Privacy Policy

At Leedo, we collect information you provide directly to us when you:

• Create an account (name, email address, password)
• Add leads, accounts, and customer data to your CRM
• Use our features and communicate with our support team
• Subscribe to our paid plans and process payments

We automatically collect certain information about your device and usage, including IP address, browser type, operating system, and how you interact with our service.

We use your information to:

• Provide and maintain our CRM service
• Process your subscription payments through Polar.sh
• Send you important updates about your account and service changes
• Provide customer support and respond to your inquiries
• Improve our service and develop new features
• Ensure security and prevent fraud or abuse

We do not sell, trade, or rent your personal information. We may share your information only in these limited circumstances:

• With Polar.sh for payment processing (subject to their privacy policy)
• With service providers who help us operate our service (hosting, analytics)
• When required by law or to protect our rights and safety
• With your consent or at your direction
• In connection with a business transfer or acquisition

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission using HTTPS/TLS
• Secure password hashing and authentication
• Regular security audits and updates
• Limited access controls and employee training

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this privacy policy. Specifically:

• Account data: Until you delete your account
• CRM data (leads, accounts): Until you delete the data or your account
• Payment records: For 7 years for tax and accounting purposes
• Usage logs: For 90 days unless needed for security investigations

When you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences and settings
• Provide security features and prevent fraud
• Analyze how you use our service to improve it

You can control cookie settings through your browser, but disabling cookies may affect some features of our service.

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we have about you
• Correction: Update or correct inaccurate personal data
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Restrict processing: Limit how we use your data in certain circumstances
• Object: Object to processing of your data for direct marketing

To exercise these rights, please contact us using the information in the Contact Us section.

We integrate with the following third-party services:

• Polar.sh: Payment processing and subscription management (subject to their privacy policy)
• Google OAuth: Optional sign-in authentication (subject to Google's privacy policy)
• Hosting providers: For secure data storage and service delivery
• Email service providers: For sending account notifications and support communications

These services have their own privacy policies and we encourage you to review them. We only share the minimum data necessary for these services to function.

Leedo may transfer, store, and process your personal data in countries other than your own. When we transfer data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions by relevant data protection authorities
• Certification schemes and codes of conduct
• Other lawful transfer mechanisms as available

Our hosting infrastructure is located in regions with strong data protection laws. For specific information about where your data is stored, please contact us.

European Union (GDPR)

If you are located in the EU, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority.

California (CCPA)

California residents have the right to know what categories of personal information we collect, the purposes for use, and the categories of third parties with whom we share it. You also have the right to request deletion of your personal information and to opt-out of the sale of personal information (though we do not sell personal information).

Other Regions

We respect privacy rights in all jurisdictions and will comply with applicable local privacy laws. If you have specific questions about your rights in your region, please contact us.

If you have questions about this privacy policy or our data practices, please contact us at:

We will respond to your privacy-related inquiries within 30 days.