Privacy Policy

Who we are

LeadsMaps is run by Sultan Kadyrkesh, a sole proprietor based in Kazakhstan (Astana, Abay Street 1), the data controller for the information described here. For anything about your data, email us at hello@leadsmaps.dev, or message us on WhatsApp or X.

Information we collect

• — Account: your email, name and avatar. If you sign in with a password we store it hashed; if you use Google sign-in we receive your basic profile and the sign-in tokens Google issues.
• — Security: your IP address and browser (user-agent) for each session, plus a sign-in cookie, to keep your account secure.
• — Billing: your plan and the customer and subscription IDs from Polar. Your card details are handled entirely by Polar and never reach us.
• — Your searches and lists: what you ask LeadsMaps to find (categories, locations, filters), the businesses you unlock contacts for, and your credit history.
• — Support: the subject lines of the emails we send you, kept so we can help if something goes wrong.
• — Usage: which pages you visit, and a small set of events describing how you moved through sign-up. This is collected by third-party analytics on every page, including before you sign in — see “Analytics” below for exactly what and by whom.

The business data we provide

LeadsMaps returns information about businesses, not about private individuals: a business’s name, category, address, rating and review counts from a licensed business-listings database, and the business email addresses and phone numbers that the business itself publishes on its own website, which we check for validity. We cover US businesses only. We do not collect or sell personal data about business owners or employees. If you represent a business and want it removed from our results, message us and we will exclude it.

How we use your data, and why

We use your data to run the service (to perform our contract with you), to keep it secure and prevent abuse (our legitimate interest), to understand how the product is used so we can improve it (our legitimate interest), and to handle billing and meet tax obligations (legal obligation). We do not use it for advertising, we do not sell it, and we make no automated decisions about you that have a legal or similarly significant effect.

AI and agent actions

When you ask an AI agent such as ChatGPT or Claude to use LeadsMaps, we receive the request the agent sends (for example, a category and a city) and return results to the agent. We do not receive your conversation, and we do not use your data to train AI models.

Who we share your data with

We share only what each provider needs to do its job:

• — DigitalOcean — hosts our application and our database, in the United States.
• — Polar — processes payments as our merchant of record.
• — DataForSEO — receives the search parameters you ask for (category, location, filters) so we can look up matching businesses. Not your identity.
• — Outscraper — receives the websites of the businesses you unlock, to find and verify their published contacts. Not your identity.
• — Resend — delivers the emails we send you.
• — Google — for Google sign-in, if you choose it.
• — PostHog — product analytics, as described above.
• — Doppler — stores our application secrets.

We do not sell your data, and we run no advertising of our own.

Analytics

We use one analytics provider, on every page of this site — the marketing pages included, before you sign in or create an account.

• — PostHog (PostHog Inc., United States) records the pages you view and a small set of product events: which plan you selected, whether you went on to checkout, and how you use the tools (for example, that a search ran and how many results it returned). If you are signed in we also send PostHog your user ID and your email address, so that activity can be tied to your account.

It is not used for advertising, and we do not sell or share this data for advertising. We do not send it the businesses you search for or the contacts you unlock. PostHog processes this data in the United States. A browser tracker blocker will stop it; we do not currently act on Do Not Track or Global Privacy Control signals. If you would rather we deleted your analytics records, email us at hello@leadsmaps.dev and we will.

Cookies

We set a sign-in (session) cookie and a small preference for light or dark mode. The analytics provider above sets its own cookie as well:

• — PostHog sets one cookie (named ph_…_posthog) to recognise a returning browser across visits.

It is an analytics cookie, not an advertising cookie, and we do not currently ask for your consent before setting them. If you are in a place whose law requires that consent, use a tracker blocker or decline cookies in your browser until we ship a consent banner.

How long we keep it

We keep your unlocked contacts and credit history for as long as you have an account, so you are never charged twice for the same business. Search results are cached for a short time and then discarded. Sign-in sessions expire after 7 days. Billing records are kept as long as tax law requires. When you delete your account, all of this is erased at once — see below.

Where your data is processed

We are based in Kazakhstan. Your account, your searches and your unlocked contacts are stored in the United States, on DigitalOcean. Analytics is processed in the United States by PostHog. So if you are in the EU or UK, your data leaves that region; where required we rely on safeguards such as standard contractual clauses.

Your rights

If you are in the EU or UK, you can ask to access, correct, delete, or receive a copy of your data, or object to how we use it, and you can complain to your data-protection authority. That includes objecting to the analytics described above, which we rely on legitimate interest for. If you are in California, we do not sell or share your personal information, and you can ask to know, delete, or correct it. Email us at hello@leadsmaps.dev, or message us on WhatsApp or X to exercise any of these.

Deleting your data

You can delete your account yourself, under Credits → Delete account — see how to delete your account. It happens immediately: your searches, unlocked contacts, credit history, sign-in details and agent connections are erased. Any subscription is cancelled on the spot. Polar keeps the invoices tax law requires, with your name and email anonymised. Deleted data can linger in our database backups for up to 7 days before they rotate out. If you cannot sign in, email us at hello@leadsmaps.dev, or message us on WhatsApp or X and we will do it for you.

Security

Passwords are stored hashed. Our database blocks direct access at the row level. AI agents connect through OAuth and never see your password; you can disconnect any of them at any time.

Children

LeadsMaps is not intended for anyone under 18, and we do not knowingly collect their data.

Changes and contact

If we change this policy, we’ll post the new version here and update the date above. Questions? Email us at hello@leadsmaps.dev, or message us on WhatsApp or X.