Privacy Policy
Effective date: 24 March 2026
This Privacy Policy explains how Lead2Lead ("Lead2Lead", "we", "us", or "our") collects, uses, stores, and protects personal data when you use our website and services.
The current product scope is a landing page and waitlist flow for a B2B platform.
1. Data We Collect
1.1 Information You Provide
When you use our waitlist form or related flows, we collect:
- Business email address
- Company name
- Company website
- Services you offer (selected from our catalog)
- Optional custom service name
- Optional contact name
- Optional job title
Authentication-related data is handled through Supabase Auth.
1.2 Automatically Collected Information
We may collect technical and usage data such as:
- IP address and approximate location
- Device/browser metadata
- Pages viewed and interaction events
- Timestamps and request metadata
This data may be collected via our hosting/platform providers and analytics tooling.
2. How We Use Data
We use personal data to:
- Operate and secure the Service
- Process waitlist sign-ups and prevent abuse
- Create and manage authentication records when needed
- Communicate about onboarding and product updates (including email communications sent via AWS SES)
- Analyze usage and improve product quality and performance
- Comply with legal obligations
3. Legal Bases (GDPR/UK GDPR)
Where applicable, we process data based on one or more of:
- Performance of a contract (or pre-contractual steps you request)
- Legitimate interests (service operation, security, and improvement)
- Consent (where required, for example optional analytics)
- Legal obligations
4. Cookies and Similar Technologies
We use cookies and similar technologies for:
- Essential functionality (including authentication/session handling)
- Security and abuse prevention
- Analytics (for example, Google Analytics)
You can control cookies in your browser settings. Some essential cookies are required for core features to work.
5. Third-Party Processors
We use trusted providers that process data on our behalf, including:
- Supabase (authentication and database). Primary project region:
eu-west-1(Dublin, Ireland): https://supabase.com/privacy - Vercel (hosting and delivery). Primary deployment region:
eu-west-1(Dublin, Ireland): https://vercel.com/legal/privacy-policy - Amazon Web Services (AWS SES) (email delivery for waitlist and service communications): https://aws.amazon.com/privacy/
- Google Analytics (usage analytics): https://policies.google.com/privacy
- Sentry (error monitoring): https://sentry.io/privacy/
6. Data Sharing
We do not sell your personal/business data.
We may share data only:
- With service providers/processors described above
- If required by law, legal process, or regulatory request
- To protect rights, security, and integrity of the Service
- In connection with a merger, acquisition, or asset transfer (with appropriate safeguards)
7. Data Retention
We retain data only as long as needed for the purposes described in this policy, including legal, accounting, security, and operational requirements.
Retention periods may vary by data type and by whether an account is active, pending, or closed.
8. Security
We use reasonable technical and organizational safeguards to protect data, including encrypted transport (TLS), access controls, and provider-level security controls.
No method of transmission or storage is 100% secure, but we continuously work to reduce risk.
9. International Transfers
Your data may be processed in countries other than your own, depending on where our providers operate.
Where required, we use appropriate safeguards for international transfers.
10. Your Rights
Depending on your jurisdiction, you may have rights to:
- Access your personal/business data
- Correct inaccurate data
- Delete your data
- Restrict or object to certain processing
- Request portability of your data
- Withdraw consent where processing is based on consent
To exercise these rights, contact us using the details below.
11. Children's Privacy
Lead2Lead is intended for business users and is not directed to children under 13. We do not knowingly collect personal data from children under 13.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date and post the revised policy.