Privacy policy

Template copy. This page was prepared during the design phase to show the shape and length a real privacy policy will take. It has not been reviewed by a qualified data protection adviser or lawyer and must not be published or relied on until it has been. Every bracketed and placeholder detail below needs to be confirmed against the live product and the organisation’s actual practices before launch.

Who we are

LeadClue is a product of CodesClue (“CodesClue”, “we”, “us”, “our”), registered in Ahmedabad, Gujarat, India. This policy explains how we collect, use, share and protect personal data when you use the LeadClue website and application (the “Service”), and when your organisation uploads prospect records for scoring and outreach.

If you have questions about this policy, contact us at privacy@codesclue.com.

Information we collect

We collect information in three broad categories:

• Account and billing information — name, work email, company name, role, password (hashed), and billing details, collected when you or your organisation register for the Service.
• Usage and device information — pages visited, features used, log data, IP address, browser type and device identifiers, collected automatically as you use the Service.
• Prospect data uploaded by customers — lead and contact records that your organisation uploads, connects or imports for scoring, prioritisation and outreach. See the next section for how this category is handled, because it is treated differently from the two above.

Prospect data you upload

This section matters most, so we have kept it plain.

When your organisation uploads, connects or imports prospect and lead records into LeadClue — names, job titles, company details, contact information, engagement history and similar records — that data remains your property. We do not acquire any ownership interest in it.

We process this uploaded prospect data strictly on your instructions, as a processor acting for your organisation as controller, and only for the purposes you configure: scoring against your Ideal Customer Profile, ranking, queueing, drafting outreach messages and recording replies.

We will never:

• sell uploaded prospect data to any third party;
• share uploaded prospect data with other LeadClue customers, or mix one customer’s uploaded records into another customer’s account, queue or scoring model; or
• use uploaded prospect data to train, fine-tune or otherwise improve any machine-learning or AI model that is made available to any other customer or to the public.

Any AI model used to score or draft messages from your uploaded data operates only within your account. If we ever wished to use aggregated or de-identified data to improve the Service generally, we would only do so in a form that cannot be linked back to an identifiable prospect, and we would say so clearly here first — not by default, and not without notice.

You are responsible for having a lawful basis to collect and upload prospect data into the Service, and for honouring any requests prospects make to you directly (for example, an opt-out or an erasure request) — see “Data subject requests” in our data processing summary.

How we use information

We use the information described above to:

• provide, operate and maintain the Service, including scoring, queueing and drafting outreach on your instruction;
• authenticate accounts, process payments and provide customer support;
• monitor performance, diagnose faults and improve reliability and security;
• send service messages (for example, security notices or billing receipts) and, where you have agreed, product updates; and
• meet legal and regulatory obligations.

Legal bases

Where UK or EU data protection law applies, we rely on the following legal bases:

• contract — to provide the Service to you under our terms;
• legitimate interests — for security, fraud prevention, service improvement and direct marketing to existing customers, balanced against your rights;
• consent — for optional cookies and, where required, for marketing to prospective customers; and
• legal obligation — for tax, accounting and regulatory recordkeeping.

Where your organisation is the controller of prospect data uploaded into the Service, the applicable legal basis for processing that data is a matter between your organisation and the relevant prospects, not between you and us.

Sharing and sub-processors

We share personal data only as follows:

• with sub-processors who provide hosting, storage, email delivery, analytics and similar infrastructure on our behalf, under written data processing terms — see the sub-processor list in our data processing summary;
• with professional advisers (auditors, lawyers, insurers) where necessary;
• with a buyer in the event of a merger, acquisition or asset sale, subject to the same protections described here; and
• where required by law, for example in response to a valid legal request.

We do not sell personal data, and we do not share uploaded prospect data with other customers or unrelated third parties for their own marketing purposes.

Retention

We retain account and billing information for as long as your account is active and for a limited period afterwards to meet legal, accounting and dispute-resolution obligations . Uploaded prospect data is retained for as long as your account is active and is deleted or returned in line with the “Deletion and return” section of our data processing summary once your account closes, subject to any shorter period you configure.

Your rights

Depending on where you are based, you may have rights to access, correct, delete, restrict or object to our processing of your personal data, and to receive a copy of it in a portable format. To exercise these rights over your own account data, contact privacy@codesclue.com. If your request concerns prospect data that a LeadClue customer has uploaded about you, we will direct you to that customer, as they are the controller of that data.

You also have the right to lodge a complaint with your local data protection authority.

International transfers

Our infrastructure and sub-processors may be located outside your country. Where personal data is transferred internationally, we use appropriate safeguards, such as standard contractual clauses or an equivalent recognised transfer mechanism .

Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and regular review of our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. See our data processing summary for more detail on security measures.

Changes

We may update this policy from time to time. If we make material changes, we will notify account administrators by email or through the Service, and update the date at the top of this page.

Contact

Questions, requests or complaints about this policy can be sent to privacy@codesclue.com. For security-specific reports, use security@codesclue.com.