Privacy Policy
1. Who we are
Lead Capture AI ("we", "us") provides AI-powered lead-capture software to businesses. This policy explains how we handle personal data. For privacy questions, contact us at the email address on our site.
2. The data we process
For our customers (the businesses who sign up), we process account details such as name, work email, company, and billing information. For the enquirers our customers capture through our tools, we process the contact and enquiry details those individuals submit (for example name, email, phone and message).
3. Our role
For customer account data we act as a data controller. For the lead/enquiry data captured on behalf of a customer, that customer is the controller and we act as their data processor, handling the data only on their instructions.
4. How we use data
We use data to provide and secure the service, process payments, communicate with customers, and comply with our legal obligations. We do not sell personal data, and we do not use enquirer data for our own marketing.
5. Payments
Card payments are processed by Stripe. We do not store full card details on our servers; Stripe handles card data under its own terms and security standards.
6. Sub-processors
We rely on trusted providers to run the service, which may include hosting, database, email delivery and payment processing partners. Each is bound by appropriate data-protection terms.
7. Cookies and analytics
Our own website sets only the cookies needed to make it work — for example keeping you signed in to your account. We do not use advertising or tracking cookies.
We use Google Analytics to understand how our marketing pages are found and used, and we ask before we do. The first time you visit, a small bar offers Accept or Decline. Nothing is stored on your device until you choose Accept. If you decline, or simply ignore it, Google Analytics runs in a cookieless mode: no analytics cookies or identifiers are placed on your device, you are not tracked between visits, and the measurements we receive are aggregated and cannot identify you. If you accept, Google sets its standard analytics cookies (_ga and _ga_*, which expire after two years) so it can tell a returning visitor from a new one. We never enable advertising or personalisation storage on this property, and IP addresses are anonymised. Google acts as our processor for this data. Your choice is remembered in your browser and you can change it at any time using the button below.
Analytics is not run on the signed-in application, on our customers’ embedded enquiry forms, or on booking and proposal pages belonging to our customers. If you would prefer not to be measured at all, browser “do not track” settings, private browsing or any standard content blocker will prevent it.
8. Retention
We keep personal data for as long as an account is active and as needed for legal, accounting or security purposes, after which it is deleted or anonymised.
9. Your rights
Under UK GDPR you have rights to access, correct, delete, restrict and port your personal data, and to object to certain processing. If your data was captured by one of our customers, please contact that business; we will assist them as their processor. Otherwise contact us and we will respond within the timeframes required by law.
10. Security
We use encryption in transit, access controls and other measures to protect data. No system is perfectly secure, but we work to safeguard the information entrusted to us.
11. International transfers
Where data is transferred outside the UK/EEA, we use appropriate safeguards such as standard contractual clauses.
12. Changes
We may update this policy and will post the revised version here with a new date.
Questions about this policy? Get in touch via the contact form on our homepage.