Privacy Policy

This Privacy Policy explains how LeadLanding (“we”, “us”, or “our”) collects, uses, and protects information when you use our service at leadlanding.dev (“Service”). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following categories of information:

• Account information: When you sign up, we collect your email address and any information you provide during registration.
• Usage data: We collect information about how you use the Service, including pages visited, features used, and actions taken within your account.
• Payment information: Payments are processed by Stripe. We do not store your full card details — only a Stripe customer ID and subscription status.
• Technical data: We may collect IP addresses, browser type, device information, and other technical data for security, analytics, and service improvement purposes.
• Lead data you collect: When visitors submit forms on your published landing pages, their data is stored on our infrastructure on your behalf. You are the data controller for this data; we act as a data processor.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service.
• Process payments and manage your subscription.
• Send you transactional emails (account confirmation, password reset, billing receipts).
• Respond to your enquiries and provide customer support.
• Detect, investigate, and prevent fraudulent, abusive, or illegal activity.
• Comply with legal obligations.

We do not sell your personal data to third parties. We do not use your data or your users’ lead data for advertising or AI model training.

3. Lead Data — Your Responsibilities

When you use LeadLanding to collect form submissions from visitors to your landing pages, you are the data controller for that personal data. We store it on your behalf as a data processor. You are responsible for:

• Obtaining valid consent or another lawful basis for collecting personal data.
• Informing your visitors about how their data will be used (e.g. via a privacy notice on your page).
• Honouring data subject rights requests, including deletion and access requests.
• Ensuring your use of lead data complies with GDPR, CCPA, and any other applicable laws.

We will delete your lead data upon account deletion or upon request. We will not access, share, or use your lead data except as strictly necessary to provide the Service or as required by law.

4. Cookies and Tracking

We use cookies and similar tracking technologies to operate the Service, maintain your login session, and understand usage patterns. We use minimal, functional cookies only — we do not set third-party advertising or tracking cookies.

Analytics data collected on your published pages (page views, visitor locations, device types) is aggregated and anonymised. We do not store raw visitor IP addresses against individual sessions.

5. Third-Party Services

We rely on the following third-party providers to deliver the Service:

• Supabase — database and authentication infrastructure. Data is stored within Supabase’s secure cloud environment.
• Stripe — payment processing. Your payment data is governed by Stripe’s Privacy Policy.
• Vercel — hosting and edge infrastructure. Your pages are served via Vercel’s global network.
• Anthropic — AI generation. Prompts you submit to generate landing pages are processed by Anthropic’s API in accordance with Anthropic’s Privacy Policy.

Each of these providers has their own privacy policy and data processing terms. We select providers who maintain reasonable security standards, but we are not responsible for their independent data practices.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data and your lead data within 30 days, except where we are required to retain it for legal or compliance purposes (e.g. billing records, which may be kept for up to 7 years).

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

In the event of a data breach that affects your personal data, we will notify you in accordance with applicable legal requirements.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (“right to be forgotten”).
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain types of processing, such as direct marketing.
• Withdrawal of consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please contact us at nas@leadlanding.dev. We will respond within 30 days. We may ask you to verify your identity before acting on a request.

9. Children’s Privacy

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it promptly.

10. International Transfers

Our infrastructure providers (Supabase, Vercel, Stripe, Anthropic) may process data in various countries. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised “Last updated” date. For material changes, we will notify you by email or via a notice within the Service. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

12. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at nas@leadlanding.dev.