Privacy Policy
Last updated: 21 August 2026
This policy explains what personal data GetLeads collects, why, and what you can do about it. It covers the getleads.io website, the GetLeads app at app.getleads.io, the GetLeads API and MCP server, and the GetLeads contact database.
For anything in this policy, including any request about your own data, email support@getleads.io.
If you are in our contact database and want your record removed, email support@getleads.io and we will remove it. You do not need an account, and you do not need to explain why. Section 7 has the detail.
Two kinds of personal data
GetLeads handles personal data in two distinct roles, and the difference matters for your rights.
Data about our customers and visitors. If you visit getleads.io, sign up, or use the product, we are the controller of that data. Sections 1–4 cover it.
Data in the contact database. GetLeads maintains a database of business contact records — names, job titles, employers, work email addresses, business phone numbers and public profile links — which customers search and export. We are a controller of that database, and our customers become controllers of whatever they take from it and do with it. Section 5 covers it. If you are in the database and want out, section 7 tells you how.
1. Data we collect about customers and visitors
When you visit the website. Pages viewed, referring page, approximate location derived from IP address, device and browser type, and how you move through the site.
When you sign up or use the product. Your name, work email address, phone number, company, and the account and billing details you provide. Records of the searches, exports, enrichments and API calls made from your account — we need these to run fair-use limits, bill correctly, and support you.
When you contact us. Whatever you put in an email, a support ticket, a booked call, or a message in our community Slack.
When you pay. Payments are processed by our payment provider. We receive the billing details and subscription status; we do not receive or store your full card number.
2. Why we use it
- To provide, operate and secure the product, and to authenticate your account.
- To bill you and collect payment.
- To provide support and answer what you send us.
- To understand how the site and product are used, so we can improve them.
- To send you service messages about your account, and — where you have subscribed or where we are otherwise permitted — marketing about GetLeads. Every marketing email carries an unsubscribe link.
- To contact you about your account on the phone number you gave us, including a message from our founder on WhatsApp if that number is registered there. Tell us to stop and we will not message you there again.
- To detect abuse, enforce our Fair Usage Policy, and comply with law.
We rely on the performance of our contract with you, our legitimate interests in operating and securing the business, your consent where we ask for it, and compliance with our legal obligations.
3. Cookies, analytics and website visitor identification
Product analytics. We use third-party analytics tools to understand how the site and app are used — pages, clicks, funnels, and session recording on some pages. These use cookies or equivalent local storage. Data is generally processed in the United States.
Advertising and measurement. Some pages may load advertising or measurement technologies supplied by third parties. These may set their own cookies.
Website visitor identification. We use a first-party script on getleads.io that works with a visitor-identification service to identify the companies and, where a match is available, the business contacts associated with visits to our site. It records the pages visited and technical signals from the request, and matches them against business records. We use this to understand which businesses are interested in GetLeads and to follow up with them commercially. Identification is carried out only for visitors located in the United States. To object, or to ask what we hold about you, email support@getleads.io.
Embedded content and fonts. Some pages embed content from third-party platforms and load web fonts from a third-party provider. These providers receive your IP address and may set their own cookies. Booking links go to a third-party scheduling provider.
Hosting. The website is served through a third-party cloud provider and content delivery network, which process request logs including IP addresses.
You can block or delete cookies in your browser. Blocking them may break parts of the app.
4. Who we disclose customer and visitor data to
We disclose customer and visitor data to service providers that process it on our behalf — including the visitor-identification service described in section 3. They fall into these categories:
| Category | What for |
|---|---|
| Cloud hosting and infrastructure | Running the website, app and API |
| Payment processing | Subscription billing and payment |
| Product analytics and session recording | Understanding how the site and app are used |
| Email delivery | Product, service and marketing email |
| Customer relationship management | Managing our sales and customer records |
| Community and support tooling | Our customer community and support channels |
| Business productivity and email | Internal email, documents and collaboration |
| Visitor identification | Identifying businesses visiting our site (see section 3) |
| Professional advisers | Legal, accounting and audit |
Our list of service providers changes as our tooling changes. If you have a question about a specific provider, email support@getleads.io.
We also disclose data where we are legally required to, or where we reasonably believe disclosure is necessary to protect our rights or the safety of others, and to a buyer or successor if the business is sold — in which case this policy travels with it.
5. The contact database
What is in it. Business contact records: name, job title, employer, work email address, business phone number, public profile links, and firmographic data about the employer such as industry, size, location and technologies used. It is directed at people in their professional capacity. We do not seek out data about people's private lives, and we do not knowingly collect sensitive categories of personal information — such as government identifiers, financial account numbers, precise geolocation, biometric or genetic data, health data, immigration status, union membership, sexual orientation, or reproductive health data.
Where it comes from. Publicly available online sources; licensed data from third-party data suppliers; and data verified through our own validation processes.
Why we process it. We process these records on the basis of our legitimate interests, and those of our customers, in business-to-business communication. You can object at any time using the routes in section 7.
Disclosure to customers. Customers access records under a search-and-enrichment licence, not ownership. We do not use the database to serve or target online advertising. Section 7 explains how to have your record removed.
What customers may do with it. Customers may resell data, but must first contact support@getleads.io so we can ensure it is done compliantly, including passing suppression lists on to them. Our Fair Usage Policy also requires customers to comply with the marketing and data protection law that applies to them. Once a customer exports a record, they are the controller of it and responsible for how they use it. We do not control, and are not responsible for, what a customer does with an exported record after export.
6. International transfers and retention
GetLeads is used globally and our providers are largely in the United States, so personal data is transferred there and to other countries. Where we transfer personal data out of the UK or EEA, we apply the safeguards required by applicable law.
We keep account and billing data for as long as you are a customer and afterwards for as long as we need it for legal, tax and accounting purposes. We keep usage and server logs for a limited operational period. Contact database records are kept for as long as they remain relevant and necessary for the purpose described in section 5, and are refreshed on an ongoing cycle. Where we have suppressed a record at someone's request, we retain the limited information needed to keep that record suppressed when the database is refreshed.
7. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent. We will not discriminate against you for exercising any of these rights.
To exercise any of them, including removal from the contact database, email support@getleads.io. Tell us enough to find the record — the name and work email address on it is usually enough. We will respond within the time the applicable law requires. We do not charge for this, except where a request is manifestly unfounded or excessive and the law allows us to charge or decline. We may need to verify your identity before acting, and we may decline a request where the law permits or requires us to. Removal adds you to a suppression list designed to prevent the record being reintroduced when the database is refreshed.
You may use an authorised agent to make a request on your behalf where the law provides for that. We may ask the agent for proof of authorisation.
If you are unhappy with how we handle a request, you can complain to your data protection authority. In the UK that is the Information Commissioner's Office; in the EEA it is your national supervisory authority.
8. Security
We maintain an information security programme with administrative, technical and physical safeguards appropriate to the data we hold. These include measures such as encryption of data in transit and controls on internal access. No system is perfectly secure and we do not claim otherwise. Where a security incident affects you and the law requires us to notify you or a regulator, we will.
9. Children
GetLeads is a business tool. It is not directed at anyone under 18, we do not knowingly collect data from children, and we do not knowingly hold contact records for minors. If you believe a child's data has reached us, email us and we will delete it.
10. Changes
We may update this policy as the product and the law change. The date at the top shows the current version. If we make material changes that affect customers, we will make reasonable efforts to tell you directly.
11. Contact
For any question about this policy, any request about your own data, or removal from our contact database: