Privacy Policy

1. Scope and roles

This Privacy Policy applies to the LeadSavvy Pro website at leadsavvy.pro, the application at app.leadsavvy.pro, our support channels, and integrations that form part of the LeadSavvy Pro service (together, the Service).

LeadSavvy Pro controls the personal information used to administer accounts, billing, support, security and our website. When a customer uses the Service to collect and manage leads, the customer decides which lead information is collected and what happens to it. We handle that information on the customer's instructions so we can provide the Service.

Customers are responsible for having an appropriate legal basis to collect, use and send lead information to LeadSavvy Pro, and for giving their leads any notices required by law.

2. Information we collect and hold

Account, organisation and billing information

We may collect names, email addresses, phone numbers, organisation details, account and authentication records, team invitations, subscription details, billing email addresses and transaction references. Payment card details are handled by our payment provider rather than stored by LeadSavvy Pro.

Connected accounts and integration settings

When you connect Meta, Google or another supported service, we may receive account identifiers, account and Page names, permissions, access or refresh tokens, form details and the configuration needed to operate the connection. We use these credentials only to provide and maintain the connection you authorise.

Lead and customer relationship data

The Service may process information submitted through Meta lead forms or entered by customers, including names, email addresses, phone numbers, form answers, notes, tags, pipeline stages, campaign, ad set, advertisement and form identifiers, lead status, and related activity. The exact fields depend on the form and workflow configured by the customer.

LeadSavvy Pro does not require customers to collect sensitive information. If a customer chooses to collect it, the customer must ensure that doing so is lawful and appropriately disclosed.

Website, device and support information

We may collect IP addresses, browser and device information, pages viewed, timestamps, referring pages, cookie identifiers, security signals, diagnostic logs, and interaction or session information. If you contact us, we collect the details in your message and any information needed to resolve the request.

3. How we use information

We use personal information to:

• create and administer accounts, organisations and subscriptions;
• retrieve, display, organise and deliver leads according to customer settings;
• send notifications and export information to customer-selected destinations;
• send CRM outcome events to Meta when a customer enables that feature;
• process payments and manage plans;
• provide support and respond to enquiries;
• monitor performance, diagnose faults and improve the Service;
• prevent fraud, abuse, unauthorised access and other security threats;
• send service notices and, where permitted, relevant product communications; and
• meet legal obligations and enforce our agreements.

We do not use customer lead data for our own unrelated advertising, and we do not sell or rent personal information.

4. When we share information

We disclose information only where necessary to provide the Service, follow customer instructions, protect LeadSavvy Pro and its users, complete a business transaction, or comply with law. This may include:

• Meta, for Facebook and Instagram account connections, lead retrieval and customer-enabled CRM Conversions API events;
• Google, for customer-selected Google integrations and website or product analytics;
• Microsoft, for product analytics and session diagnostics through Clarity, and other technology services where configured;
• Twilio SendGrid, for service, notification and contact-form email delivery;
• Stripe, for subscription and payment processing;
• Cloudflare, for Turnstile bot detection and website security;
• cloud hosting, database, monitoring, backup and technical support providers; and
• destinations or other services a customer deliberately connects to LeadSavvy Pro.

Providers may process information only for the services they supply to us or as otherwise permitted by their own relationship with you. We may also disclose information to professional advisers, regulators, courts, law enforcement, or a purchaser or successor as reasonably required.

5. Cookies, analytics and embedded content

The website and application use essential cookies and similar storage for authentication, security, preferences and core functionality. In production, we may also use Google Analytics, Microsoft Clarity and the Meta Pixel on selected pages to understand usage, diagnose experience issues and measure campaigns.

Clarity may record interactions such as clicks, scrolling and navigation. Analytics providers may receive device, browser, IP address and cookie or similar identifiers. Blog pages may include privacy-enhanced YouTube embeds; YouTube may receive information when a video is loaded or played.

You can restrict cookies through your browser or device settings. Blocking essential cookies may prevent parts of the Service from working correctly. A privacy policy does not replace any consent that applicable law may require for non-essential technologies.

6. Overseas processing

LeadSavvy Pro and its providers may process or store information outside your country. Some providers are based in, or process information in, the United States and other countries where they operate. Privacy protections in those locations may differ from those in Australia.

Where required, we take reasonable steps to use providers and safeguards appropriate to the information and the services being supplied.

7. Retention, disconnection and deletion

We keep information for as long as reasonably needed to provide the Service, maintain security and business records, resolve disputes and meet legal, tax and accounting requirements. Retention periods vary according to the information, account status and customer configuration. Backup copies may remain for a limited period before being overwritten.

You can disconnect a connected service to stop future access through that connection. Revoking LeadSavvy Pro in Meta or Google does not necessarily remove information already processed before revocation.

Requesting deletion

To request deletion of your LeadSavvy Pro account or personal information, email support@leadsavvy.pro from the email address associated with your account. Tell us what you want deleted. We may need to verify your identity or authority before acting.

We will delete or de-identify information where reasonably possible, subject to information we must retain for legal, security, fraud-prevention or legitimate record-keeping purposes. If your information was collected by one of our customers, we may direct your request to that customer because they control how the lead information is used.

8. Security

We use administrative, technical and organisational safeguards designed to protect information against loss, misuse and unauthorised access, alteration or disclosure. These include access controls, authentication, transport encryption, monitoring and restricted administrative access where appropriate.

No internet or storage system is completely secure. Please use a strong, unique password, protect your connected accounts and notify us promptly if you suspect unauthorised access.

9. Access, correction, choices and complaints

Depending on where you live, you may have rights to access, correct, delete, restrict or object to certain processing of your personal information, or to withdraw consent where processing relies on consent. You can update some account details within the Service or contact us using the details below.

To make a privacy request or complaint, email us with enough detail to understand the issue. We will acknowledge and investigate the request, verify identity where appropriate, and respond within a reasonable period. We may decline or limit a request where the law permits and will explain why.

If you are in Australia and are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

10. Children's privacy

The Service is intended for businesses and is not directed to children under 18. We do not knowingly invite children to create accounts. If you believe a child has provided account information to us without appropriate authorisation, contact us so we can investigate.

11. Changes to this policy

We may update this policy when our practices, providers, features or legal obligations change. We will publish the revised policy here and update the date above. If a change is material, we may also provide notice through the Service or by email.

12. Contact us

For privacy questions, access or correction requests, complaints, or deletion requests, contact:

You may request a copy of this policy in another reasonably accessible format by contacting us.