Privacy Policy
Last updated: September 26, 2026
Part A — Customers and website visitors
What we collect
- Account details: your email address, and the name and company you give us at checkout.
- Purchase records: what you bought, amounts, and credit usage. Card details are collected and stored by our payment processor, not by us.
- Usage data: the searches and filters you run, lists you create and download, and basic technical logs (IP address, browser, timestamps) kept for security and troubleshooting.
- Cookies: one essential cookie that keeps you signed in. See our Cookie Policy.
How we use it
- to deliver what you bought, run your searches and show your dashboard;
- to send sign-in links, receipts and important service messages;
- to prevent fraud and abuse and keep the service secure;
- to comply with legal obligations and enforce our Terms.
We don't sell customer information, and we don't send marketing email without your permission.
Who we share it with
Only service providers that help us run Leadstan — hosting (Vercel and our own servers), email delivery (Resend), payment processing, and data providers that power Live Search — under contracts that limit their use of it. We may also disclose information if required by law or to protect our rights, or as part of a merger or sale of the business.
Part B — People in our business database
What the database contains
Leadstan provides business contact information to companies for business-to-business prospecting. A record may include a business name, a contact's name and job title, work email address, business phone number, business address, website, social profile links, industry, company size and public ratings.
Where it comes from
Publicly available sources such as business websites and online business listings, business directories, and third-party data compilations. Live Search results are collected in real time from public business listings. See Data Sources & Accuracy.
How it's used and shared
We make these records available to our customers, who use them to contact businesses about products and services. Customers must follow our Acceptable Use Policy, which prohibits using the data for credit, employment, insurance, housing or other eligibility decisions.
Your choices
You can ask us to stop selling or sharing your information, delete it, or tell you what we hold, using our removal form or by emailing us. When we receive a removal request we add your email and/or phone number to a suppression list so it is excluded from future lists, previews and searches, and we remove it from lists already built in our system. We can't recall copies a customer already downloaded before your request.
Your privacy rights
California residents (CCPA / CPRA)
In the last 12 months we have collected identifiers (name, email, phone, address), professional or employment-related information (job title, employer) and commercial information from the sources described above, for the business purposes described in this policy. Making business contact data available to customers may be considered a "sale" or "sharing" under California law. You have the right to:
- Opt out of the sale or sharing of your personal information — use Do Not Sell or Share My Personal Information;
- Know what personal information we collected about you, the sources, and who we disclosed it to;
- Delete personal information we hold about you, and correct inaccurate information;
- not be discriminated against for exercising these rights.
We'll confirm receipt within 10 business days and respond within 45 days. We may need to verify your identity by matching the email or phone number in your request. An authorized agent may submit a request on your behalf with your written permission.
Other US states
Residents of states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas and Oregon) may have similar rights to access, correct, delete and opt out. Use the same form or email us; if we decline your request, you can appeal by replying to our decision.
Outside the United States
Leadstan focuses on US businesses. If you're in the EU, UK or Canada and your information appears in our data, you may object to its use or request deletion using the same form, and we will honor it.
Retention
We keep customer account and purchase records for as long as your account is active and as needed for tax, accounting and legal purposes. Suppression records are kept indefinitely so your opt-out keeps working.
Security
We use encryption in transit (HTTPS), access controls, signed and expiring download links, and limited staff access. No system is perfectly secure, but we work to protect your information.
Children
Leadstan is a business service and isn't directed to anyone under 18. We don't knowingly collect children's information.
Changes
We'll post any changes here and update the date above. Material changes will be highlighted on the site or emailed to customers.