Legal

Privacy Policy

Last updated: June 2026  ·  Effective: June 1, 2026

FrictionLab ("we", "us", "our") operates LeadMate AI (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data. By using the Service, you agree to the practices described in this policy.

1. Information We Collect

Account Information

When you register for LeadMate AI, we collect your full name, email address, and password (stored in hashed form via Clerk). If you sign in via a third-party provider (Google, GitHub), we receive the profile information that provider shares with us.

Usage Data

We collect information about how you interact with the Service, including pages visited, features used, ICP configurations, lead searches performed, emails generated, and timestamps of these actions. This data helps us improve the product and diagnose issues.

Payment Information

Billing is handled entirely by Stripe. We do not store your credit card number or full payment details on our servers. We retain Stripe customer IDs, subscription plan, billing status, and transaction history.

Lead and Prospect Data

When you use our lead generation features, we process company names, job titles, email addresses, and professional information sourced through Apollo.io. This data is used solely to provide you with prospecting results within the Service.

Communications

If you contact us by email or through our contact form, we retain the content of your message and your contact details to respond to your inquiry.

2. How We Use Your Information

Providing the Service

We use your information to operate LeadMate AI, authenticate your account, process payments, generate AI-written outreach emails, surface scored leads, and deliver all other features you access.

AI Processing

Your ICP configurations and lead context are sent to Anthropic's Claude AI models to generate personalized outreach copy. Anthropic processes this data under their privacy policy and API terms of service.

Service Improvement

Aggregated and anonymized usage data helps us understand how the product is used, identify bugs, prioritize features, and improve overall quality.

Communications

We may send you transactional emails (account confirmations, billing receipts, security alerts) and, with your consent, product updates or marketing communications. You may opt out of marketing emails at any time.

Legal Compliance

We may use or disclose your data to comply with applicable laws, court orders, or regulatory requests, or to protect the rights and safety of our users and third parties.

3. Third-Party Services

Clerk (Authentication)

User accounts and authentication are managed by Clerk, Inc. Your login credentials, session tokens, and identity information are stored and managed by Clerk under their privacy policy.

MongoDB (Database)

Your application data — including ICP profiles, saved leads, usage records, and generated emails — is stored in MongoDB Atlas. Data is encrypted at rest and in transit.

Stripe (Payments)

All payment processing is handled by Stripe, Inc. We receive confirmation of successful payments and subscription status. Stripe stores your payment method details under their privacy and security standards.

Anthropic (AI)

AI-generated content (outreach emails, lead analysis) is produced via Anthropic's Claude API. Data sent to Anthropic is subject to their API usage policy. Anthropic does not use API inputs to train their models by default.

Apollo.io (Lead Data)

Lead discovery and enrichment data is sourced through Apollo.io. Apollo maintains its own data practices and privacy policy governing how it collects and manages professional contact data.

4. Data Retention

Active Accounts

We retain your data for as long as your account is active or as needed to provide the Service. Usage logs are retained for up to 12 months for security and debugging purposes.

Account Deletion

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., billing records, which are retained for 7 years under tax regulations).

Backups

Data may persist in encrypted backups for up to 90 days following deletion, after which it is permanently removed.

5. Your Rights

Access

You may request a copy of the personal data we hold about you at any time by contacting privacy@leadmateai.com.

Correction

You may update your name and email address from within your account settings. For other corrections, contact us directly.

Deletion

You may request deletion of your account and associated personal data. Submit a deletion request to privacy@leadmateai.com or delete your account via account settings.

Export

You may request an export of your data in a machine-readable format (JSON or CSV). We will fulfill export requests within 30 days.

Opt-out

You may opt out of non-essential marketing communications at any time using the unsubscribe link in any email we send, or by contacting us directly.

6. Security

We implement industry-standard safeguards including TLS encryption in transit, encryption at rest, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law.

7. Cookies

We use essential cookies and session tokens necessary to operate the Service (e.g., keeping you logged in). We do not use third-party advertising or tracking cookies. You may disable cookies in your browser settings, but this may impact certain features of the Service.

8. Children's Privacy

LeadMate AI is a B2B service intended for users aged 18 and older. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by displaying a prominent notice within the Service at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related inquiries, requests, or complaints, please contact: FrictionLab Dhaka, Bangladesh Email: privacy@leadmateai.com