

LeadZipp uses a minimal set of cookies:

• Session cookies: Required for authentication. These are set by Supabase and expire when you close your browser or after a period of inactivity.
• Analytics cookies: Set by Google Analytics (GA4) to track anonymous usage metrics. You can opt out using browser settings or a GA4 opt-out browser add-on.

We do not use advertising cookies or sell cookie data to third parties.

LeadZipp is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at hello@leadzipp.com and we will promptly delete it.

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, for material changes, notify you by email or by displaying a notice within the app. Continued use of LeadZipp after any changes constitutes your acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: