Privacy Policy

Information we collect

• Account information — the email address you sign up with. Your password is handled by our authentication provider and stored only in hashed form; we never see or store it in plain text.
• Your activity — the searches you run (keyword and location) and the results returned, saved to your account so you can revisit them.
• Analytics — privacy-first, cookieless product analytics (PostHog) such as pages viewed, features used, and general device/browser type. It’s on by default to help us improve, and you can opt out anytime (see below).
• How you found us — the first page you landed on, the site that referred you (its domain only, never the full address), and any campaign tags in the link. This is kept in your browser’s storage and is sent to us only if you create an account — so we can tell which of our articles are actually useful. Signing in with Google leaves the site, so on that path alone the same value is carried across the redirect in a short-lived first-party cookie (lm_ft) and dropped once you are signed in. Opting out of analytics disables it too, and nothing is shared with anyone else.

How we use your information

• Authenticate you and keep you signed in.
• Operate the product — run searches, store and enrich results, and show your history.
• Maintain security and prevent abuse.
• Improve the product, using analytics only where you’ve consented.

We do not sell your personal data.

About the business data we return

The leads we return — business names, addresses, websites, phone numbers, emails, owner names, and related details — are compiled from publicly available information, including public business listings (such as Google Maps), business websites, and public records, together with third-party data and verification providers. We do not access private or password-protected information.

Business information changes often; see “Data accuracy” in our Terms of Service.

How we store and protect your data

Your account and search data are stored in our database (Supabase, PostgreSQL), and the application is hosted on Vercel. All data is encrypted in transit over HTTPS, and passwords are hashed by our authentication provider. We limit access to your data to what’s needed to operate the service.

Cookies, analytics, and your choice

• Essential — we use browser storage to keep you signed in. The product can’t function without it.
• Analytics — we run privacy-first, cookieless product analytics (PostHog) by default to understand usage and improve LeadMarina.
• How you found us — a single record of the first page you landed on and where you came from, held in your browser’s storage — plus, only when you sign in with Google, a short-lived first-party cookie (lm_ft) that carries it across that redirect. It leaves your browser only if you create an account.
• We do not use advertising or cross-site tracking cookies, and we don’t sell your data.

You can opt out of analytics on this browser anytime:

Third-party services

We rely on a small set of providers to run LeadMarina. Each keeps its own privacy policy, and each receives only what its job requires:

• Running the service — managed hosting, database and authentication, network delivery, transactional email (sign-in links and completion notices), and error monitoring.
• Payments — Stripe, acting as merchant of record. Card details go to Stripe directly and never reach our servers; we store only a customer reference, your plan, and invoice history.
• Sourcing and verifying business data — specialist providers for public business listings, phone line type and carrier, email deliverability, and reading public business websites. These receive business contact details, never your account information. We name them for business customers who ask under a data-processing agreement.
• Where you send leads — only the destinations you connect yourself: Google Sheets, Close, GoHighLevel, or an MCP client. Nothing is exported anywhere until you connect it and ask.
• Analytics — PostHog, cookieless, with an opt-out below. Named because you may want to check what it does before deciding whether to leave it on.

Your rights and choices

You can export your data from the app at any time, and delete your account yourself from Settings — that removes your account, searches, and saved leads. You can also email [email protected] to access, correct, or export your information. We process verified requests within 30 days, except where we’re required to keep certain records by law (billing records, for example).

If your business appears in our results

You do not need an account with us to exercise this. LeadMarina returns information about businesses — company name, address, phone, email, website, and in some cases the name of an owner or principal. Where that identifies a person, it is personal data and you have rights over it, whether or not you have ever used our service.

• Where it comes from — public sources: Google Maps business listings, the business’s own website, and public records. We do not buy personal data from brokers, and we do not collect special-category data (health, beliefs, and similar).
• Why we process it — to provide a business-to-business contact service, on the basis of our legitimate interest in operating it. Where applicable law gives you a right to opt out, you can use the contact below.
• What you can ask for — a copy of what we hold about you, a correction, or removal. Where we remove records at your request we will also take reasonable steps to keep them out of future results.

Email [email protected] with the business name and the address, phone, or email concerned, and we’ll respond within the time applicable law allows. We may need to confirm your connection to the business before acting on a request.

Do not sell or share my personal information

Some US state privacy laws define “sale” or “sharing” broadly enough to cover providing business contact details to our customers. To the extent those laws apply to information about you, you may opt out.

Email [email protected] with the subject Do Not Sell or Share and the business details concerned. We do not sell or share information about our own account holders, and we do not knowingly collect or sell personal information about anyone under 16.

Data retention

We keep your account and search data while your account is active. When you delete your account, we remove the associated personal data within 30 days.

International users

We process data in the United States. By using the service, you consent to your information being processed there.

Children

LeadMarina isn’t intended for anyone under 16, and we don’t knowingly collect their data.

Security has limits

We take reasonable technical and organisational measures to protect your information, but no service is perfectly secure and we can’t guarantee against every unauthorised access. You’re responsible for keeping your own credentials safe and for who you share account access with. If a breach affects your personal data we’ll notify you and any regulator as applicable law requires.

Links and connected services

The Service links to third-party sites and lets you connect tools such as Google Sheets, Close, or GoHighLevel. We don’t control those and aren’t responsible for their content or privacy practices — once data reaches a destination you connected, that provider’s policy governs it.

Automated privacy signals

Our analytics are cookieless and can be switched off below. We aim to honour recognised browser opt-out signals such as Global Privacy Control where applicable law requires it; because we don’t use tracking cookies, there’s little for a Do Not Track signal to disable.

Changes to this policy

We may update this policy from time to time. For significant changes, we’ll notify registered users by email and update the date above.

Contact

Questions about privacy? Email [email protected].