This explains what Leadonix collects, why, and what you can do about it. We keep very little: we do not sell or share your data, we do not run ads, we do not track you across other websites, and we do not use your data to train anything.
Leadonix is the party responsible for deciding how the personal information described here is handled. For any privacy question or request, contact support@leadonix.com, and we will respond within 30 days.
| Data | Why |
|---|---|
| Email address | To create your account, sign you in, and contact you about your subscription. |
| Password | Stored only as a secure hash by our authentication provider. We never see it. |
| Google account name, email and picture | Only if you choose to sign in with Google, and only to create and identify your account. |
| Subscription details | Plan, status, renewal date and searches used, so we can give you what you paid for. |
| Search history | Your search text, time and result count, to enforce limits, prevent abuse and fix problems. |
| Saved leads and lists | Because you asked us to save them. Only you can see them. |
| A one-way hash of your IP address | To stop one person taking repeated free trials. We do not store the address itself. |
| A payment card fingerprint from Stripe | Same reason. It is an opaque reference, not your card number. |
| Your name and company (optional) | Used to sign the outreach emails you send. Stored in your own browser, not on our servers. |
We do not collect your card details. Payments go directly to Stripe, which stores them. We only receive a customer reference and whether a payment succeeded. Stripe's privacy notice is at stripe.com/privacy.
So there is no ambiguity, Leadonix does not collect, request, receive or process any of the following:
When you search, we look up businesses on public map listings and visit their public websites to read publicly posted business contact details, such as a company email address or phone number. This is information those businesses have chosen to publish about themselves for the purpose of being contacted. We do not buy personal data, we do not guess or generate email addresses, and we do not collect private individual contact details.
Where data protection law applies to this, our lawful basis is legitimate interests: providing a business-to-business prospecting tool built from information businesses have already made public. We weigh that against the limited and public nature of the information involved.
Once you export, save or act on a lead, you decide what happens next. From that point you are independently responsible for that information and for how you contact the business, and you are the controller of your own copy of it. We are not a party to your outreach and we never send messages on your behalf.
If you are a business owner and want your details removed, email support@leadonix.com and we will remove them from the results we control and suppress the listing so it is not returned again. We are not the source: the underlying listing belongs to the map provider and to the business's own website, so removal from Leadonix does not remove it from those.
Leadonix scores each business and drafts a suggested outreach message automatically. You should know exactly how that works:
This is the complete list of service providers that process personal information for us. Each is bound by a written agreement to use it only to provide their service to us, and for nothing else.
| Provider | Role | What they receive |
|---|---|---|
| Supabase | Database, login and server functions | Your account, subscription, searches and saved leads |
| Cloudflare | Hosting and delivery of the website | Standard request data such as your IP address, in transit |
| Stripe | Payments and subscriptions | Your email, payment details and billing history |
| SerpApi | Business listing lookups | Your search text only, never your identity |
| Optional sign-in | Only used if you choose Google sign-in |
If we add or change a provider that handles personal information, we will update this table and change the date at the top of this page. We may also disclose data where the law requires it, to establish or defend our legal rights, or as part of a sale of the business, in which case we will tell you before your data moves.
Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
We have never sold personal information, and we have never shared it for cross-context behavioural advertising or targeted advertising. We will not do either in the future, and we do not sell or share the personal information of anyone, including anyone under 16. There is no opt-out for you to exercise here, because there is nothing to opt out of.
Because we run no advertising or analytics trackers, there is nothing for a Global Privacy Control or Do Not Track browser signal to switch off, and we do not respond to those signals at this time. If we ever add anything such a signal would apply to, we will honour the signal and update this page before doing so.
We use no advertising cookies, no analytics cookies and no third-party trackers. Your browser stores two things:
Clearing your browser storage removes both. Both are either strictly necessary or set by your own choice, which is why you do not see a cookie banner.
When you ask us to delete your account, we delete your account, subscription record, saved leads, lists and search history from our live systems within 30 days. Encrypted backups roll over on a schedule, and anything remaining in them is overwritten within 90 days. During that window the data is isolated and is not used for anything. We may keep the minimum needed to prevent repeat trial abuse, to resolve a dispute, or where the law requires us to keep it, and we will tell you if that applies to you.
Deleting a saved lead removes it immediately. There is no hidden copy, no publicly readable storage, and no file store that any account other than your own can read.
Wherever you live, you can ask us to confirm whether we are processing your data, give you a copy of it, correct it, delete it, explain how we have processed it, or restrict or object to how we use it. You can also withdraw consent where we relied on it. Email support@leadonix.com and we will respond within 30 days, or within 45 days where US state law allows the longer period and we tell you why.
These requests are free. We will never charge you, downgrade you, reduce your searches or treat you worse for making one. We may need to confirm that you control the email address on the account before we act, and if someone makes a request on your behalf we will ask for proof that you authorised them.
Depending on your state or country you may also have the right to appeal a refusal. To appeal, reply to our decision with "appeal" in the subject line. We will give you a written decision with reasons, and if we still refuse you can complain to your state attorney general or your local data protection authority. If you are in the EEA, the UK, Switzerland or Canada you can complain to your supervisory authority at any time, and if you are in the UK you may complain to us first or go directly to the Information Commissioner's Office at ico.org.uk/make-a-complaint.
Access to your data is enforced at the database level: your account can only ever read its own subscription and its own saved leads, and those rules are covered by automated tests. All traffic uses HTTPS. Secret keys live only on the server and never reach the browser. There are no publicly readable storage buckets. Payments never touch our systems. No system is perfectly secure and we cannot guarantee that a determined attacker will never succeed, but if a breach affects your personal information we will notify you, and any regulator we are required to notify, without undue delay and within 72 hours of becoming aware where that deadline applies to us.
Leadonix is operated from, and its data is processed in, the United States. If you use Leadonix from elsewhere, you are sending your data to the United States, where privacy law differs from the law where you live. Where a transfer out of the EEA, the UK or Switzerland requires a safeguard, our providers rely on standard contractual clauses or an equivalent approved mechanism.
We only email you about your own account, your subscription, and material changes to this policy. If we ever send product or marketing email, every message will carry a working one-click unsubscribe, and unsubscribing will never affect the service emails you need.
Leadonix is a business tool for adults. It is not directed at children, we do not knowingly collect personal information from anyone under 18, and we do not sell or share the personal information of minors. If we learn that we hold data from someone under 18 we will deactivate the account and delete the data promptly. If you believe a child has given us information, email support@leadonix.com.
We may update this policy. The date at the top always reflects the current version. If a change is material we will notify you by email or in the app before it takes effect, and we will not apply a material change retroactively to data we already hold where your consent would be required.
Privacy questions, requests, complaints and appeals all go to support@leadonix.com. This is the fastest way to reach us and the address we monitor.