Privacy policy

This policy explains how LeadMapper (we, us and our) handles personal information when you visit our website, request a trial, create an account or use our business prospecting software. It also covers business listing information that may identify an individual, such as a sole trader.

For privacy questions or requests, use the contact page on this website and identify your message as a privacy enquiry. If you use LeadMapper for an organisation, that organisation is responsible for how it uses the information it collects or uploads through the service.

Account and contact information includes your name, email address, company information you provide, account preferences and messages sent through our forms or support channels. Our authentication provider handles passwords; passwords are not made available to support staff in readable form.

Service information includes search terms and locations, search results, saved leads, notes, tasks, pipeline stages and activity records. Only upload information you are authorised to provide. Do not upload sensitive personal information, payment card details or confidential credentials into lead records or notes.

Billing information includes the plan or credit pack purchased, currency, invoices, payment status and identifiers used to reconcile payments. Stripe processes payment card details directly. LeadMapper does not store full card numbers or card security codes.

Technical information includes IP addresses, browser and device information, page views, account activity, errors and security events. We collect this through the website and app, server logs, essential storage, anti-abuse tools and, where enabled, analytics.

We collect information directly from you, from your use of the service, from payment and infrastructure providers, and from providers of public business listing data. Without information needed for an account or transaction, we may be unable to provide that feature.

LeadMapper retrieves publicly listed business details associated with Google Maps searches through business data providers. Results may include business names, addresses, phone numbers, website links, categories, ratings, opening hours and location coordinates where available. Public availability does not mean personal information can be used without restriction.

Customers choose their searches and decide which results to save, export or contact. We process their saved records to operate the service. If a listing identifies you and you have a concern, contact us with the listing link and relevant details. We can investigate information held in LeadMapper; changes to the original public listing must also be addressed with its publisher.

We use information to create and secure accounts, issue trial access, run searches, store customer records, provide exports, administer credits and subscriptions, process payments, respond to enquiries and maintain the service.

We use technical and usage information to diagnose faults, prevent fraud and misuse, assess performance and understand which public pages are useful. Where analytics is enabled, it also receives page performance measurements such as loading time and layout shifts. We do not send customer names, email addresses, search terms, saved lead content or invite codes to Google Analytics.

We may send account, security, billing and service messages needed to operate your account. If we send optional marketing messages, you can unsubscribe using the method in the message. We do not sell your account information or private lead notes to advertisers.

Providers that help deliver LeadMapper include Supabase for database and authentication services, Railway for hosting, Cloudflare for network security and form protection, Stripe for payments, Resend for email delivery and Google Analytics for website measurement where enabled. Business data providers receive search information needed to retrieve listings.

Providers receive information relevant to their role and process it under their own service and privacy terms. We may disclose information to professional advisers or authorities where needed to meet legal obligations, protect people or investigate misuse. If the business is transferred, relevant information may be transferred with it, subject to applicable privacy obligations.

We use access controls, authentication, encrypted connections and operational monitoring to protect information. No internet service can guarantee complete security. Keep your sign-in details confidential and contact us promptly if you suspect unauthorised access.

Our infrastructure and providers may store or process information in Australia, the United States and other countries in which they operate. Provider locations can change. Contact us for information about providers or processing locations relevant to your account. We take reasonable steps to protect information handled through our providers and comply with applicable requirements for overseas disclosure.

We retain account information and customer records while needed to provide the service and administer your account. Billing, transaction, security and support records may be retained after an account closes where reasonably needed for legal obligations, dispute resolution, fraud prevention or enforcing agreements.

Activity and error logs, including associated IP addresses, are subject to a rolling 12-month retention process. Deleted information may remain in backups until replaced through their normal lifecycle. Cancelling a subscription does not automatically delete your account or saved records; contact us to request account deletion.

You can update available account details in the app and export supported business records using its export features. Contact us to request access to or correction of personal information, account deletion, or information about our handling practices. Include enough detail to locate the information, but do not send passwords or payment card details.

We may verify your identity. Requests are assessed under applicable law; some information may need to be retained, or access limited to protect another person or meet legal obligations. We will explain any material limitation.

Contact us first about a privacy complaint so we can investigate and respond. You may also contact the Office of the Australian Information Commissioner or another regulator where you have a right to do so. Additional access, erasure, objection or portability rights may apply depending on your location and the law governing the processing.

Cookies and browser storage support sign-in, security, trial abuse prevention and preferences. Cloudflare Turnstile protects public forms against automated misuse. Blocking essential storage may prevent sign-in or other features from working.

Google Analytics measures public pages and the sign-up and first-purchase journey when enabled. It is restricted to our production domain and does not measure signed-in dashboard pages. When you later buy a plan, a plan upgrade or a credit pack from Billing, our server tells Google Analytics what was bought and the amount, linked to the analytics identifier already stored in your browser; this only happens if analytics is allowed in that browser. We ask visitors in supported European regions for an analytics choice and apply regional consent defaults. Other visitors can control their choice through Cookie settings in the website footer.

Analytics may use online identifiers and device information. Declining analytics prevents its initial loading; if already loaded, declining updates its storage consent and removes the analytics cookies from your browser. Advertising storage and Google advertising signals are disabled.

We may update this policy as the service or our practices change. The date at the top identifies the current version. Additional notice of material changes will be provided where required by applicable law.

Send privacy questions, requests or complaints through the contact page on this website. Include a reply address and the information needed to understand your request.