Privacy Policy

This Privacy Policy explains how Lead Spine collects, uses, protects, and deletes information when you visit our website, create an account, connect a CRM sub-account or AI assistant, contact support, or use our services.

Lead Spine acts on your instructions when processing information from connected business accounts. You remain responsible for the customer data you choose to access and manage through the service.

Account information: your name, email address, company details, profile image, and preferences.

Connected-account information: identifiers, authorization details, account branding, permissions, and data returned by the CRM or AI service you authorize. We do not collect your CRM password.

Service activity: requested actions, results, timestamps, error details, and records needed for security, support, usage limits, and change history.

Billing and support: plan and transaction status from our payment provider, plus messages and attachments you choose to send our team. We do not store full payment-card numbers.

Website and device data: pages used, approximate location derived from network information, browser/device details, and diagnostics needed to operate and improve the service.

We use information to provide requested CRM and AI actions, keep connections available, authenticate users, enforce permissions and plan limits, prevent abuse, process billing, answer support requests, maintain activity records, and improve reliability.

We do not sell personal information, use connected CRM data for advertising, or use customer content to train public AI models.

When you ask a connected AI assistant to perform work, the information needed for that request may pass between the assistant, Lead Spine, and your selected CRM account. Each third-party service processes information under its own terms and privacy policy.

Lead Spine limits access to the sub-accounts and permissions you authorize. In a multi-account workspace, actions are directed to the selected sub-account.

We share information only with service providers that help us operate hosting, email, analytics, payment, security, and customer support; with connected services at your direction; when required by law; or as part of a business transaction subject to appropriate safeguards.

Providers receive only what they need for their role and are expected to protect it. We do not permit them to use your connected CRM data for their own marketing.

We use encrypted transport, encryption at rest for sensitive connection information, access controls, account isolation, monitoring, and least-privilege practices. No system can guarantee absolute security, so please report suspected misuse immediately through Support.

We keep account and connection information while your account or connection is active and as needed for security, billing, legal, and dispute obligations. Disconnecting stops future access through that connection and removes active authorization from Lead Spine.

Support and activity records may be retained for a limited period to resolve issues, maintain security, and meet legal obligations. Diagnostic interface recordings, when enabled, mask sensitive form and payment fields and are deleted after 48 hours; related usage events are deleted after 30 days.

You can request account-data deletion through Support. We will verify the request and delete or de-identify eligible data, subject to lawful retention requirements. Removing Lead Spine does not delete information held independently in your CRM or AI provider.

You can update profile information, disconnect CRM sub-accounts and AI applications, change permissions, cancel paid service, and request access, correction, export, or deletion of your personal information.

Depending on where you live, you may also have rights to object, restrict processing, or appeal a privacy decision. We will not discriminate against you for exercising a privacy right.

Lead Spine uses essential storage for sign-in, security, and preferences. We may use product analytics to understand page usage and diagnose errors. We do not use connected CRM data for behavioral advertising.

Our providers may process information in countries other than your own. Where required, we use recognized safeguards for international transfers and require providers to protect information consistently with this policy.

Lead Spine is a business service and is not intended for children under 13. We do not knowingly collect children's personal information.

We may update this policy as the service or law changes. The effective date shows the latest revision, and we will provide additional notice for material changes when appropriate.

For privacy questions or requests, use our Support page and select Privacy & data, or email support@leadspine.io.