Legal · Privacy

Privacy Policy

Last updated: April 10, 2026

Leadify (the «Service») is a platform that lets you define areas on a map and obtain business and contact data derived from public sources, according to each search configuration.

This Privacy Policy describes how we process personal data when we act as a data controller (e.g., account, billing, and support). If you use the Service to extract or process third-party data, you may be responsible for that processing vis-à-vis data subjects and regulators; certain vendors may process data on your behalf as processors, as described in our Terms and in those vendors’ agreements.

If you do not agree with this policy, do not use the Website or the Service.

1. Controller and contact

The controller of personal data collected through the Website and the Service is the entity operating Leadify («we»). To exercise your rights or ask privacy questions, contact us via the channels published on the Website (e.g., support email or contact form).

2. Scope

This policy applies to processing we carry out as a controller: website visitors, account registration, billing, commercial communications (where applicable), and usage data tied to your account.

It does not replace third-party policies (Clerk, Mercado Pago, data extraction vendor, Mapbox, hosting providers). Those parties process data under their own terms.

3. Data we collect

3.1. Data you provide: account and authentication identifiers (e.g., via Clerk: email, name, profile image if you add one), billing or payment data handled by Mercado Pago (we do not store full card numbers on our servers), and the content of messages you send us (support).

3.2. Data generated when using the Service: search configuration (areas, filters, limits), scan history, credit consumption, requested exports, technical logs (IP address, device type, browser, timestamps, session identifiers), and security logs.

3.3. Search results («Leads»): information about businesses or organizations (phones, addresses, websites, ratings, etc.) largely comes from public sources or data vendors (e.g., automated extraction jobs against public sources). Such information may include personal data about third parties. You choose which searches to run and for what purpose; you must ensure lawful bases and comply with applicable law (data protection, marketing, do-not-call lists, etc.).

4. Purposes and legal bases

Providing the Service, account and credit management (contract / pre-contract).
Payment and subscription processing via Mercado Pago (contract and legal tax obligations where applicable).
Security, fraud prevention, and Service improvement (legitimate interest).
Legal compliance (e.g., lawful requests from authorities).
Commercial communications, where we send them and as required by law, based on consent or legitimate interest as applicable.

5. Processors and transfers

We use vendors that may access data on our behalf, including: Clerk (authentication), Mercado Pago (payments), data extraction vendor (running extractions per your configuration), mapping/geo providers (e.g., Mapbox), hosting, databases, transactional email (e.g., Resend), and analytics tools if implemented.

Some vendors may be located outside your country. Where required, we use appropriate safeguards (standard contractual clauses, adequacy decisions, or other mechanisms provided by law).

6. Retention

We retain data as long as necessary for the purposes described and to meet legal obligations, resolve disputes, and enforce agreements. Account and billing records may be kept longer if the law requires. You may request account deletion; some data may remain anonymized or blocked for legal reasons.

Search results stored in your account are kept while your account exists and according to Service settings; you may delete them where the product allows.

7. Security

We apply reasonable technical and organizational measures to protect data. No system is 100% secure; you must protect your credentials and notify us of any unauthorized use.

8. Your rights

Depending on your jurisdiction, you may have the right to access, rectify, erase, object, restrict processing, data portability, and withdraw consent where processing is consent-based. Contact us to exercise these rights. If you are in the EEA or similar regimes, you may also lodge a complaint with a supervisory authority.

9. Cookies and similar technologies

The Website and third-party integrations may use cookies or local storage needed for operation (session, preferences) or, if implemented, analytics. You can configure your browser to refuse cookies, though some features may not work.

10. Minors

The Service is not directed at children under 16 (or the minimum age in your jurisdiction). If you believe a child has provided us data, contact us for deletion.

11. Changes

We may update this Policy. We will post the revised version on the Website with a new «Last updated» date. Continued use after changes constitutes acceptance of the updated policy unless the law requires additional consent.