01Overview
This Privacy Policy explains how Leadiy collects, uses, discloses, and protects personal data when you visit our website, create an account, use the Leadiy platform, configure searches, enrich and score businesses, generate reports, use Leadiy AI, connect an email account, run campaigns, contact support, or interact with our product, sales, and marketing activities.
Leadiy is built to discover businesses, enrich them with contact details, score opportunities, and power outreach. Because of that, this policy distinguishes between account and customer-relationship data, Customer Data configured by users, and Business Source Data collected from public and third-party sources.
02Who we are and our privacy roles
Leadiy is provided by Leadiy (Pvt) Ltd. For account, billing, website, sales, marketing, support, security, and operational data, we generally act as a controller. For Customer Data processed on behalf of a customer through the Leadiy platform, we generally act as a processor or service provider under the customer's instructions.
Where our Data Processing Agreement applies, it governs our processor obligations for Customer Data.
03Data we collect
We may collect the following categories of information:
- Account data: name, email address, phone number, organisation, role, login details, user permissions, workspace details, and account settings.
- Billing and commercial data: plan, subscription, invoices, payment status, billing contact, purchase history, tax details, Order Forms, and customer communications. Card details are handled by our payment provider and are not stored by Leadiy.
- Service configuration data: searches, categories, locations, keywords, competitors, brands, source selections, saved businesses, lead lists, filters, alerts, schedules, reports, exports, prompts, sender profiles, and notes.
- Business Source Data: public business listings, categories, addresses, ratings, reviews, websites, public contact details, public profile names or handles, source URLs, timestamps, media metadata, and other online business content relevant to configured searches.
- Leadiy AI data: prompts, questions, summaries, generated outputs, classification results, sentiment and intent labels, opportunity scores, topics, translations, and report narratives.
- Email and campaign data: the email account you connect over SMTP (connection settings and encrypted credentials), sender profile, message content, recipient lists you build, send status, and engagement events such as opens, clicks, and replies where available.
- Usage and device data: pages visited, product actions, log data, browser type, device identifiers, IP address, approximate location, session data, feature usage, error logs, and security events.
- Communications and support data: emails, support chats, feedback, feature requests, survey responses, meeting notes, call details, and product-update interactions.
- Cookies and similar technologies: information collected through cookies, pixels, local storage, analytics tags, and similar tools.
04Business & public source data
Leadiy is designed to help customers discover and understand businesses. We may collect and analyse Business Source Data from public and third-party sources depending on the search configuration, plan, source availability, and applicable platform rules.
Business Source Data may contain personal data where a business is operated by an individual, where public platforms display names, handles, reviews, or public contact details, or where a verified business email belongs to a named person. We process this data to provide discovery, enrichment, opportunity scoring, competitor and market analysis, reports, filtering, deduplication, translation, and AI-assisted analysis.
Customers are responsible for ensuring that their search configurations, enrichment, reports, exports, retention, and downstream use — including any outreach — comply with applicable law and their own privacy obligations.
05How we use information
We may use information to:
- provide, operate, secure, monitor, and improve Leadiy;
- create and manage accounts, subscriptions, invoices, support requests, and customer relationships;
- run configured searches, enrichment, scoring, dashboards, alerts, exports, and reports;
- analyse businesses, opportunities, sentiment, intent, competitors, markets, and public-source signals;
- operate Leadiy AI and generate summaries, classifications, scores, recommendations, translations, and draft outreach;
- send campaigns from your connected email account and report on their delivery and engagement;
- communicate about product updates, support, billing, onboarding, security, and administrative matters;
- personalise the product experience, documentation, training, and customer success;
- detect, prevent, and respond to fraud, abuse, security incidents, unlawful use, and policy violations;
- comply with legal obligations and enforce agreements; and
- develop aggregated, de-identified, or statistical insights that do not identify a customer or individual.
06Legal bases and customer responsibility
Where applicable law requires a legal basis, we rely on bases such as performance of a contract, legitimate interests, consent, compliance with legal obligations, and protection of rights, safety, and security.
For Customer Data and customer-configured discovery and outreach, the customer is responsible for identifying the appropriate legal basis, providing any required notices, obtaining required consents, respecting opt-outs, and ensuring that enrichment, reports, exports, and campaigns are used lawfully.
08AI processing
Leadiy may use AI models and automated systems to discover, classify, summarise, translate, cluster, enrich, score, rank, and generate insights and draft outreach from Customer Data and Business Source Data. AI outputs may be reviewed, corrected, or refined by users.
Where Customer Data is processed through AI systems on behalf of a customer, the Data Processing Agreement and applicable Order Form may include additional terms. We apply reasonable safeguards to protect Customer Data used in AI-assisted features, but customers must avoid submitting data they are not authorised to process.
09Email connection and campaign data
To send campaigns, you connect your own email account over SMTP. We store the connection settings and credentials encrypted at rest and use them only to send the campaigns you configure. Campaigns are sent from your address; Leadiy is not the sender.
We process recipient lists you build and, where available, delivery and engagement events (such as opens, clicks, and replies) to report on campaign performance. You are responsible for the lawful basis to contact recipients, for honouring unsubscribe requests, and for compliance with anti-spam and marketing laws as described in our Terms.
11Retention
We retain personal data for as long as necessary to provide the Service, maintain accounts, comply with legal obligations, resolve disputes, enforce agreements, support security, and meet legitimate business needs.
Customer Data retention may depend on the applicable plan, Order Form, account settings, export history, source availability, backup cycles, legal requirements, and DPA obligations. Business Source Data may also be affected by source deletion, platform restrictions, data-refresh schedules, and search-configuration changes.
12Security
We use reasonable technical and organisational measures designed to protect information from unauthorised access, loss, misuse, alteration, and disclosure. Measures may include access controls, authentication, encryption in transit, encryption of sensitive stored credentials, logging, monitoring, backups, least-privilege access, staff confidentiality obligations, and vendor review.
No system is perfectly secure. You are responsible for protecting account credentials, configuring user access carefully, and notifying us promptly at support@leadiy.com of suspected unauthorised access.
13International transfers
Leadiy may use cloud infrastructure, support providers, AI providers, analytics providers, and other vendors located in Sri Lanka or other countries. Where required, we use appropriate safeguards for cross-border processing and transfers, such as standard contractual clauses or equivalent mechanisms.
14Your rights and choices
Depending on applicable law and your relationship with us, you may have rights to request access, correction, deletion, restriction, objection, or portability, to withdraw consent, or to complain to a regulator.
If your request relates to data controlled by a Leadiy customer (for example, a business or contact surfaced in that customer's account), we may direct you to that customer or handle the request under the customer's instructions. To exercise rights, contact us at privacy@leadiy.com.
15Marketing communications
We may send you product, onboarding, and marketing messages about Leadiy. You can opt out of marketing at any time using the unsubscribe link or by contacting us. We will still send essential service, billing, and security messages related to your account.
16Children
Leadiy is intended for business and professional use. It is not directed to children and should not be used by children to create accounts.
17Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new Last updated date. If changes are material, we may provide additional notice.
18Contact
For privacy questions or requests, contact:
Leadiy (Pvt) Ltd
303, New Kandy Road, Kothalawala, Kaduwela, Greater Colombo, Sri Lanka
Email: privacy@leadiy.com
Questions about this document?
Reach our team at support@leadiy.com. See also our Terms, Privacy Policy, Data Processing Agreement and Refund Policy.