Privacy Policy

This Privacy Policy explains how Tabluey LeadLink ("we", "us") handles personal data in connection with your use of our Platform. It applies to your data as a user of the Platform. It does not govern how you handle data about the businesses you contact — for that you are the data controller and are responsible for compliance with applicable laws.

1. Data we collect about you

• Account data: email, name, password hash, OAuth identifiers if you sign in with Google or Apple.
• App data: industries you save, businesses you add to outreach, follow-ups, message templates, outcome tracking entries.
• Sender credentials (optional): if you connect an email account for sending, we store SMTP credentials encrypted at rest using a server-only key.
• Technical data: minimal request logs and error telemetry needed to operate and secure the Platform.

2. How we use your data

• To provide, secure, and improve the Platform.
• To execute server functions you trigger (e.g. searching Google Places, sending an email from your connected account).
• To communicate with you about your account.

3. Data about the businesses you contact

Business information is fetched from Google Maps Platform (Places API) at your request. We store only what you save to your own outreach list. You are the data controller for that list and are responsible for the lawful basis on which you process and contact those businesses (typically "legitimate interest" for B2B outreach to publicly listed contact details).

4. Sharing

We share data only with the subprocessors that make the Platform work: our hosting provider, our database/auth provider, Google Maps Platform (for search), and the AI provider used to generate template variations. We do not sell your data.

5. Retention

We retain your account and app data for as long as your account is active. You may delete your data at any time by deleting your account or removing individual records inside the Platform.

6. Your rights

Depending on where you live, you may have rights to access, correct, export, restrict, or delete your personal data, and to object to processing. Contact us through your account support channel to exercise these rights.

7. Security

Data is transmitted over TLS. SMTP credentials are encrypted at rest. Database access is governed by row-level security policies scoped to your account. No system is perfectly secure — please use a strong, unique password and enable two-factor authentication where available.

8. International transfers

The Platform may process data outside your country of residence, including in the United States and the European Union. By using the Platform you consent to such transfers.

9. Children

The Platform is not intended for users under 16. Do not use it if you are under that age.

10. Changes

We may update this Policy. Material changes will be communicated through the Platform or by email.