Privacy Policy

1. Who We Are

LeadRot is operated by Amortoae Petru PFA(CUI 52361814), registered in București, România. When this policy says “we,” “us,” or “LeadRot,” it means the entity above.

LeadRot is a B2B prospecting tool. Our customers are businesses and individuals who use our service for commercial prospecting. We do not provide services to consumers.

2. Two Categories of Data We Handle

We handle two fundamentally different categories of data, and they have different rules:

• Customer data — information about you, the person using LeadRot.
• Search result data — information about the businesses our tool finds for you.

3. Customer Data

What we collect:

• Email address (for authentication via magic link)
• Display name (if provided)
• Usage data: searches run, credits consumed, export activity, login timestamps
• Server logs: IP address, browser type, referring URL, timestamps
• Payment data: handled entirely by Lemon Squeezy (our MoR)

Why we collect it:

• To authenticate you and manage your account
• To process your scrape requests and manage credit balance
• To send you transactional emails (magic links, receipts)
• For service improvement and debugging
• Legal compliance and fraud prevention

Legal basis (GDPR): Contract performance (Art. 6(1)(b)) for account and service data. Legitimate interest (Art. 6(1)(f)) for server logs and fraud prevention.

4. Search Result Data (Business Data)

LeadRot collects publicly available business data from Google Maps and public websites. This includes:

• Business names, addresses, phone numbers, and website URLs from Google Maps
• Technical website analysis (screenshots, Lighthouse scores, SSL status, page weight, mobile-friendliness, technology stack)
• AI-generated critique of the business's website design

All of this data is publicly accessible — we do not scrape anything behind a login, paywall, or authentication barrier. If you are a business owner and want your data removed, see Section 7.

5. Third-Party Processors

We do not sell your data. We do not share it with advertisers. We do not use tracking pixels, retargeting, or analytics platforms.

6. Data Retention

• Account data: Retained while your account is active, plus 30 days after deletion request.
• Search results: Cached for 15 days, then automatically purged.
• Server logs: Retained for 90 days for debugging and fraud prevention.
• Payment records: Retained as required by Romanian and EU tax law (typically 10 years).

7. Your Rights

If you are a LeadRot customer:

• Access: Request a copy of all data we hold about you.
• Deletion: Request complete account and data deletion.
• Portability: Receive your data in a machine-readable format.
• Rectification: Correct inaccurate data.

If you are a business owner:

Your public business data may appear in our search results. You can request removal by emailing info@leadrot.com with your business name and address. We will remove it within 7 business days.

For formal requests, use our Data Subject Request page.

8. CCPA / CPRA (California)

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. California residents have the right to know, delete, and opt-out. Contact info@leadrot.com to exercise these rights.

9. PIPEDA (Canada)

Canadian residents have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA). We collect and process publicly available Canadian business data for B2B prospecting purposes. Canadian customers may request access to, correction of, or deletion of their personal information by contacting info@leadrot.com.

10. Australian Privacy Act 1988

Australian residents have rights under the Privacy Act 1988 and the Australian Privacy Principles (APPs). We collect and process publicly available Australian business data for B2B prospecting purposes. Australian customers may request access to or correction of their personal information by contacting info@leadrot.com.

11. Cookies

We use essential cookies only — no tracking, no ads, no analytics. See our Cookie Policy for the full list.

12. Children

LeadRot is a B2B tool. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it immediately.

13. Changes

We may update this policy. Material changes will be emailed to registered users. Continued use after changes constitutes acceptance.

14. Contact

Questions about privacy? Email us at info@leadrot.com.

Amortoae Petru PFA
CUI: 52361814
București, România