Privacy Policy

We collect information you provide, information created through your use of the service, information received from connected services, and business information from public or licensed sources.

• Account and authentication data, such as name, email address, password credentials in protected form, profile image, email-verification status, authentication provider identifiers, sessions, IP address, and user agent.
• Business profile and workspace data, including company name, website, location, industry, service area, brand details, social links, buyer personas, search preferences, and content supplied by users.
• Lead and prospect data, such as business names, websites, business contact details, locations, reviews, social profiles, services, team information, decision-maker details, enrichment sources, notes, scores, pipeline status, and outreach drafts. This data may be supplied by a customer or found in public and licensed business-data sources.
• AI and generated-content data, including instructions, source material, summaries, scores, messages, content plans, images, and feedback used to provide requested features.
• WhatsApp Business data, including connected WhatsApp Business Account and phone-number identifiers, encrypted access tokens, approved template metadata, sending settings, marketing-consent records and evidence, approved sequence snapshots, recipient numbers, rendered messages, Meta message identifiers, delivery status, errors, and inbound replies needed to pause automation and hand off the conversation.
• Subscription and billing data, including plan, subscription status, billing interval, customer and subscription identifiers, and payment events. Payment card details are collected and processed by our payment provider, not stored by ScoreLead in full.
• Communications, including contact-form submissions, waitlist entries, support requests, and emails you send us.
• Usage, device, and security data, including feature use, usage counters, logs, timestamps, approximate location inferred from IP, cookies, and similar technologies. Optional analytics is loaded only after the site records your consent.

• You, your organization, and other authorized workspace users.
• Connected services, including Google authentication, payment providers, Meta and WhatsApp, and services you ask us to integrate.
• Public business websites, maps, directories, social profiles, search results, and public records.
• Licensed business-data, search, enrichment, hosting, analytics, and infrastructure providers.
• Your browser and device when you use ScoreLead.

A phone number or other contact detail appearing publicly does not by itself establish consent to receive marketing messages. Customers must establish their own lawful basis and, for automated WhatsApp outreach, record a valid opt-in before sending.

Depending on the context and applicable law, we rely on performance of a contract, legitimate interests, consent, compliance with law, or another lawful basis. Where consent is the basis, it may be withdrawn, although prior lawful processing remains valid.

• Provide, operate, personalize, and improve ScoreLead, including discovery, enrichment, scoring, AI generation, exports, and outreach workflows.
• Authenticate users, maintain sessions, manage accounts and workspaces, and provide customer support.
• Process subscriptions, prevent fraud, enforce plan limits, and maintain financial records.
• Connect customer-owned WhatsApp Business accounts, synchronize approved templates, schedule approved sequences, deliver messages, process delivery events, and stop automation when consent is revoked or a reply arrives.
• Protect the service, investigate misuse, debug failures, preserve audit records, and comply with legal obligations.
• Send transactional communications and, where permitted, product or marketing communications that can be opted out of.
• Produce aggregated or de-identified statistics that do not reasonably identify an individual.

Customers are responsible for the data they place in ScoreLead and for instructions they give us. This includes confirming that collection, enrichment, export, and outreach are permitted; providing required notices; honoring objections and opt-outs; and maintaining any consent or other lawful basis required for contact.

For WhatsApp marketing automation, ScoreLead is designed to require an approved message sequence, a current recorded opt-in, an approved Meta template, a connected business account, and send-time guardrails. These controls support compliance but do not replace the customer’s legal responsibilities or Meta’s rules.

ScoreLead uses artificial intelligence providers to analyze business information and generate summaries, lead scores, outreach drafts, content, and images. Relevant prompts, instructions, and source data may be sent to those providers to fulfill a request. We configure and select providers with data protection in mind, but their processing is also governed by our agreements with them.

AI output can be incomplete, outdated, or inaccurate. Users must review output before relying on or sending it. ScoreLead does not use an AI-generated lead score by itself to make legal or similarly significant decisions about an individual on our own behalf.

We do not sell personal information for money. We disclose information only as needed to operate the service, follow customer instructions, complete a transaction, protect rights and safety, or comply with law.

• Service providers for cloud hosting, databases, file storage, security, authentication, email, analytics, customer support, search, enrichment, AI, and payment processing.
• Meta and WhatsApp when a customer connects an account or sends messages through the WhatsApp Business Platform.
• Authorized users of the same customer workspace and recipients chosen by the customer.
• Professional advisers, auditors, insurers, authorities, or courts when reasonably necessary or legally required.
• A successor or participant in a merger, financing, reorganization, acquisition, or sale of assets, subject to appropriate confidentiality and notice requirements.

ScoreLead and its providers may process information in countries other than the country where it was collected. Privacy laws in those countries may differ. Where required, we use contractual, organizational, or other lawful safeguards for international transfers and make additional information available on request.

We keep information only for as long as reasonably needed to provide the service, maintain the customer relationship, meet legal and accounting obligations, resolve disputes, enforce agreements, protect the service, and preserve necessary audit trails. Retention depends on the type of information and why it is processed.

When an account or integration is disconnected, we delete or de-identify information when it is no longer needed, subject to legal holds, fraud and security records, billing records, consent and opt-out evidence, and limited residual copies in protected backups that expire through ordinary backup cycles.

We use administrative, technical, and organizational safeguards intended to protect information, including access controls, encrypted transport, protected credentials, and encryption of WhatsApp business access tokens at rest. No system is completely secure, and we cannot guarantee that unauthorized access or loss will never occur.

You are responsible for using a strong password, protecting your devices and credentials, limiting workspace access, and notifying us promptly if you suspect unauthorized use.

Depending on where you live and how ScoreLead processes your information, you may have rights to receive information about processing; confirm whether we process your data; access, correct, update, anonymize, block, delete, or port data; object to or restrict certain processing; withdraw consent; opt out of marketing; request review of certain automated decisions; and complain to a data protection authority.

We may need to verify your identity and authority before completing a request. Some rights are subject to exceptions, including where information must be retained by law, for security, to protect others, or to establish or defend legal claims. If ScoreLead processes your data solely for a customer, we may direct the request to that customer or assist them in responding.

ScoreLead uses necessary browser storage and cookies for authentication, security, preferences, and application functions. Our public site also offers optional analytics. Those analytics tools are not loaded unless the site records an accepted cookie choice. You can decline optional analytics in the cookie notice and can clear site storage in your browser to reset that choice.

ScoreLead is a business service and is not directed to children under 18. We do not knowingly request that children create accounts. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.

We may update this policy as the service, providers, or legal requirements change. We will post the revised version here, change the effective date, and provide additional notice when a change is material and applicable law requires it.

Questions, complaints, and privacy-rights requests can be sent to [email protected]. Please describe your relationship with ScoreLead and the request clearly. You may also contact the data protection authority in your jurisdiction.