Privacy Policy

Who we are

LeadsLockAI is operated from Toronto, Ontario, Canada. We build an AI assistant that responds to inbound leads on behalf of local service businesses (plumbers, HVAC, med spas, and similar). You can reach our privacy contact at support@leadslockai.com.

What data we collect

• Business profile information you provide during setup: company name, owner name, phone number, service area, hours, services, and pricing notes.
• Lead messages and contact details sent through the web chat widget: the lead's name, phone number, email if provided, and the text of their conversation with the AI.
• Account credentials: your email address and a hashed password. We never store the password in plain text.
• Payment metadata from Stripe: a customer ID and subscription status. We do not see or store credit card numbers, expiry dates, or CVV codes. Stripe handles all card data directly.
• Basic usage data: anonymous pageviews via Vercel Analytics, plus error logs that help us fix bugs.

Why we collect it

We collect this data for three reasons: to run the lead-response AI (the AI needs to know what your business does so it can answer leads accurately), to contact you about service issues or product changes, and to handle billing through Stripe. We do not sell your data and we do not use lead conversations to train public AI models.

Where your data lives

• Supabase (Postgres database and operator authentication) in the us-west-2 region. This is where your business profile, leads, and conversation history live.
• Stripe (United States) for subscription billing and customer records.
• Groq (United States) for the AI inference that generates replies. Lead messages are sent to Groq at the moment a reply is generated. Groq processes that content under its applicable service terms and privacy commitments.
• Vercel (global edge) for hosting the website and API.
• Email providers (currently Gmail SMTP, with Resend supported by the application) for account and lead notifications.
• Twilio processes phone numbers, calls, and messages only for phone/SMS features after those features are configured and enabled for a business.

How long we keep it

We retain account, lead, and conversation data while the account is active and afterward when reasonably needed for service operations, billing records, security, dispute handling, or legal obligations. You can request deletion at any time by emailing support@leadslockai.com.

Your rights

Depending on where you live, privacy law may give you rights to:

• Access the data we hold about you.
• Correct anything that is wrong.
• Delete your account and the associated data.

To exercise any of these rights, email support@leadslockai.com. We may need to verify the requester's identity before acting.

Cookies and tracking

We use a session cookie to keep you logged in to the dashboard. We use Vercel Analytics to count pageviews in aggregate, which does not set third-party advertising cookies. We do not run Google Ads, Meta Pixel, or any third-party advertising trackers.

Children's data

LeadsLockAI is built for businesses. We do not knowingly collect data from anyone under the age of 18. If you believe we have collected data from a minor, contact us and we will delete it.

Changes to this policy

We may update this policy as the product changes. The "Last updated" date at the top reflects the most recent change. For material changes, we may also notify account owners through the service or by email.

Contact

For privacy questions, data requests, or to report a concern, email support@leadslockai.com.