Privacy Policy

LeadPulse AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

We collect the following categories of information:

• Account information: Name, email address, and business name provided at registration.
• Email data: When you connect a Gmail or Microsoft 365 inbox, we access inbound emails to identify leads and generate responses. We read email content, sender information, and metadata solely to operate the Service.
• Usage data: Information about how you interact with the Service, including pages visited, features used, and actions taken.
• Billing data: Payment information is processed by Stripe and is not stored on our servers.
• Technical data: IP address, browser type, operating system, and device identifiers collected automatically.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Generate AI-drafted email responses on your behalf
• Send automated follow-up messages when enabled by your subscription
• Process transactions and manage your subscription
• Send account-related notifications and support communications
• Monitor and analyze usage to improve the Service
• Comply with legal obligations

LeadPulse AI uses third-party AI providers (including OpenAI) to process email content and generate responses. Email content is transmitted to these providers solely for the purpose of generating replies for your dealership.

We do not use your data to train public AI models. Your email content is processed transiently and is not used to improve AI models beyond the context of your specific dealership session.

Data is processed only to generate responses for your dealership. We maintain data minimization practices and limit AI processing to what is necessary to provide the Service.

When you connect a Gmail or Microsoft 365 inbox, we request OAuth permissions to read your emails. This access is limited to:

• Reading inbound emails to identify and process customer leads
• Sending email replies on your behalf when you approve or enable auto-send
• Accessing email metadata (sender, subject, timestamp) for lead tracking

We do not read emails unrelated to lead management and do not share email content with third parties except as necessary to provide the Service (AI providers, cloud infrastructure).

We do not sell your personal information. We may share data with:

• Service providers: Trusted vendors including Supabase (database), Vercel (hosting), OpenAI (AI processing), Stripe (billing), Google, and Microsoft — each bound by data processing agreements.
• Legal requirements: When required by law, court order, or governmental authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice.

We retain your account data for as long as your account is active or as needed to provide the Service. Email content and lead data is retained for up to 12 months after the relevant interaction, or as otherwise required by applicable law. You may request deletion of your data at any time.

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict certain processing activities
• Data portability — receive your data in a structured format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@leadpulseai.com.

We use cookies and similar tracking technologies to operate the Service, maintain authentication sessions, and analyze usage. You may control cookies through your browser settings, though disabling cookies may affect Service functionality.

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

For privacy-related inquiries, contact us at privacy@leadpulseai.com.