Privacy Policy

Leader AI ("the Company", "we", "us") operates the platform at getleader.ai. This Privacy Policy explains how we collect, use, and protect your information.

2.1 Information You Provide

• Account details: Full name, email address, phone number
• Business data: Company name, industry, website, logo
• Lead data: Information about prospects you manage in the system
• Communication content: Messages, files, and media you upload

2.2 Automatically Collected Information

• Usage data: Actions taken, pages viewed, access times
• Technical data: IP address, browser type, operating system
• Cookies: For session identification and user experience improvements

2.3 Third-Party Information

• Facebook/Meta data: Pages, Page posts and insights, linked Instagram professional account and its insights, ad accounts and campaigns, and Lead Ads submissions (with your authorization).
• Google data: Google Calendar for meeting synchronization (with your authorization)

• Service delivery: Operating the platform, lead management, and business communications
• Product improvement: Analyzing usage patterns and enhancing user experience
• AI Agents: Natural language processing to generate automated responses. Lead and conversation data are processed by our subprocessors (listed in section 4) to provide the service
• Service communications: Updates, alerts, and action confirmations (not marketing)
• Legal compliance: Meeting legal and regulatory requirements

We do not sell or rent your personal information.

We may share information only in the following cases:

• Service providers (subprocessors): lead and conversation data are processed by our subprocessors to provide the service: Supabase (hosting), Twilio (voice, SMS), ElevenLabs (AI voice), Google Gemini (AI processing), Meta WhatsApp Business API, Resend (email), Cardcom (payments). Processing by each subprocessor is under its own terms.
• Legal requirements: Court orders, official requests from authorized bodies
• Rights protection: Fraud prevention, user safety

All our service providers are bound by confidentiality and data security agreements.

• Encryption: All communications encrypted via SSL/TLS. Sensitive data encrypted at rest
• Access control: Row-Level Security (RLS) ensuring users see only their own data
• Permissions: Tiered role system (super-admin, company admin, agent)
• Backups: Automatic daily backups with restore capability
• Monitoring: Continuous monitoring for unauthorized access attempts

What we access.

Only after you click "Connect Meta" and approve each permission in Meta's login dialog, we access:

• the Facebook Pages you manage, their posts and Page Insights;
• the Instagram professional account linked to your Page, its media and media insights;
• the ad accounts you manage, their campaigns, ads and ad performance;
• Lead Ads form submissions (leads) collected by your Pages.

How we use it.

• Publishing: we publish a post to your Facebook Page or Instagram account only after you review and approve that post in Leader AI.
• Insights: Page and Instagram metrics are shown to you in the Post Analytics dashboard.
• Ads: we create, edit, pause and report on campaigns only in ad accounts you select, and only after your approval.
• Lead Ads: new leads from your forms are imported into your Leader AI CRM so your team can follow up.

What we do not do.

We do not sell Meta data, share it with other customers, use it for our own advertising, or use it to train AI models. Each customer's data is stored in its own isolated workspace.

Disconnecting.

You can disconnect Meta at any time from the Connections screen in Leader AI, or from Facebook Settings > Business Integrations. After disconnection we stop all API access and delete your Meta access tokens within 24 hours. Leads already imported stay in your CRM as your business records until you delete them or request deletion via our Data Deletion page.

We comply with the Meta Platform Terms and Developer Policies.

What data: Google Calendar — creating, updating, and canceling meeting events in your Google Calendar, based on the permissions you grant.

Why: To synchronize meetings scheduled between your sales representative and a lead, including sending an invitation to the customer and creating a Google Meet link.

Disconnecting: You can disconnect Google Calendar at any time from the Connections screen in the platform or from Google Account settings. After disconnection, we revoke our access token and do not retain a copy of your calendar data beyond what is required to maintain a record of meetings already created in the system.

Our use of Google Calendar data is limited solely to meeting synchronization. We comply with the Google API Services User Data Policy, including the Limited Use requirements.

8.1 Retention Periods

• Account data: While account is active + 30 days after cancellation
• Lead data: While account is active. Individual leads can be deleted anytime
• Usage logs: Up to 12 months
• Billing data: 7 years (as required by law)

8.2 Deletion Requests

You may request deletion of all your data by contacting hello@getleader.ai or via our Data Deletion page. Data will be deleted within 30 days of the request.

Under the Israeli Privacy Protection Law and GDPR (where applicable), you have the following rights:

• Right of access: View the information we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data (subject to legal retention obligations)
• Right to unsubscribe: Opt out of marketing communications at any time
• Right to object: Object to data processing for direct marketing
• Right to portability: Receive a copy of your data in a machine-readable format

Contact privacy@getleader.ai to exercise your rights. We will respond within 30 business days.

10.1 Roles

For lead data, Leader AI is a service provider and processor for its customers. Each customer is the controller (the "business" under the CCPA/CPRA) of its leads and is responsible for obtaining consent and for its own privacy policy. Questions about a specific business's use of your data should go to that business.

10.2 Text messages (SMS)

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

• Reply STOP to opt out at any time; reply HELP for help.
• Message frequency varies.
• Message and data rates may apply.

10.3 AI voice calls

Calls may be conducted by an AI voice agent. Calls may be recorded and transcribed for service and quality purposes. Callers are informed at the start of the call.

10.4 Your US privacy rights (CCPA/CPRA)

• Right to know what personal information we collect, use and disclose
• Right to delete your personal information
• Right to correct inaccurate personal information
• Right to opt out of sale or sharing. We do not sell or share personal information.
• No discrimination for exercising your rights
• Authorized agents may submit requests on your behalf, with proof of authorization

Send requests to privacy@getleader.ai. We respond within 45 days.

10.5 Children

Our service is not directed at children under 13.

• Essential cookies: Core platform functionality (session, security)
• Functional cookies: Language and display preferences
• Analytics cookies: Usage analysis and experience improvements

You can block cookies in your browser settings, but some features may not work properly.