Privacy Policy

1. Who we are

LeadInSeconds ("LeadInSeconds," "we," "us") is a service operated by Intelligent Bytes LLC. LeadInSeconds notifies business owners by SMS and/or email when a visitor submits a contact form on the business's own website. This policy explains what data we collect, how we use it, and the rights you have over it.

2. Two kinds of data we handle

Account data — if you sign up for LeadInSeconds as a business, we collect your name, email address, the website(s) you register, your notification phone number and/or email, and billing information (processed by Stripe; we do not store full card numbers).

Lead data — when a visitor submits a contact form on a website that has installed the LeadInSeconds snippet, we receive whatever the form itself collects: typically name, email, phone number, and message content. We are a data processor for this data — the business using LeadInSeconds is the data controller and is responsible for having a lawful basis to collect it from their own visitors.

3. How we use data

• To deliver lead notifications by SMS (via Twilio) and/or email (via Resend) to the business's configured contact
• To operate the dashboard, authentication, and billing (via Supabase and Stripe)
• To enforce plan limits (e.g., monthly lead caps) tied to your subscription
• To respond to support requests

We do not sell lead data or account data to third parties, and we do not use lead data for advertising.

4. Who we share data with

We use a small number of subprocessors to run the service, each only for the specific function listed:

• Supabase — database hosting and account authentication
• Twilio — SMS delivery for lead notifications
• Resend — email delivery for lead notifications
• Stripe — subscription billing and payment processing
• Google — optional sign-in via Google OAuth, if you choose that login method

We do not share data with anyone else except where required by law.

5. Data retention

We retain account data for as long as your account is active, and lead data for as long as reasonably necessary to provide the service to the business that captured it. You can request deletion of your account and associated lead data at any time (see Section 7). We are working toward an automated retention schedule for lead records and will update this policy when that is in place.

6. Cookies and local storage

The LeadInSeconds dashboard uses cookies/local storage only for authentication session management (via Supabase Auth). We do not use advertising or tracking cookies. The LeadInSeconds website snippet installed on a customer's site does not set cookies — it reads form field values at submission time only.

7. Your rights

Depending on where you live, you may have rights under laws like the GDPR or CCPA to access, correct, or delete your personal data, or to object to certain processing. To make a request — whether you're a LeadInSeconds account holder or a lead whose information was submitted through a form using LeadInSeconds — use our contact page. If your data was submitted as a lead to one of our business customers, we may direct you to that business, since they control why the data was collected.

8. Children's privacy

LeadInSeconds is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 18.

9. Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions about this policy: use our contact page.