Privacy Policy

1. Overview & Commitment

At GenieLeads Inc. ("GenieLeads", "we", "us", or "our"), protecting the confidentiality, integrity, and security of your personal data and commercial outreach information is fundamental to our core values.

This Privacy Policy explains how we collect, store, process, and disclose information when you visit our website at genieleads.ai, use our web application, install our browser extensions, or engage with our customer services.

2. Information We Collect

We collect information in three categories:

A. Information You Provide Directly

• Account Credentials: Full name, professional email address, organization/company name, and hashed passwords.
• Verification Data: One-time passcode (OTP) verification records during account registration and password resets.
• Campaign & Contact Lists: Prospect lists, lead names, public job titles, company names, LinkedIn URLs, and custom message variables you upload to the platform.
• Support Communications: Messages, feedback, tickets, and attachments submitted to our customer success team.

B. Information Collected Automatically

• Device & Usage Data: IP address, browser type and version, language settings, operating system, pages viewed, time spent, and referral URLs.
• System Logs: Error diagnostics, security telemetry, campaign dispatch logs, and API request latency metrics.

C. LinkedIn Integration & Extension Data

When you connect your LinkedIn account or use the GenieLeads browser helper, we securely store the authentication token or session cookies required to dispatch campaigns on your behalf. We only read data necessary to synchronize conversations, prospect replies, and profile details relevant to your outreach campaigns.

3. How We Use Your Data

We process your data strictly for legitimate business and contractual purposes, including:

• Providing, operating, maintaining, and enhancing the GenieLeads outreach platform.
• Executing automated campaign schedules, connection invites, and message sequences requested by you.
• Generating AI-personalized copy suggestions and categorizing prospect replies (interested, meeting booked, not interested).
• Verifying user identity and preventing unauthorized or abusive signups through email verification.
• Communicating system notifications, security updates, release notes, and transactional receipts.
• Enforcing our Terms of Service and complying with legal obligations.

4. LinkedIn Session Security & Token Handling

Your LinkedIn account security is treated with bank-grade precautions:

• Encryption at Rest: All LinkedIn session tokens and cookies are encrypted using AES-256 with rotating server-side master keys.
• No Password Storage: We do not store your raw LinkedIn password. Authentication is carried out via secure session tokens or browser automation bridges.
• Dedicated Proxy Pacing: Requests are routed via dedicated residential or static proxies that match your geographical location to safeguard your account against suspicious login flags.
• Immediate Revocation: You can disconnect and permanently purge your LinkedIn session data from GenieLeads at any time via your account settings.

5. Payments & Paddle Merchant of Record

All payment transactions for GenieLeads are processed by our Merchant of Record, Paddle.com Market Ltd ("Paddle").

GenieLeads does not collect, process, or store full credit card numbers, CVVs, or bank account credentials on our servers. When you enter payment details, you interact directly with Paddle's PCI-DSS Level 1 certified checkout environment.

Paddle provides GenieLeads with transactional tokens, subscription statuses, billing country, and tax identifiers needed to provision your account. You can review Paddle's privacy practices at paddle.com/privacy.

6. Data Sharing & Third-Party Service Providers

We only share your information with trusted third-party service providers who assist us in operating our business and are bound by strict data processing agreements (DPAs):

We may also disclose your information if required to do so by law, subpoena, or to protect the safety, rights, or property of GenieLeads, our customers, or the public.

7. International Data Transfers

GenieLeads operates globally and utilizes cloud infrastructure located primarily in the United States and the European Union. If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we transfer your personal data pursuant to Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring equivalent levels of protection.

8. Data Retention & Deletion

We retain your personal data and campaign information for as long as your account remains active or as needed to fulfill the purposes outlined in this policy.

Upon account cancellation, you may request full deletion of your account and related data. Following a grace period of thirty (30) days to prevent accidental loss, all campaign sequences, prospect databases, and LinkedIn session tokens will be permanently scrubbed from our active databases and backup rotations.

9. Your Legal Rights (GDPR & CCPA)

Depending on your jurisdiction (such as under the EU General Data Protection Regulation or California Consumer Privacy Act), you are entitled to specific rights regarding your personal information:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can update or correct inaccurate data via your profile or by contacting support.
• Right to Erasure ("Right to be Forgotten"): You can request that we delete all your personal information.
• Right to Data Portability: You can export your leads, campaign metrics, and account data in standard formats (CSV/JSON).
• Right to Object & Restrict: You can restrict or object to certain types of processing or automated decision-making.

To exercise any of these rights, email us at privacy@genieleads.ai. We respond to all verified inquiries within thirty (30) days.

10. Security Safeguards

We employ comprehensive technical and organizational measures to safeguard your information:

• All web traffic is encrypted in transit using TLS 1.3 / HTTPS.
• Databases and backups are encrypted at rest using AES-256 standards.
• Strict role-based access control (RBAC) and multi-factor authentication (MFA) protect our internal administrative infrastructure.
• Regular vulnerability testing, dependency patching, and code audits are conducted.

11. Cookies & Tracking Technologies

We use essential cookies to maintain user sessions, remember authentication state, and provide secure CSRF protection. We also use privacy-focused analytics cookies to evaluate website performance and optimize page loading times.

You can control cookie settings through your browser preferences. Disabling essential cookies may prevent you from logging in or using the GenieLeads application.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements in our practices or changes in legal regulations. When material changes are made, we will notify you by updating the "Effective Date" at the top of this page and, where appropriate, sending an email announcement to your registered account address.

13. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal information is handled, please contact our Data Protection Officer (DPO):