Privacy Policy

Effective Date: January 15, 2025 Last Updated: January 15, 2025

1. Introduction

Welcome to SearchLeadsCRM (“Company,” “we,” “us,” or “our”). We operate the website https://searchleadscrm.com and the associated AI-powered customer relationship management and lead generation application (collectively, the “Service”).

We respect your privacy and are committed to protecting the personal information of our users (“User” or “you”) and the data of your contacts (“Leads”) that you upload to our Service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access our Service. This policy is drafted to comply with applicable global data protection laws and the strict requirements of the Google API Services User Data Policy.

By creating an account or using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

To provide our AI outreach and CRM functionalities, we collect data in the following categories:

2.1 Information You Provide to Us

• Account Data: When you register, we collect your full name, email address, company name, and password.

• Payment Data: If you subscribe to a paid plan, our third-party payment processors (e.g., Stripe) collect your billing address and credit card token. We do not store full credit card numbers.

• Customer Content (CRM Data): We process the data you upload to the CRM, including lists of leads, prospect email addresses, phone numbers, and the content of email templates or campaigns you create. You retain ownership of this data.

2.2 Information Collected via Google APIs (Restricted Data)

SearchLeadsCRM integrates with Google Workspace APIs to provide seamless email automation and scheduling. If you choose to connect your Google Account, we request access to specific “scopes” of data. We access this data only with your explicit consent.

• Gmail Access (Read/Send): We access your Gmail account to:

  • Send emails composed by you or our AI agent on your behalf.

  • Read incoming replies to emails sent via SearchLeadsCRM to automatically update lead status (e.g., “Replied,” “Interested”) and stop follow-up sequences.

  • Note: We do not read your personal emails that are unrelated to the outreach campaigns managed within the Service.

• Google Calendar: We may access your calendar availability to insert booking links or schedule meetings with leads.

• Google Contacts: We may access your contacts to allow you to import them into the CRM.

2.3 Information Collected Automatically

• Usage Logs: We collect information about your activity on our Service, such as the time and date of logins, features used, and interactions with the AI agent.

• Device & Connection Data: We collect data about your device, including IP address, browser type, operating system, and referral URLs.

3. How We Use Your Information

We use the collected data for specific, limited purposes:

1. To Provide the Service: Enabling the core functionality of the CRM, such as organizing leads, executing email campaigns, and generating AI-driven insights.

2. To Improve Our AI: We use aggregated usage data to refine the performance of our AI algorithms. Crucially, we do not use your specific Google Workspace data (e.g., email bodies) to train generalized AI models for other customers.

3. Customer Support: To resolve technical issues you report.

4. Security: To detect fraud, spam, and unauthorized access.

4. Google User Data Limited Use Disclosure

This section acts as a binding agreement ensuring our compliance with the Google API Services User Data Policy.

SearchLeadsCRM’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4.1 Strict Limitations on Data Use

Notwithstanding any other provision in this Privacy Policy, if you provide the App access to your Google data, the App’s use of that data will be subject to these additional restrictions:

1. No Advertising: The App will not use Google User Data for serving advertisements, including retargeting, personalized, or interest-based advertising. We do not sell your data to advertising platforms.

2. No Human Access: We do not allow humans to read your Google User Data (e.g., the content of your emails or calendar events), unless:

   • We have obtained your affirmative agreement for specific messages (e.g., for technical support where you ask us to review a specific email failure).

   • It is necessary for security purposes (e.g., investigating abuse or a data breach).

   • It is necessary to comply with applicable laws.

   • The use is limited to internal operations and the data (including derivations) have been aggregated and anonymized.

3. Prohibited Transfers: We will not transfer your Google User Data to third parties unless:

   • It is necessary to provide or improve the user-facing features (e.g., transferring data to our cloud hosting provider, AWS/Google Cloud, to execute the code).

   • It is necessary to comply with applicable laws.

   • It is part of a merger, acquisition, or sale of assets of the developer.

4. No Creditworthiness Checks: We will not use this data to determine credit-worthiness or for lending purposes.

4.2 AI Processing of Google Data

Our “AI Outreach Agent” processes your data to generate suggested email copy and responses. This processing happens programmatically. Your private email data is not used to build a global knowledge base that would expose your confidential information to other users.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners.

We may share your information with third-party service providers who help us operate our business and the Site or administer activities on our behalf, such as sending out newsletters or surveys, provided that you have given us your permission.

• Sub-processors: We use trusted third-party vendors (e.g., OpenAI for API processing, AWS for hosting) who are contractually bound to protect your data.

6. Data Retention

We retain your personal information and Google User Data only for as long as your account is active or as needed to provide you the Service.

• Upon Termination: If you delete your account, we will delete your CRM data and OAuth tokens from our production servers within 30 days. Backup copies may be retained for a limited time as part of our disaster recovery protocols, but will remain encrypted and inaccessible.

7. Security

We implement industry-standard security measures to protect your data, including:

• Encryption: Data in transit is encrypted via TLS 1.2+. Data at rest in our databases is encrypted using AES-256.

• Access Control: Access to production servers is restricted to authorized engineers via VPN and Multi-Factor Authentication (MFA).

• Regular Audits: We conduct periodic vulnerability scans (including OWASP ZAP scans) to ensure the integrity of our systems.

8. International Data Transfers

If you are accessing the Service from outside the United States or Canada, please be aware that your information may be transferred to, stored, and processed in the United States or Canada where our servers are located. By using the Service, you consent to any such transfer of information outside of your country.

9. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have rights regarding your data:

• Access & Portability: You can request a copy of your data in a structured format.

• Deletion: You can request the deletion of your personal data (“Right to be Forgotten”).

• Correction: You can ask us to correct inaccurate data. To exercise these rights, contact us at the email provided below.

10. Contact Us

If you have any questions about this Privacy Policy or our compliance with Google’s Limited Use Policy, please contact us:

• Email: [email protected]