Privacy Policy

1. What we collect

Your account

• Name, email address, company name (optional) and your role (user, closer, agency or marketer).
• Your password is never stored: we keep only a one-way Argon2id hash. Your email address is stored encrypted (AES-256-GCM) with a separate lookup key.
• If you turn on two-factor sign-in, its secret is stored encrypted and your recovery codes are stored only as hashes.
• Your acceptance of these terms (date and version).
• When you sign up we email you a short code to confirm your address. Only a one-way hash of the code is stored; it expires after 15 minutes and is deleted once used. We keep the date your email was confirmed.

Payments

• Payments are processed by Whop. We never see or store your card details. We receive the payment status, amount, plan, date and your Whop account identifiers, and keep a record of each payment and of every credit movement on your account.

What you add to the platform

• Leads and their business details (business name, contact name, email, phone, website, address, notes, tags, status, follow-ups, deals).
• Email templates, sequences and the emails sent from your Gmail. If you connect Gmail, your Gmail address and app password are stored encrypted.
• Websites you generate or edit, uploaded images, service packages, bookings, support tickets and messages.
• Closers you invite (name, email, commission settings) and the deals they report.

Premium Leads (decision-makers)

• Premium Leads searches find people who run or manage companies: their name, job title, company, work email, phone and LinkedIn profile, from professional and public sources. We store the searches you run (after our AI check of the search) and the people and companies delivered to you.

Emails we send you

• Whether you opened your account emails is not tracked: our emails are plain text, without tracking pixels. We keep which tips email you are at, when it was sent, and whether you unsubscribed.

Calls

• For calls made from the dialer: caller, number called, time, duration, cost in credits and outcome. If you choose to record a call, the other person hears that the call may be recorded and the recording is stored in our private storage. Phone checks show whether a number is valid and its line type and carrier.

Security and usage logs

• Sign-in events and sessions with a hashed IP address and the browser’s user agent, used to protect accounts (lockouts, suspicious activity).
• Which page of the platform you are on while signed in (to show the team who is online), kept for at most two days.

Website visitors

• To count visits we store a random identifier in your browser (no cookie, nothing that identifies you), the pages you view, the site you came from, campaign tags in the link (utm_source, utm_campaign, ad click identifiers), your device type and your country. The country is looked up from your IP address, which is not stored.
• Our website uses the Google Ads tag to measure our ads (see the Cookie Policy).

2. Data about businesses and decision-makers

The platform helps you find businesses. Lead data comes from public sources (such as Google Maps listings and the businesses’ own websites), from searches and website checks we run, from lists you import and from lead requests our team prepares. For Premium Leads it also includes the professional contact details of people at those companies (see section 1).

You decide which leads to contact, how and why: for that use you are responsible for the data as its controller, including having a lawful basis, telling people where you got their details when the law requires it, and honouring their objections and removal requests (see the Terms). If you are a business owner or a professional and want your details removed from our platform, write to info@futureleads.app; we remove them and keep only what is needed to stop them coming back.

3. How we use it, and why (legal bases)

• To provide the service you signed up for (contract): your account, credits, leads, websites, emails, calls, team and support.
• To keep accounts and the platform secure and prevent fraud and abuse such as spam or scam calls (legitimate interest and legal obligations).
• Billing and accounting: payments, credits, refunds and tax records (contract and legal obligation).
• Improving the website and measuring our ads: anonymous visit statistics and, where required, with your consent for advertising cookies (legitimate interest or consent).
• Account emails (contract): the code that confirms your email, and important notices about payments, your plan, support replies and delivered leads.
• Tips emails (legitimate interest, or consent where the law requires it): as a registered user you receive a short plain-text email every few days showing one feature of the platform you signed up for. Every one has a one-click unsubscribe link, and you can turn them off in Settings at any time. We never send them to people who did not sign up, and we never sell or share your email.

4. Who processes data for us

We use trusted providers to run the service. They only receive what they need for their task:

• Whop: subscriptions and payments.
• Telnyx: phone numbers, calls, call recordings and phone number checks.
• OpenRouter and the AI models it routes to: generating and editing websites, and sorting search results into categories (the business details and your instructions are sent).
• Google: Gmail (when you connect it, emails are sent through your own Gmail account) and Google Ads measurement on our public website.
• Serper, Geekflare, Google PageSpeed and URLpipe: business searches and checks of public websites.
• Apify and the data sources it runs: Premium Leads searches for companies and their decision-makers.
• QuickEmailVerification: checking that email addresses of leads exist.
• Our email sending provider (SMTP): the platform’s own emails to you (confirmation codes, notices and tips emails).
• Google (YouTube Data API): checking creator program videos and channel size.
• DigitalOcean: servers, database and file storage. Cloudflare: hosting of website previews.

Some providers are located outside your country, including in the United States. Where required, transfers are protected by standard contractual clauses or equivalent safeguards.

5. How long we keep it

• Account, leads and content: while your account is active. When an account is closed, its data is kept only as long as needed for legal, accounting and dispute purposes, then deleted or anonymized on request.
• Payment and credit records: as long as accounting and tax laws require.
• Who is online right now: two days. Anonymous visit statistics: kept to compare traffic over time.
• Call recordings and sign-in logs: as long as needed for the purposes above, unless you ask us to delete them sooner.
• Email confirmation codes: deleted when used, and unusable after 15 minutes. Your unsubscribe choice is kept so we keep respecting it.

6. Security

Connections use HTTPS. Passwords are hashed with Argon2id; secrets such as API keys, Gmail app passwords and two-factor secrets are encrypted with AES-256-GCM. Sessions expire automatically, failed sign-ins lock the account for a while, two-factor sign-in is available for every account, every user’s data is kept separate, and access to provider prices, payments and settings is limited to our team. No system is perfectly secure: if you suspect a problem, contact info@futureleads.app.

7. Your rights

Depending on where you live (for example under the GDPR in Europe or the CCPA in California), you can ask to access, correct, export or delete your personal data, object to or restrict its use, and withdraw consent at any time. Write to info@futureleads.app from your account’s email address; we answer within 30 days. You can also complain to your local data protection authority.

We do not sell or share personal data for cross-context behavioral advertising, and we do not make decisions with legal effects based only on automated processing.

8. Children

The service is for businesses and adults. It is not intended for anyone under 18, and we do not knowingly collect their data.

9. Changes and contact

We may update this policy when the service changes. The date at the top shows the latest version; important changes are announced in the platform or by email. Questions: info@futureleads.app.