Privacy Policy

1. Introduction

This Privacy Policy explains how Leadodo collects, uses, stores, shares and protects personal data when you visit our websites, use our application, access our course content, book a call, communicate with us, or otherwise interact with Leadodo.

Leadodo is built for business users, mainly web design agencies. Our platform provides an AI application that analyses publicly available website information and produces an AI lead score. Our course teaches users how to use the application and how to run compliant business outreach.

We take privacy seriously and aim to process personal data in a transparent, secure and lawful way.

2. Who We Are

Leadodo is responsible for the processing of personal data described in this Privacy Policy, unless stated otherwise.

Legal company name: Leadodo
Trade name: Leadodo
Country: The Netherlands
Chamber of Commerce / KvK number: 94335397
VAT number: NL005077662B46
Registered address: Floreentsien 24, 9005 MC Wergea, Friesland, The Netherlands
Privacy contact: legal@leadodo.ai

3. Scope of This Policy

This Privacy Policy applies to:

• https://leadodo.ai
• https://leadodo-app.vercel.app
• Our application and dashboard
• Our course platform
• Our blog and legal pages
• Our social media content management features used internally by Leadodo
• Our booking, payment, email and support communications

If we later add new Leadodo domains or services, this policy will also apply to those services where it is linked or referenced.

4. Personal Data We Collect

We collect different types of personal data depending on how you interact with Leadodo.

4.1 Account and business data

When you create an account, buy access, book a call, contact us, or become a customer, we may collect:

• Name
• Email address
• Company name
• Website
• Phone number
• Billing address
• VAT number
• Login and account information
• Course access status
• Customer support messages

4.2 Payment and billing data

When you purchase Leadodo, payment and billing data may be processed through payment and billing providers such as Stripe.

This may include:

• Name
• Email address
• Company name
• Billing address
• VAT number
• Payment status
• Invoice details
• Transaction references

We do not store full payment card details ourselves. Card payments are handled by our payment providers.

4.3 Course and learning data

When you use our course platform, we may collect data such as:

• Lessons viewed
• Course progress
• Quiz answers
• Downloads
• Video watch progress
• Login activity
• Certificates
• Comments or course interactions

We use this data to provide the course, track progress, improve the learning experience, and support users.

4.4 Booking and communication data

When you book a call or communicate with us, we may collect:

• Name
• Email address
• Phone number
• Company information
• Booking details
• Calendar event information
• Messages or notes you provide
• Communication history

We may use providers such as Calendly, Resend, Smartlead, Vonage and WhatsApp Business to manage bookings and communications.

4.5 Website and device data

When you visit our websites or application, we may collect technical and usage data such as:

• IP address
• Browser type and version
• Device type
• Operating system
• Pages visited
• Referring pages
• Approximate location based on IP address
• Cookie identifiers
• Analytics events
• Advertising and conversion events, where permitted

We use this data for analytics, security, performance, product improvement and marketing measurement.

4.6 Leadodo application data

Leadodo’s AI application analyses publicly available website information. The application is designed to respect robots.txt and to process only explicit public website data.

The AI lead score is based on website-related information, such as public website content, structure, performance indicators, screenshots or other website quality signals.

When users analyse prospects with the application, Leadodo does not intentionally view or store the customer’s uploaded lead lists, prospect data, website screenshots, outreach status, email replies, or generated lead scores on Leadodo-controlled servers, unless a specific feature, support request, integration or future update clearly states otherwise.

Users are responsible for making sure that their own use of Leadodo, including outreach and lead processing, complies with applicable privacy, marketing and communications laws.

5. How We Collect Personal Data

We collect personal data in the following ways:

• Directly from you when you create an account, book a call, buy access, contact us, or submit information
• Automatically through cookies, pixels, analytics tools and server logs
• Through service providers such as payment processors, booking tools and email providers
• Through your use of the application and course platform
• From publicly available business websites when using our AI analysis functionality
• From social media platforms when Leadodo connects its own social media accounts for internal content publishing

6. How We Use Personal Data

We use personal data for the following purposes:

6.1 To provide Leadodo

We use personal data to:

• Create and manage accounts
• Provide access to the application and course
• Process payments and invoices
• Track course progress
• Provide customer support
• Send transactional emails
• Manage bookings and calls
• Maintain security and prevent misuse

6.2 To operate and improve the product

We use data to:

• Monitor application performance
• Fix bugs
• Improve usability
• Understand how users use our platform
• Improve course content
• Improve onboarding and support

6.3 To communicate with you

We may use your contact details to send:

• Account-related messages
• Payment and invoice messages
• Booking confirmations
• Course emails
• Product updates
• Support replies
• Marketing emails, where permitted
• SMS reminders, where permitted
• WhatsApp Business messages, where appropriate

You can unsubscribe from marketing emails where an unsubscribe option is provided. Transactional and service-related messages may still be sent where necessary to provide the service.

6.4 To run compliant business outreach

Leadodo teaches users how to run business outreach in a compliant way. We may also conduct our own business-to-business outreach using tools such as Smartlead, Resend or other communication providers.

Where we conduct B2B outreach, we aim to contact relevant business recipients, provide clear sender identification, and include an opt-out option where required.

6.5 To measure and improve marketing

We may use cookies, pixels and analytics tools to:

• Measure website traffic
• Understand conversions
• Improve advertising
• Retarget visitors where legally permitted
• Measure the performance of campaigns
• Improve landing pages and content

For visitors in the EU, UK and similar jurisdictions, non-essential cookies and advertising technologies should only be used where legally permitted and, where required, after consent.

6.6 To comply with legal obligations

We may use and retain personal data to:

• Keep accounting records
• Comply with tax obligations
• Respond to lawful requests
• Enforce our agreements
• Protect our rights
• Prevent fraud or abuse
• Maintain security logs

7. Legal Bases for Processing

Where the GDPR or UK GDPR applies, we rely on one or more of the following legal bases.

7.1 Performance of a contract

We process personal data where necessary to provide Leadodo, manage accounts, process orders, provide course access, deliver support, and perform our agreement with you.

7.2 Legitimate interests

We may process personal data based on our legitimate interests, including:

• Improving and securing our service
• Responding to business inquiries
• Managing customer relationships
• Conducting relevant B2B outreach
• Preventing fraud or abuse
• Analysing product usage
• Maintaining internal records
• Protecting our legal rights

When we rely on legitimate interests, we consider whether our interests are overridden by your rights and freedoms.

7.3 Consent

We rely on consent where required, including for certain cookies, advertising pixels, marketing communications, or optional features.

You may withdraw consent at any time where processing is based on consent.

7.4 Legal obligation

We process and retain certain data where required by law, including tax, accounting and business administration requirements.

8. Cookies, Pixels and Similar Technologies

We use cookies and similar technologies to operate our websites, improve performance, understand usage, secure the service, and measure marketing.

These technologies may include:

• Essential cookies
• Analytics cookies
• Advertising cookies
• Conversion tracking
• Pixel tags
• Local storage
• Similar browser-based technologies

Some cookies are necessary for the website or application to function. Other cookies, such as analytics and advertising cookies, may require consent depending on your location.

You can manage cookies through your browser settings and, where available, through our cookie banner or privacy settings.

9. Meta Pixel, Google Tools and Advertising Technologies

We may use Meta Pixel, Google Analytics, Google Tag Manager, Google Ads, and similar tools to understand how visitors interact with our websites and to measure or improve advertising.

These tools may collect or receive information such as:

• Page views
• Button clicks
• Conversion events
• Browser and device information
• IP address
• Cookie identifiers
• Referrer information

Meta, Google and similar providers may process this data according to their own terms and privacy policies. Where required by law, we will only activate non-essential advertising or analytics technologies after appropriate consent.

We do not sell personal data. However, certain advertising technologies may be considered “sharing” or targeted advertising under some US state privacy laws. Where applicable, users may contact us at legal@leadodo.ai to object to or opt out of such processing.

10. AI Processing

Leadodo uses AI technology, including the OpenAI API, to support website analysis and lead scoring.

The AI functionality is designed to analyse explicit publicly available website data, such as public website content, page structure, screenshots and quality indicators. We do not intentionally send private customer lead lists, email replies, or non-public prospect data to AI providers unless this is clearly part of a feature requested by the user or required to provide support.

AI-generated outputs, including lead scores or website analysis results, should be treated as decision-support information. They should not be treated as guaranteed predictions or as a replacement for human judgment.

Users are responsible for reviewing AI outputs and for ensuring that their own use of generated results complies with applicable law.

11. Social Media Account Connections

Leadodo includes social media content scheduling features. These features are currently used internally by Leadodo for our own company accounts.

When we connect our own Facebook, Instagram or Threads accounts, we may store:

• Connected social account names
• Facebook Page IDs
• Instagram Business account IDs
• Threads account IDs
• Access tokens
• Scheduled posts
• Draft content
• Uploaded images or videos
• Publish status
• Error logs and technical publishing information

Access tokens are stored encrypted where technically supported by our application architecture. We use this data to authenticate with the relevant social media platform and publish content selected by Leadodo.

If this functionality is offered to customers in the future, we will update this Privacy Policy where needed.

12. Customer Lead and Outreach Data

Leadodo is designed so that customer prospect analysis data remains with the customer where possible.

Customers may process data such as:

• Business names
• Websites
• Public business email addresses
• Contact person names
• Phone numbers
• Country or sector
• Website screenshots
• AI lead scores
• Outreach status
• Email replies

Leadodo does not intentionally access or store this customer prospect data on Leadodo-controlled servers as part of the current application workflow, unless a user submits it to us directly, requests support, uses a specific integration, or a future feature clearly requires server-side storage.

Customers are responsible for ensuring that they have a lawful basis for processing prospect data and for sending outreach messages.

13. Payments and Billing

We use Stripe and may use other payment, invoicing or accounting providers to process payments and maintain billing records.

Payment providers may process payment information, transaction details and fraud prevention data according to their own privacy policies.

We retain invoice and accounting data as required by applicable tax and accounting laws.

14. Email, SMS, WhatsApp and Communications

We may use communication providers such as Resend, Smartlead, Vonage and WhatsApp Business to send or manage:

• Transactional emails
• Marketing emails
• Course emails
• Booking confirmations
• SMS reminders
• Cold outreach
• Support replies
• WhatsApp Business messages

Marketing communications will include an opt-out mechanism where required. You can also contact us at legal@leadodo.ai to unsubscribe or object to certain communications.

15. Service Providers

We use third-party service providers to operate Leadodo. These may include:

• Vercel for hosting and deployment
• Supabase for database and storage
• Google Cloud for infrastructure or related services
• GitHub for code hosting and development workflows
• Stripe for payments
• Calendly for call booking
• Resend for transactional email
• Smartlead for outreach email workflows
• Vonage for communications
• WhatsApp Business for business messaging
• Meta and Google for analytics, advertising and platform integrations
• OpenAI for AI functionality

These providers may process personal data on our behalf or as independent controllers, depending on the service. We aim to use reputable providers and appropriate contractual safeguards where required.

16. International Data Transfers

Leadodo is based in the Netherlands. We aim to use EU-based processing and storage where reasonably possible.

However, some providers may process personal data outside the European Economic Area, the United Kingdom or Switzerland. This may include providers based in the United States or other countries.

Where required, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, data processing agreements, or other legally recognised transfer mechanisms.

17. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

Our general retention approach is:

• Account data: kept while the account is active and for a reasonable period after deletion or cancellation where needed for support, security, legal or business records.
• Invoices and accounting records: generally kept for 7 years, or longer where legally required.
• Course progress: kept while the account is active and for a reasonable period after cancellation, unless deletion is requested and no legal exception applies.
• Uploaded lead lists: not intentionally stored by Leadodo in the current application workflow, unless submitted to us directly or processed through a specific feature.
• Social media drafts and media: kept while needed for internal publishing, records and troubleshooting, unless deleted earlier.
• OAuth tokens: deleted or made inactive after disconnecting an account, unless limited technical logs must be retained for security or audit purposes.
• Server and security logs: kept for a limited period needed for security, debugging and abuse prevention.
• Support emails: kept for as long as needed to manage the relationship, resolve issues and maintain business records.
• Marketing consent records: kept as long as needed to prove consent or opt-out status.

We may anonymise or aggregate data so that it no longer identifies an individual. Such anonymised data may be kept for longer.

18. Security

We use technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include:

• Access controls
• Encrypted token storage
• Secure hosting providers
• Environment variable protection
• Limited access to production systems
• Logging and monitoring
• HTTPS encryption in transit
• Administrative access restrictions

No system is completely secure. If we become aware of a security incident that affects personal data, we will take appropriate steps and notify affected users or authorities where legally required.

19. Your Privacy Rights

Depending on your location, you may have rights over your personal data. These may include the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Restrict processing
• Object to processing
• Withdraw consent
• Request data portability
• Object to direct marketing
• Lodge a complaint with a supervisory authority

To exercise your rights, contact us at:

legal@leadodo.ai

We may need to verify your identity before responding. We will respond within the period required by applicable law.

If you are in the Netherlands or the EU, you may also contact the Dutch Data Protection Authority, Autoriteit Persoonsgegevens. If you are in the United Kingdom, you may contact the UK Information Commissioner’s Office.

20. US State Privacy Rights

We do not sell personal information.

We may use advertising or analytics technologies that could be considered targeted advertising or “sharing” under certain US state privacy laws. Where applicable, you may request to opt out of such processing by contacting us at:

legal@leadodo.ai

Depending on your state, you may also have rights to access, correct, delete, or receive a copy of certain personal information, and to appeal a privacy request decision.

We will not discriminate against you for exercising your privacy rights.

21. Children

Leadodo is intended for business users, mainly web design agencies. Our services are not intended for children or for users under 18.

We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at legal@leadodo.ai and we will take appropriate steps.

22. Automated Decision-Making

Leadodo may use AI to generate website analysis results and AI lead scores. These outputs are intended to support business decisions by users.

Leadodo does not intend to make legal, employment, credit, financial, health, or similarly significant decisions about individuals based solely on automated processing.

Users should review AI outputs and decide independently whether and how to use them.

23. Third-Party Websites and Services

Our websites and application may link to third-party websites, tools or platforms. We are not responsible for the privacy practices of those third parties.

Examples include payment providers, booking tools, social media platforms, communication tools and analytics providers.

We recommend reviewing their privacy policies before using those services.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify users through the website, application, email, or another appropriate method. The “Last updated” date at the top shows when this Privacy Policy was last updated.

25. Contact

For privacy questions, requests or complaints, contact:

Leadodo
Floreentsien 24
9005 MC Wergea
Friesland
The Netherlands

Email: legal@leadodo.ai