Privacy Policy
Last updated: 28 October 2026
1. Who we are
Leadlyn is operated by SalesAR LTD, a company registered in England and Wales under company number 13765480, with its registered office at 124 City Road, London EC1V 2NX, United Kingdom ("SalesAR", "we", "us"). This policy explains what personal data we process in connection with Leadlyn (the "Service"), why, and what rights you have.
SalesAR is the controller of the personal data described here. Contact: support@leadlyn.com
This policy covers two groups of people:
- Customers: the people who register for the Service and use it on behalf of their organization (section 2).
- Authors of public posts: people whose public posts or job listings the Service collects because they match a customer's search (section 3).
2. Customers
What we collect.
- Account data: your name, email address, password (stored only in hashed form by our authentication provider), your organization's name, your role in it, your language and time zone.
- Project data: the projects you create, the phrases, sources, countries, industries and conditions you set, your lead decisions, stages, notes, tasks and assignments.
- Payment data: when you subscribe, payment is handled by Stripe. Stripe collects your card details; we receive only the card brand, the last four digits, the expiry date, your billing name and email, and the history of payments and subscriptions.
- Integration data: if you connect Telegram, Slack or Google Sheets, the identifiers needed to deliver leads there, such as a chat or channel id or a spreadsheet id.
- Usage data: records of what happens in your account (for example sign ins, launched searches, changed settings), technical logs such as IP address and browser type, and the support messages you send us.
- Cookies: only the cookies the Service needs to work: to keep you signed in, to remember your "keep me signed in" choice and to record which days you were active. We do not use advertising cookies.
Why we use it, and our legal basis.
- To provide the Service: your account, your projects, finding and showing leads, delivering them to your integrations, and payments (performance of a contract).
- To send service emails: account, security, trial, payment and receipt messages (performance of a contract).
- To keep the Service secure, prevent abuse and fix problems (legitimate interests).
- To improve the Service, for example by measuring which phrases and sources produce useful leads (legitimate interests).
- To send you, after your account is closed, an occasional offer to come back. Every such email has a link to unsubscribe, and once you unsubscribe we send no more (legitimate interests).
- To keep accounting and tax records (legal obligation).
3. Authors of public posts
The Service helps businesses find people and companies who have publicly asked for a product or service. To do that it collects public posts and job listings from LinkedIn, X, Upwork, Reddit and Threads that match a customer's phrases. For such a post we may process the author's name, headline, profile link, company, country and the text of the post, and an automated judgement of whether the post asks for what the customer sells.
Our legal basis is legitimate interests: connecting businesses (B2B) with people who have publicly expressed a business need. We process only what the author made public, we show it only to the customer whose search found it, and we keep it no longer than section 6 allows. We have weighed this interest against the rights of the authors and consider that people who publish a business request in public can reasonably expect businesses to see and answer it.
Your choices. If you are the author of a post that the Service collected, you can at any time ask us to delete it or object to its processing by writing to support@leadlyn.com with a link to the post or your profile. We will delete it within 30 days.
4. Who we share it with
We use these service providers (processors), who process data on our behalf under contract:
- Supabase: database, authentication and hosting of application data.
- Vercel: hosting of the web application.
- Fly.io: hosting of the background service that collects and processes posts.
- Stripe: payment processing and subscription billing. Stripe is the payment processor for all payments.
- Anthropic: AI analysis of collected posts to judge whether they are relevant leads.
- Apify: collection of public posts from the platforms we monitor.
- Resend: delivery of our emails.
- Google, Telegram and Slack: only if a customer connects them, to deliver leads where the customer asked.
We do not sell personal data. We may disclose data if the law requires it, or to a buyer or successor if our business is sold or reorganised.
5. Transfers outside the UK and the EU
Some of our providers process data outside the United Kingdom and the European Economic Area, including in the United States. Where this happens we rely on adequacy decisions where they exist, and otherwise on the standard contractual clauses approved for such transfers (the EU standard contractual clauses and the UK International Data Transfer Addendum).
6. How long we keep it
- Customer contact and payment history (name, email, company, and the record of payments): 6 years after the account is closed, for accounting and for the occasional offer to come back described in section 2.
- Projects, phrases, settings and the leads of an account: deleted after 12 months without activity in the account. The account and the contact details stay, as above.
- Leads in general: no longer than 24 months from the date they were found.
- Technical logs: 90 days.
- On request: we delete your data within 30 days of your request, except what the law requires us to keep.
7. Your rights
Under the UK GDPR and the EU GDPR you have the right to access your personal data, to correct it, to have it deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where we rely on consent. You can object at any time to processing based on legitimate interests and to any marketing. To use any of these rights, write to support@leadlyn.com. We will answer within one month.
You also have the right to complain to a data protection authority. In the United Kingdom this is the Information Commissioner's Office (ico.org.uk); in the EU, the authority of the country where you live.
8. Security
We protect data with encryption in transit, access controls that limit each organization to its own data, and restricted access for our staff. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.
9. Children
The Service is for businesses and is not meant for anyone under 18.
10. Changes to this policy
We may update this policy. We will tell customers about important changes by email or in the Service before they take effect.
11. Contact
SalesAR LTD, 124 City Road, London EC1V 2NX, United Kingdom
support@leadlyn.com