1. Information We Collect

We collect information necessary to provide our services, including:

• Account Data: Email address (verified via Firebase Authentication), name, and professional profile details you provide during registration.
• Communication Data: Chat logs within the "LeadChat" section, stored securely to facilitate your business discussions and deal negotiations.
• Technical Data: IP addresses, browser types, device information, and usage data collected by our infrastructure for security, authentication, and analytics purposes.
• Profile Information: Company name, role, expertise, social media links, and other professional information you choose to share.

We do not collect sensitive personal data (e.g., financial information, health data, or political opinions) unless you voluntarily provide it in your communications.

2. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contractual Necessity: To provide the lead generation and chat services you requested by signing up, we must process your professional contact information and communication data.
• Legitimate Interests: To maintain platform security, prevent fraud, and improve our services.
• Legal Obligations: To comply with applicable laws and regulations.
• Consent: Where required, we will obtain your explicit consent before processing your data for specific purposes.

3. Data Storage & Security

All databases, including chat data, are saved on secured servers provided by highly reliable cloud infrastructure providers (Google Cloud Platform / Firebase).

Access Control: No Leadizzy employees or staff have access to your private chat data unless required by law, for critical system maintenance, or with your explicit permission. Access is logged and audited regularly.

We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Regular security assessments and vulnerability scanning
• Multi-factor authentication for administrative access
• Automated backup and disaster recovery procedures

4. Your Rights (UK/EU/US/Global)

Under the GDPR, UK GDPR, CCPA, and other applicable privacy laws, you have the following rights regarding your personal data:

California Residents (CCPA): You have the right to know what personal information is collected, request deletion, opt-out of the sale of personal information (we do not sell your data), and not be discriminated against for exercising your privacy rights.

5. How to Exercise Your Rights

To request data deletion, access, portability, or any other privacy right, you must use our internal support channel:

• Go to the Add Lead section
• Search for members with the leadizzy.com domain
• Select the profile for support@leadizzy.com
• Send your request via submit add lead with the subject line "PRIVACY REQUEST"

Requests are processed within 30 days. We may require verification of your identity before processing your request to protect your data from unauthorized access.

For urgent matters or if you do not receive a response within 30 days, you may contact our Data Protection Officer by selecting profile having support@leadizzy.com email address in add lead section.

6. International Transfers

As a global platform, your data may be processed on servers located outside of your home country (including the US, EU, or other regions). We ensure all cloud providers meet international security standards through:

• Standard Contractual Clauses (SCCs) as approved by the European Commission
• EU-US Data Privacy Framework compliance where applicable
• Adequacy decisions and binding corporate rules where relevant

By using Leadizzy, you acknowledge that your data may be transferred to and processed in countries that may have different data protection laws than your country of residence.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with services. Specifically:

• Account Data: Retained until you request account deletion
• Chat Logs: Retained for the duration of your account plus a reasonable period to resolve disputes
• Technical Logs: Retained for up to 12 months for security and debugging purposes

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain certain information for legal compliance, fraud prevention, or dispute resolution.

8. Cookies & Tracking Technologies

We use essential cookies to authenticate users, maintain session security, and remember your preferences. We do not use third-party advertising cookies. You may disable cookies in your browser settings, but this may affect platform functionality.

9. Children's Privacy

Leadizzy is a platform intended for businesses, professionals and individuals aged 18 years or older. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us immediately so we can delete it.

10. Third-Party Disclosures

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your data:

• With other users as part of the LeadChat functionality (your profile information and messages are visible to conversation participants)
• With service providers who assist us in operating the platform (e.g., cloud hosting, authentication)
• When required by law, legal process, or to protect the rights and safety of Leadizzy, our users, or the public
• In connection with a merger, acquisition, or sale of assets (with notice to affected users)

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an in-app notification via LeadChat
• For significant changes, sending an email to the address associated with your account

Your continued use of Leadizzy after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Information & Data Controller

If you are located in the EU/EEA, you have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.

GDPR Compliance Summary

Leadizzy is committed to full compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the UK GDPR, and other applicable data protection laws. Key compliance measures include:

• Lawful Processing: We process data based on Contractual Necessity, Legitimate Interests, and Legal Obligations
• Data Minimization: We only collect data necessary for platform functionality
• Transparency: This Privacy Policy clearly explains our data practices
• User Rights: Full implementation of access, rectification, erasure, portability, restriction, and objection rights
• Data Security: Industry-standard encryption and access controls
• Breach Notification: We will notify affected users and relevant authorities within 72 hours of discovering a data breach