Legal / Privacy
Privacy Policy
Last updated: April 30, 2026
This Privacy Policy describes how Leadstan ("we", "us", "our") collects, uses, and shares information when you use the Service. By using the Service you agree to the practices described below.
1. Information we collect
- Account data — the email address you sign up with, plus authentication metadata (sign-in timestamps, OAuth provider id if applicable). Passwords are never stored in plaintext.
- Usage data — the niches and locations you search for, the lead counts you request, and the resulting lead records you generate. We retain these so you can revisit your history without re-running paid searches.
- Technical data — IP address, browser user-agent, timestamps, and basic request logs needed to operate the Service and protect against abuse.
- Cookies — a small set of strictly necessary cookies for keeping you signed in and preserving your search intent between page loads. We do not use third-party advertising cookies.
2. How we use your information
- operate, secure, and improve the Service;
- deliver lead-extraction results and store your history;
- respond to support requests and account inquiries;
- detect, prevent, and respond to abuse, fraud, and security incidents;
- comply with legal obligations.
3. Third-party processors
We rely on the following sub-processors to run the Service:
- Supabase — authentication and database hosting.
- Apify — third-party automation infrastructure used to query public business directory sources.
- Google Maps Platform — geocoding and places autocomplete on the front end (so you can search for places by name).
These providers process data on our behalf under their own terms and privacy policies. We do not sell your personal data to third parties.
4. Business directory data
Records returned by the Service consist of business-directory information (e.g. business name, address, phone, website, email when publicly listed) drawn from publicly accessible sources at the time of your query. You are responsible for using that data lawfully — including compliance with applicable privacy and electronic-communications regulations such as GDPR, CAN-SPAM, CASL, and TCPA.
5. Data retention
We keep account and history records for as long as your account is active. When you delete your account, we will delete or anonymize your personal data within a reasonable period unless retention is required for legal, tax, or security purposes.
6. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- request correction or deletion of that data;
- object to or restrict certain processing;
- request a portable copy of your data;
- withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email us at the address in the contact section. We will respond within a reasonable timeframe.
7. Security
We use industry-standard safeguards including TLS in transit, hashed passwords, httpOnly session cookies, and least-privilege access controls. No system is perfectly secure, but we work to protect your information appropriately.
8. International transfers
Your data may be processed in countries other than your own, including by our sub-processors. Where required by law, we put appropriate safeguards in place.
9. Children
The Service is not intended for individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided us information, please contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page or communicated by email. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.
11. Contact
For questions or privacy requests:
- Email: wasilislam456@gmail.com
- Address: 618 A Eden City, Lahore, Pakistan