Privacy Policy

Who this policy covers

This Privacy Policy explains how LeadReef, LLC, a Delaware limited liability company ("LeadReef," "we," "us"), collects, uses, and shares personal information. It covers two distinct groups: users — people who create accounts and use the LeadReef service — and business contacts — owners and representatives of U.S. businesses whose publicly available information appears in the service ("Lead Data").

If you received an email from a LeadReef user, that email was sent by the user, not by LeadReef — please contact the sender directly, and see the "Business owners: removal" section below for how to remove your business from our system.

What we collect from users

Account data: name, email address, password (stored hashed), and, if you sign in with Google, the profile information Google shares with us. Billing data is processed by Stripe, our payment processor — we receive subscription status and limited card metadata (such as the last four digits) and never store full card numbers.

We also collect usage data (features used, searches run, campaigns created, log data, IP address, browser and device information) and content you submit (campaign settings, prompts, edits to drafts, support communications).

How we use your data

We use user data to provide and secure the service, process payments, provide support, send service communications and — with your consent where required — marketing communications, prevent fraud and abuse, and improve the service.

For users in the EEA, UK, or Switzerland, our legal bases are: performance of our contract with you (account, billing, core features); legitimate interests (security, fraud prevention, product analytics, service communications); consent (marketing emails and non-essential cookies); and legal obligation (tax and accounting records).

Business data in the service (Lead Data)

The service compiles information about U.S. businesses from publicly available and licensed sources, including business directories and mapping services, the businesses’ own public websites, public web archives, public social media pages, and public advertising transparency libraries.

Lead Data may include: business name, address, phone number, website URL, publicly listed business email addresses, information about the business’s website (performance, technology, screenshots of public pages), review counts and recency, and derived analytical signals such as an automated "opportunity" assessment. We do not collect sensitive personal information, consumer data, private communications, or data from behind logins or paywalls — Lead Data concerns businesses and business activity, not individuals’ private lives.

Our users — not LeadReef — decide whether to contact any business, and users act as independent controllers of any Lead Data they export or act upon. Opportunity scores are probabilistic research estimates about a business’s website and online activity; they are not used to make decisions producing legal or similarly significant effects on any individual.

Cookies & analytics

We use strictly necessary cookies for authentication and session management; these are always active. If we use analytics or other non-essential cookies, users in jurisdictions that require it will be shown a consent banner and can withdraw consent at any time.

Data retention

We retain account data for as long as your account is active and for a reasonable period afterward as needed for legal, tax, and security purposes. Lead Data is retained while it remains relevant to the service and is refreshed or removed as sources change. You may request deletion of your account data at any time.

Sharing & third parties

We do not sell personal information. We share information only with: service providers acting on our instructions — cloud hosting and storage providers, our payment processor (Stripe), transactional email providers, AI model providers (draft generation and analysis), data and web-infrastructure providers used to compile Lead Data, and analytics providers; our users, who see Lead Data as part of the service; legal and safety recipients where required by law or to protect rights, safety, and the integrity of the service; and successors in a merger, acquisition, financing, or sale of assets, subject to this policy. A current list of sub-processors is available on request at [email protected].

We are a U.S. company and process data in the United States. If you use the service from the EEA, UK, or Switzerland, your account data is transferred to the U.S.; where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses with our sub-processors.

Business owners: removal (opt-out)

If your business appears in LeadReef and you want it removed, email [email protected] with your business name and website or phone number. We will remove your business from our database and add it to our suppression list so it is not re-added by future scans. We honor removal requests regardless of where you are located, normally within 10 business days.

Your rights

Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. EEA, UK, and Swiss users additionally have the right to lodge a complaint with a supervisory authority.

California residents have rights under the CCPA/CPRA, including to know, delete, correct, and opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as defined by the CPRA, and we will not discriminate against you for exercising your rights. To exercise any right, email [email protected]; we may need to verify your identity before acting on a request.

Security, children & contact

We use industry-standard measures to protect information, including encryption in transit, access controls, and isolation of production systems. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by law.

The service is for business use by adults; we do not knowingly collect information from anyone under 18. We may update this policy from time to time — material changes will be announced via the service or email before they take effect, and the "Last updated" date shows the current version. Contact for privacy requests: LeadReef, LLC — [email protected].