Privacy Policy
Last updated: June 1, 2025
Plain English summary: We collect only what we need to run the product. We never sell your data. Your lead analyses and ICP profile are private to your account. You can delete everything at any time.
1. Who we are
LeadScry ("we", "our", "us") is operated by OIBL Group. If you have any questions about this policy, contact us at leadscry@gmail.com.
2. What data we collect
We collect the following categories of data:
- →Account data: email address and password (hashed) when you sign up
- →Profile data: full name, offer statement, ICP description, and other fields you voluntarily provide
- →Lead data: URLs, names, and AI analysis results you generate through the product
- →Usage data: pages visited, features used, and timestamps — collected via server logs and analytics
- →Technical data: IP address, browser type, device type, and operating system
3. How we use your data
- →To provide, operate, and improve the LeadScry service
- →To personalise AI analysis results using your ICP profile
- →To send product-related communications (you can opt out at any time)
- →To detect and prevent fraud, abuse, and security incidents
- →To comply with legal obligations
4. Data sharing
We do not sell your data. We share data only with:
- →Supabase (database and authentication infrastructure) — data stored in EU region
- →Groq (AI model provider) — lead input data is sent to process analysis requests
- →Vercel (hosting) — your requests pass through Vercel's infrastructure
- →Serper.dev (Google search API) — lead names/URLs are used to run targeted searches
All sub-processors are bound by data processing agreements and GDPR-compliant terms where applicable.
5. Data retention
We retain your account and lead data for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days. You can request deletion at any time by contacting leadscry@gmail.com.
6. Your rights
Under GDPR and applicable data protection laws, you have the right to:
- →Access the personal data we hold about you
- →Correct inaccurate data
- →Request deletion of your data ("right to be forgotten")
- →Object to or restrict processing
- →Data portability — receive your data in a machine-readable format
- →Withdraw consent at any time
To exercise any of these rights, email leadscry@gmail.com. We will respond within 30 days.
7. Cookies
We use essential cookies for authentication and session management. We use analytics cookies (anonymised) to understand how the product is used. See our Cookie Policy for details.
8. Security
We use industry-standard security measures: encrypted connections (TLS), hashed passwords (bcrypt via Supabase Auth), row-level security on all database tables, and access controls. No system is 100% secure — if you discover a vulnerability, please report it to leadscry@gmail.com.
9. Changes to this policy
We may update this policy from time to time. We will notify you of material changes by email or via an in-app notice. Continued use of LeadScry after the effective date constitutes acceptance of the updated policy.
10. Contact
For any privacy-related questions: leadscry@gmail.com
Note: This policy is provided as a framework and should be reviewed by a qualified legal professional before deployment.