Privacy Policy

Information we collect

• Account information — the email address you sign up with. Your password is handled by our authentication provider and stored only in hashed form; we never see or store it in plain text.
• Your activity — the searches you run (keyword and location) and the results returned, saved to your account so you can revisit them.
• Analytics — privacy-first, cookieless product analytics (PostHog) such as pages viewed, features used, and general device/browser type. It’s on by default to help us improve, and you can opt out anytime (see below).
• How you found us — the first page you landed on, the site that referred you (its domain only, never the full address), and any campaign tags in the link. This is kept in your browser’s storage and is sent to us only if you create an account — so we can tell which of our articles are actually useful. Signing in with Google leaves the site, so on that path alone the same value is carried across the redirect in a short-lived first-party cookie (lm_ft) and dropped once you are signed in. Opting out of analytics disables it too, and nothing is shared with anyone else.
• Setup answers — if you go through our optional in-app setup, what you tell us there: your role, what you plan to use LeadMarina for, how you heard about us, and the type of business you want to reach. While a setup bonus is on offer to you, and after you receive it, we keep a one-way, keyed fingerprint of your email address — never the address itself — so the bonus is given once per email address. When you claim it, one-way fingerprints of your network address and of your email’s domain are used to limit how many bonuses one network or company can claim, and are deleted after two days.
• Survey answers and feedback — your rating in the in-app satisfaction survey and anything you write in it (including what you’d like us to add next), kept with your plan and your recent searches so we can see what it refers to, and a record of the bonus leads an answer earned. Our team reads every answer, and what you write in it (and a low score from a paying account) also arrives as an email in our support inbox. What you tell us went wrong, and your suggestions, stay private.
• Testimonials — what you tell us in the survey that LeadMarina has helped you do. As our Terms say, and as the survey notes under the box, we may quote it on our website and in our marketing with your first name, relying on our legitimate interest in showing what customers say about us. To have a quote removed, or to object to it being used, email [email protected] at any time and we’ll take it down. Your quote also arrives as an email in our support inbox. Deleting your account does not remove those emails of your answers and quotes — ask at [email protected] to have them deleted.
• Links to your posts — if you send us a link to something you posted about LeadMarina, we keep it with your account so our team can read it, and delete it with your account.

How we use your information

• Authenticate you and keep you signed in.
• Operate the product — run searches, store and enrich results, and show your history.
• Maintain security and prevent abuse.
• Improve the product, using analytics only where you’ve consented.
• Read your survey answers and feedback to improve the product.
• Quote what you tell us LeadMarina helped you do, with your first name, on our website and in our marketing, as our Terms describe — removed whenever you ask.
• Add bonus leads to your account for a survey answer written in your own words.

We do not sell your personal data.

About the business data we return

The leads we return — business names, addresses, websites, phone numbers, emails, owner names, the names and roles of the people a business's own website names as working there, and related details — are compiled from publicly available information, including public business listings, business websites, and public records, together with third-party data and verification providers. We do not access private or password-protected information.

Business information changes often; see “Data accuracy” in our Terms of Service.

Our data sources page lists where it comes from — including the web searches we run to find a business’s owner — and the licences that apply. To have your email address, phone number or name removed from the leads we return, email [email protected] — see that page for what to include.

How we store and protect your data

Your account and search data are stored in our database (Supabase, PostgreSQL), and the application is hosted on Vercel. All data is encrypted in transit over HTTPS, and passwords are hashed by our authentication provider. We limit access to your data to what’s needed to operate the service.

Cookies, analytics, and your choice

• Essential — we use browser storage to keep you signed in. The product can’t function without it.
• Analytics — we run privacy-first, cookieless product analytics (PostHog) by default to understand usage and improve LeadMarina.
• How you found us — a single record of the first page you landed on and where you came from, held in your browser’s storage — plus, only when you sign in with Google, a short-lived first-party cookie (lm_ft) that carries it across that redirect. It leaves your browser only if you create an account.
• We do not use advertising or cross-site tracking cookies, and we don’t sell your data.

You can opt out of analytics on this browser anytime:

Third-party services

We rely on a small set of providers to run LeadMarina. Each keeps its own privacy policy, and each receives only what its job requires:

• Running the service — managed hosting, database and authentication, network delivery, transactional email (sign-in links, completion notices, and messages to our support inbox), and error monitoring.
• Payments — Stripe, acting as merchant of record. Card details go to Stripe directly and never reach our servers; we store only a customer reference, your plan, and invoice history.
• Sourcing and verifying business data — specialist providers for public business listings, phone line type and carrier, email deliverability, and reading public business websites. These receive business contact details, never your account information. We name them for business customers who ask under a data-processing agreement.
• Answering support questions — an AI model provider, reached through an AI routing service, receives what you type into the support chat and the account details it needs to answer you: your plan and its billing dates, your lead balance, your recent searches, and what you have connected (integrations, and how many automations and API keys you have) — never your password or payment details.
• Where you send leads — only the destinations you connect yourself: Google Sheets, Close, GoHighLevel, or an MCP client. Nothing is exported anywhere until you connect it and ask.
• Analytics — PostHog, cookieless, with an opt-out below. Named because you may want to check what it does before deciding whether to leave it on.

The support chat

The chat assistant is available when you are signed in. If you use it, we keep your messages and its replies — with the page you asked from and your account — so we can answer you and improve our support. The replies are written by an AI model and can be wrong. If you email us from the chat, we reply to the address you write from. We keep chat conversations for as long as we need them to support you and improve our service, and may delete them at any time. They are deleted with your account if you delete it, and you can ask us to delete one sooner at [email protected]. An email you send us from the chat also arrives in our support inbox, which neither of those removes — ask at the same address to have it deleted.

Your rights and choices

You can export your data from the app at any time, and delete your account yourself from Settings — that removes your account, searches, and saved leads. You can also email [email protected] to access, correct, or export your information. We process verified requests within 30 days, except where we’re required to keep certain records by law (billing records, for example).

If your business appears in our results

You do not need an account with us to exercise this. LeadMarina returns information about businesses — company name, address, phone, email, website, and in some cases the name of an owner or principal, or of anyone else the business's own website names as working there, with their role. Where that identifies a person, it is personal data and you have rights over it, whether or not you have ever used our service.

• Where it comes from — public sources: public business listings, the business’s own website, web searches for the business, open datasets, and public records (our data sources page lists them). We do not buy personal data from brokers, and we do not collect special-category data (health, beliefs, and similar).
• Why we process it — to provide a business-to-business contact service, on the basis of our legitimate interest in operating it. Where applicable law gives you a right to opt out, you can use the contact below.
• What you can ask for — a copy of what we hold about you, a correction, or removal. Where we remove records at your request we will also take reasonable steps to keep them out of future results.

Email [email protected] with the business name and the address, phone, or email concerned, and we’ll respond within the time applicable law allows. We may need to confirm your connection to the business before acting on a request.

Do not sell or share my personal information

Some US state privacy laws define “sale” or “sharing” broadly enough to cover providing business contact details to our customers. To the extent those laws apply to information about you, you may opt out.

Email [email protected] with the subject Do Not Sell or Share and the business details concerned. We do not sell or share information about our own account holders, and we do not knowingly collect or sell personal information about anyone under 16.

Data retention

We keep your account and search data while your account is active. When you delete your account, we remove the associated personal data within 30 days, with two exceptions. The fingerprint of the email address that received a setup bonus, described above, is kept after deletion so the bonus can’t be claimed twice, and on its own it can’t be turned back into your address. And the copies of survey answers and testimonials already emailed to our support inbox (see above) stay until you ask at [email protected] to have them deleted.

We keep the text of the website pages we read for a lead for 30 days after we find it; after that we keep each page’s address, title and description.

International users

We process data in the United States. By using the service, you consent to your information being processed there.

Children

LeadMarina isn’t intended for anyone under 16, and we don’t knowingly collect their data.

Security has limits

We take reasonable technical and organisational measures to protect your information, but no service is perfectly secure and we can’t guarantee against every unauthorised access. You’re responsible for keeping your own credentials safe and for who you share account access with. If a breach affects your personal data we’ll notify you and any regulator as applicable law requires.

Links and connected services

The Service links to third-party sites and lets you connect tools such as Google Sheets, Close, or GoHighLevel. We don’t control those and aren’t responsible for their content or privacy practices — once data reaches a destination you connected, that provider’s policy governs it.

Automated privacy signals

Our analytics are cookieless and can be switched off below. We aim to honour recognised browser opt-out signals such as Global Privacy Control where applicable law requires it; because we don’t use tracking cookies, there’s little for a Do Not Track signal to disable.

Changes to this policy

We may update this policy from time to time. For significant changes, we’ll give registered users notice in the app or by email, and update the date above. Notice in the app counts as given from the day it first appears there.

Contact

Questions about privacy? Email [email protected].