Privacy Policy

Version 1.0 (Beta) · Last updated 2026-07-13

Beta notice: LeadGen AI is in soft beta. This Policy is incorporated into our Terms of Service and supplemented by our Cookie Policy. The Service is operated by LeadGen AI LLC, a California limited liability company.

This Privacy Policy explains how LeadGen AI LLC, a California limited liability company ("we," "us," "our") collects, uses, shares, and protects personal information in connection with the LeadGen AI platform and related services (the "Service"). It applies to Customers (account holders), Affiliates (creators in a Customer's affiliate program), and End-Customers (people whose data is processed through the Service, such as outreach recipients, leads, and visitors who click affiliate tracking links).

1. Our role: controller vs. processor

As a controller: for our own operations — running and securing the Service, billing, fraud prevention, communications with Customers, and product analytics — we decide how and why personal information is processed.
As a processor/service provider: for personal data a Customer submits, imports, scrapes, enriches, or otherwise processes through the Service about its own leads, recipients, affiliates, and customers, the Customer is the controller and we process that data on the Customer's behalf and instructions. If you are an Affiliate or End-Customer, some requests about your data may need to be directed to the relevant Customer; we will assist as required by law.

2. Information we collect

From Customers (account holders)

Account and profile data: name, business name, email, authentication identifiers, and preferences.
Business configuration you provide: products/services, target audience, business descriptions, brand details.
Billing data: plan, Credit balance and ledger, transaction history, and payment-method metadata (e.g., card brand, last four digits, processor identifiers). We do not store full payment-card numbers — card data is handled by our payment processor (Stripe).
Content you submit or generate: prompts, Inputs, and Output (scripts, images, audio, video, courses, PDFs, email copy, etc.).
Voice and biometric data (voice-cloning features): if you use voice-cloning, the voice sample you provide is processed to create a synthetic voice. Where a voice sample is biometric data under applicable law (e.g., Illinois BIPA, Texas CUBI), we process it only to provide the feature at your direction, do not sell it, and retain it only as long as needed to operate the feature; you must have the voice owner's consent (see the Acceptable Use Policy).
Communications and support requests.

From Affiliates (in a Customer's program)

Profile and signup details (name, email, phone, business name, content/email preferences).
Submitted video links and public performance metrics, tracking-link and earnings/payout history, and agreement-acceptance records (terms version + timestamp).
Payout onboarding via Stripe Express: identity and bank/payout details are collected and held by Stripe, not by us; we receive only status flags (e.g., onboarding complete, payouts enabled) and account identifiers.

About End-Customers / leads / visitors (typically as processor)

Lead records you collect, import, or enrich: name, email, phone, company, job title, industry, size, location, URLs, and AI-derived attributes (e.g., pain points, lead scores).
Outreach data: email content and send/open/reply/bounce/unsubscribe events processed through the integrated email provider.
Affiliate tracking data: click events and timestamps, affiliate/video identifiers, referring and destination URLs, IP address (which may be hashed), device/browser data, cookie or similar identifiers, and conversion/sale events forwarded to us (typically via payment webhooks).
Public metrics: public engagement metrics (e.g., view counts) retrieved from host platforms.

Automated collection: logs, device and usage data, and cookies/similar technologies (see the Cookie Policy).

3. How we use information

provide, operate, secure, and support the Service, including AI generation, lead processing, outreach, affiliate tracking, attribution, and payouts;
process Credits, subscriptions, deposits, and payouts, and prevent fraud and abuse;
run AI features — your Content is sent to AI model providers to generate or analyze Output; we do not use your Content to train our own or third parties' generative models, and our providers process it under API terms that do not train their models on it;
send transactional and service messages and, where permitted, product updates you can opt out of;
maintain and improve the Service using aggregated, de-identified usage, performance, and cost metrics; and
comply with legal, tax, and accounting obligations and enforce our Terms.

If you enable SMS or other messaging channels for notifications, we and our messaging providers (among our subprocessors) process the mobile number you provide and the message content to deliver service messages to that number; standard message and data rates may apply, and you can opt out at any time (e.g., reply STOP or change your notification settings).

Legal bases (EEA/UK). Where GDPR/UK GDPR applies, we rely on: performance of a contract; legitimate interests (operating, securing, and improving the Service, and preventing fraud); consent (e.g., certain cookies and optional marketing); and legal obligation. You may withdraw consent at any time without affecting prior processing.

We do not sell personal information for money. We do not use End-Customer data for our own marketing. To the extent certain analytics cookies constitute "sharing" or a "sale" under U.S. state privacy laws, you can opt out as described in Section 8.

4. How we share information

With the relevant Customer: an Affiliate's profile, submissions, performance, and payout status are shared with the Customer operating that program.
Service providers (subprocessors): AI model providers, the email-outreach provider, payment processing, cloud hosting/storage, social-publishing tools, notifications providers, and error-monitoring/analytics. They act on our instructions.
Third parties you direct: when you connect your own accounts/keys or publish to social platforms, data flows to those services under their terms.
Legal and safety: to comply with law, enforce our Terms, or protect rights, safety, and against fraud.
Business transfers: in a merger, acquisition, financing, or reorganization, subject to this Policy.

5. Cookies and tracking

We and our providers use cookies and similar technologies for essential functionality, analytics, and — critically for affiliate features — click-to-conversion attribution. Blocking attribution cookies may prevent correct affiliate tracking. See the Cookie Policy for categories and choices. For EEA/UK visitors, non-essential cookies are set only with consent.

6. Data retention

We keep personal information only as long as needed, then delete or de-identify it. Indicative periods:

Category	Retention
Account/profile data	Life of the Account + the 30-day deletion recovery window, then purged
Financial, tax, and transaction records	7 years (legal/accounting requirements)
Server, access, and security logs	~90 days
AI generation request logs	~30 days
Customer lead data	Until deleted or the Account closes, then purged within the recovery window (minus records we must keep by law)
Affiliate click/conversion logs	Life of the program; payout-related records ~7 years

If you delete your Account, we begin deletion after the 30-day recovery window, except for records we are required or permitted to retain by law (e.g., financial records, fraud prevention, dispute resolution).

7. Security

We use reasonable technical and organizational measures, including encryption in transit, access controls, short-lived signed URLs for media, and secret management. Payment and bank credentials are handled by Stripe under its security program. No method of transmission or storage is perfectly secure.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, port, and restrict or object to processing, and to opt out of targeted advertising, "sale," "sharing," or certain profiling. We will not discriminate against you for exercising these rights.

How to exercise: email support@leadgenai.studio. We will verify your request and respond within the time required by law.
EEA/UK (GDPR/UK GDPR): you may also lodge a complaint with your supervisory authority; rights include access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.
California (CCPA/CPRA) and other U.S. state laws: you may request access, deletion, correction, and to opt out of sale/sharing and certain profiling, and to limit use of sensitive personal information.
Affiliates and End-Customers: if your data was collected on a Customer's behalf, we may direct or forward your request to that Customer (the controller) and assist as required.

Account deletion and Credits. Deleting your Account forfeits remaining Credits. The 30-day recovery window lets you restore the Account and balance before permanent purge.

9. International data transfers

We operate in the United States and process data there. If you are outside the U.S. (including in the EEA/UK or Canada), your information is transferred to and processed in the U.S. and other countries. Where required, we rely on appropriate safeguards such as the EU/UK Standard Contractual Clauses; contact support@leadgenai.studio for more information.

10. Children

The Service is for users 18 and older and is not directed to children. We do not knowingly collect personal information from children; if you believe a child provided us data, contact support@leadgenai.studio and we will delete it.

11. Changes to this Policy

We may update this Policy. Material changes will be notified by email or in-Service notice before they take effect; the "Last updated" date reflects the current version.

12. Contact

Privacy questions and requests, and general or legal enquiries: support@leadgenai.studio.