Privacy Policy

Scope and operator

This policy covers SpeedLead, SpeedCRM, SpeedAudit, and related websites, integrations, APIs, and connected AI actions (the “Speed Products”). They are provided under the SpeedLead brand. Questions and privacy requests may be sent to support@speedlead.net.

Information we collect

• Account information: username, email address, authentication identifiers, account preferences, plan, date-of-birth age-gate value, and acceptance records. Password authentication is handled by Supabase; SpeedLead does not receive your plain-text password.
• Product information: search terms and locations, generated and saved lead records, shortlists, tags, notes, CRM workspaces, team membership, assignments, tasks and activity, public website URLs, audit measurements and reports, business briefs, generated site concepts, outreach settings, campaign drafts, recipients, send status, suppression records, and actions you request.
• Connected services: mailbox provider grant identifiers and status, Stripe customer/subscription/payment identifiers, connected AI-client authorization, and the minimum information needed to use those integrations.
• Security and technical information: request time, browser and device information, error and audit logs, rate-limit data, and a one-way hashed network identifier used to limit free-account abuse. Hosting and security providers may process the originating IP address to deliver and protect the service.
• Advertising measurement: page visits and account-registration events collected through Meta Pixel as described below.

How we use information

We use information to authenticate users, provide searches and saved-lead storage, operate CRM, website-audit, site-concept, and email features, process payments, apply credits and plan limits, prevent fraud and abuse, provide support, troubleshoot and secure the services, comply with law, and understand advertising performance. We do not use lead lists, recovery email addresses, passwords, or message contents for Meta ad targeting.

Legal bases where required

Where a law requires a legal basis, we process account, product, and payment-related information to perform our contract with you; security, fraud prevention, support, product reliability, and limited business analytics for our legitimate interests; advertising measurement with your consent; and records or disclosures when necessary to meet a legal obligation. You may withdraw advertising consent for future measurement through “Privacy choices.” Withdrawal does not affect earlier lawful processing.

AI processing

When you invoke an AI-assisted feature, authorize a compatible AI client, or request AI-supported drafting, enrichment, audit interpretation, or site generation, the prompt and the minimum relevant lead, campaign, public URL, measurement, business brief, or account context may be sent to OpenAI or the connected AI provider to produce the requested result. We do not represent AI output as guaranteed fact. Connected AI clients receive only the information needed for the action you request. SpeedLead requires separate confirmation before a connected AI client may queue an email campaign. See the AI Disclosure.

Meta Pixel

Meta Pixel is optional and loads only after you select “Allow ad measurement.” When allowed, it measures visits and successful account registrations, attributes advertising results, and improves campaign delivery. Meta may receive browser and device information, the page visited, event time, IP-derived network information, and identifiers stored by Meta or the browser. We do not send account passwords, lead lists, recovery email addresses, or message contents to the Pixel. Meta processes this information under its own terms and privacy policy. Choose “Privacy choices” in the app to change future advertising measurement; browser controls and Meta’s ad-preference tools may provide additional controls.

Service providers and disclosures

We use providers including Supabase for authentication and databases, Stripe for payments, Railway for hosting, Nylas for connected mailboxes, Meta for advertising measurement, Overture Maps and optional Google services for business discovery, and OpenAI or a connected AI provider for requested AI features. These providers process information to perform services for SpeedLead or at your direction. We may also disclose information when reasonably necessary to comply with law, protect users and the service, investigate abuse, complete a business transaction subject to appropriate safeguards, or with your direction. We do not sell personal data.

Retention

Account and saved product data are generally retained while the account exists. You can remove saved leads and campaigns, disconnect a mailbox, export SpeedLead and related SpeedCRM data, or delete the master account. Deletion removes owned CRM workspaces and removes or anonymizes membership in workspaces owned by others. Security, billing, consent, suppression, dispute, and legal-compliance records may be retained longer where reasonably necessary. Provider backups may take additional time to age out. We avoid retaining raw IP addresses in SpeedLead’s free-tier claim table; it stores a one-way hash instead.

Your choices and rights

Depending on where you live, you may have rights to know, access, correct, delete, or obtain a portable copy of personal data and to opt out of certain targeted advertising, sales, or qualifying profiling. SpeedLead does not sell personal data for money. Optional Meta advertising measurement may be treated as targeted-advertising “sharing” under some laws and is disabled unless you allow it. Signed-in users can download their account data and permanently delete their account from the account menu. You can disconnect a mailbox and revoke a connected AI client. To submit or appeal a privacy request, email support@speedlead.net using the recovery email on the account. An authorized agent may submit a request with proof of authority where applicable. We may verify identity before completing a request, will explain a denial where required, and will not discriminate for exercising applicable privacy rights. You may also complain to the privacy regulator in your jurisdiction.

Security and account separation

We use authenticated sessions, database row-level security, account-scoped storage, encryption in transit, rate limits, and restricted server credentials. No method is perfectly secure. Protect your password and sign out on shared devices. People with whom you intentionally share an export or account access may see the information you share.

Children

SpeedLead is an adult-only business service and is not directed to children under 18. Do not create an account or submit personal data if you are under 18. We use the date of birth and affirmative age confirmation collected at signup to enforce the 18+ gate and retain that legal receipt with the account record. If we learn that a person under 18 has created an account, contact support@speedlead.net; we may suspend/delete the account and remove associated personal data subject to security, suppression, backup, transaction, and legal-retention needs. We do not use the age-gate value for advertising personalization.

International use and changes

SpeedLead and its providers may process information in the United States and other countries where providers operate. We will post material changes with an updated effective date and provide additional notice when appropriate.

Contact

Privacy requests: support@speedlead.net. Never send a password, API key, government ID, or full payment-card number by email.