Privacy Policy — GenLead

1. Introduction

GenLead (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our lead management platform.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, and password (stored encrypted). We also collect your chosen subdomain for your workspace.

Lead Data

You input lead data into the platform including names, email addresses, phone numbers, and custom fields. This data belongs to you and is stored in your isolated tenant workspace.

Usage Data

We automatically collect information about how you interact with the platform, including login times, IP addresses, browser type, and pages visited. This is used for security monitoring and service improvement.

Communication Data

If you use our messaging features (email, SMS, WhatsApp), we store message content and delivery status to provide the service and maintain audit trails.

3. How We Use Your Information

To provide and maintain the GenLead platform
To authenticate your identity and secure your account
To process payments (via Stripe) if applicable
To send transactional emails (password resets, account notifications)
To monitor for security threats (failed logins, rate limiting)
To improve our services based on usage patterns

4. Data Isolation & Multi-Tenancy

GenLead operates a multi-tenant architecture where each company's data is completely isolated. Your leads, templates, team members, and messages are never accessible to other companies on the platform.

5. Third-Party Services

We use the following third-party services:

Railway — Application hosting and PostgreSQL database
Stripe — Payment processing (if enabled)
Vonage / Twilio — SMS and WhatsApp messaging (if configured)
SMTP Provider — Email delivery (configurable)
Google reCAPTCHA — Bot protection (if enabled)

Each service has its own privacy policy. We only share the minimum data necessary for each service to function.

6. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove your data within 30 days, except where required by law to retain it.

7. Your Rights

Under applicable data protection laws (including GDPR and UK GDPR), you have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Export your data in a portable format
Object to processing of your data
Withdraw consent at any time

8. Security

We implement industry-standard security measures including encrypted passwords (bcrypt), HTTPS, HttpOnly cookies, CSRF protection, rate limiting, and security event logging.

9. Cookies

We use essential cookies only: an authentication token cookie (HttpOnly, Secure) and a tenant identification cookie. We do not use tracking or advertising cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on the platform.

11. Contact

For privacy-related enquiries, contact us at support@genlead.today.