1. Who we are and scope
Know Your Lead (“we”, “us”, or “our”) provides a website and business lead services. This policy explains our handling of personal information about website visitors, account holders, and people who contact us. For privacy enquiries, contact support@knowyourlead.ai.
We determine the purposes and means of processing account, billing, and support information and act as its data controller. Where a customer uses an enabled feature to collect or process leads, that customer generally determines how the lead information is used and we process it on their behalf. Their privacy notice and any applicable data processing agreement also apply.
2. Information we collect
- Account information: your email address, display name, user identifier, sign-in information, and account creation and update dates. If you choose Google sign-in, we receive the profile details made available through that sign-in flow.
- Workspace information: workspace identifiers, ownership and membership information, your selected plan, and setup status.
- Billing information: payment-provider customer and subscription identifiers, checkout records, and subscription status. Payment details are entered through Stripe; our application does not store your full payment card number.
- Communications: information you provide when contacting support, including the contents of your enquiry.
- Technical information: our infrastructure providers may process IP addresses, browser and device information, request times, and diagnostic or security logs when delivering the Service.
Where lead collection or enrichment features are enabled, customer data may include names, business contact details, form responses, company information, and related professional context. The exact information depends on the customer’s configuration and enabled data sources.
When you use our demo flow, Firebase creates an anonymous sign-in identifier so we can save your answers, progress and demo request before you register. Creating an account can retain this identifier and history. If you sign into an existing account, we attach the history after verifying both sessions. Demo contact details are saved when you submit the form; submitting the form alone does not book a meeting.
For our founding-firms, job-profit and job-extras forms, we save your answers and contact fields privately as you type, including unfinished enquiries, to keep the form reliable and understand where people stop. These saved values are not loaded back into your input fields. Continuing past the contact-details step requests contact about trying KnowYourLead and sends your enquiry to our team using our email provider, Resend; it does not book a call or subscribe you to marketing.
3. Where information comes from
We receive information directly from you, from your use of the Service, and from authentication and payment providers. Where customers use lead features, information may also come from those customers, people submitting their forms, or sources enabled for the relevant workflow.
If enrichment is enabled, additional business information may come from public professional sources or a configured data provider. Availability of information in public does not remove privacy rights or the customer’s duty to use it lawfully. Contact us if you need help identifying the source of information associated with you.
4. WhatsApp Business connections
If you authorise a WhatsApp Business account, we receive the account and phone-number identifiers needed to connect it, its connection and synchronisation status, and an access token. We store the token encrypted in private integration records and use it for the functions you authorise. Your saved workspace number is separate from a completed Meta authorisation.
Meta sends our integration message content, sender and recipient numbers, message identifiers, delivery updates and account events. Where you choose to share contacts or message history through Meta’s connection flow, those payloads may also be received and stored privately. The current connection feature uses this information to maintain the authorised account and show the result of an optional message-and-reply check. It does not automatically turn shared contacts or history into customer or job records.
Google Cloud and Firestore host our integration records. Meta operates the WhatsApp Business Platform and processes information under its own policies. We do not send WhatsApp message content or access tokens to our advertising or product analytics integrations. The business that controls the connected account remains responsible for its customer communications and contact permissions.
You can revoke the app’s access through Meta’s business settings. We stop using an account when we receive its disconnection event; revoking access does not itself delete records already saved. To request deletion of your WhatsApp connection and associated integration data, email support@knowyourlead.ai with your account email and connected business number. Do not send an access token, password or verification code. We confirm your authority to make the request and explain any information that must be retained for a stated legal or security purpose.
5. How and why we use information
We use account and workspace information to create and manage accounts, authenticate users, provide requested features, and support customers. We use billing information to administer trials, subscriptions, payments, and billing enquiries.
We also process information to diagnose technical issues, secure the Service, prevent fraud and abuse, communicate service changes, resolve disputes, and meet legal obligations. Where applicable, the legal bases are:
- Contract: providing the service you request and administering your subscription.
- Legitimate interests: operating and protecting our business, assisting business contacts, and improving reliability, balanced against your rights and expectations.
- Legal obligations: meeting applicable accounting, tax, regulatory, and lawful disclosure requirements.
- Consent: where required for optional marketing or non-essential tracking. You can withdraw consent without affecting earlier lawful processing.
We do not use the current account and checkout flows to make solely automated decisions that produce legal or similarly significant effects about you. Where lead insights are available, they are intended to support human review.
8. How long we keep information
We keep account and workspace information while it is needed to provide your account and resolve related issues. After closure, we assess what must be deleted or retained based on the purpose of the record, legal requirements, outstanding payments or disputes, and security needs.
Billing records may need to be retained for applicable accounting and tax periods. Support correspondence is retained for as long as needed to handle the enquiry and associated obligations. Technical records and backup copies may remain until the relevant retention or replacement cycle completes.
Customer lead data is retained according to the customer’s instructions and applicable processing terms, subject to legal requirements. Contact us to request deletion or ask about the retention criteria for a particular record.
9. Security and international processing
We use authentication, access restrictions, and managed infrastructure to help protect personal information. No online service or transmission method can be guaranteed completely secure. Protect your account credentials and contact us promptly if you suspect unauthorised access.
Our providers operate internationally, so information may be processed outside your country. Where applicable law restricts an international transfer, appropriate safeguards are required, such as an adequacy decision or approved contractual protections. Contact us for information about the providers, processing locations, and safeguards relevant to your data.
10. Your rights and choices
Depending on where you live and the law that applies, you may have the right to request access to your personal information, correct inaccurate information, request deletion, restrict or object to processing, and receive a portable copy of certain information. You may also withdraw consent where we rely on it.
Email support@knowyourlead.ai to make a request. Explain the account or information involved; do not send passwords or full payment details. We may need proportionate information to confirm your identity. We will respond within the period required by applicable law and explain any lawful limitations on your request.
If your information was submitted through another business’s form, contact that business first because it controls the relevant lead data. We can help identify or route the request where appropriate. Marketing preferences do not prevent essential account, billing, or security communications.
11. Children’s information
The Service is intended for adults using it for business purposes and is not directed at children. We do not knowingly collect personal information from children through account registration. If you believe a child has provided information to us, contact support so we can investigate and take appropriate action.
12. Updates and complaints
We may update this policy as our features and data practices change. We will publish updates here and notify you of significant changes where required.
Contact support@knowyourlead.ai with questions or concerns. You may also complain to your local data protection authority. In the United Kingdom, you can contact the Information Commissioner’s Office. You do not need to contact us before raising a complaint with an authority.