Privacy Policy
Last updated: [DATE] · Operator: [COMPANY NAME, ADDRESS]
Account data
When you register an organization, we store your name, email address, and a hashed (never plain-text) password, along with your role within the organization.
Business lead data
Discovery campaigns collect publicly available business information (name, address, public phone/email, website, ratings) about third-party businesses from configured sources (e.g. Google Places). Website audits analyze the public content of a lead's website. Outreach communications and their status (sent, blocked, provider used) are recorded for compliance and audit purposes — see our Terms of Service for how these leads may be contacted.
Consent and do-not-contact
We record consent, contact-permission status, and do-not-contact requests per lead, and enforce them before any outreach is sent.
Data export and deletion
An organization admin can export all data held about a given lead, or anonymize that lead's personal contact fields, from the company detail page. [DESCRIBE ACCOUNT-LEVEL DELETION PROCESS AND RETENTION PERIOD ONCE DEFINED.]
Demo mode
When demo mode is enabled, no real email, SMS, WhatsApp, phone, or payment action is ever sent — all provider integrations are simulated and clearly marked as such in the product.
Contact
For privacy questions, contact: [PRIVACY CONTACT EMAIL].