1Introduction
Leadxus ("we", "us", or "our") provides an automated lead management platform that connects to your Gmail account to detect inbound lead emails, extract lead data using AI, and send automated reply emails on your behalf.
This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using Leadxus you agree to the practices described here.
2Information We Collect
Account Information
When you register we collect your name, email address, and hashed password — or a Google OAuth token if you sign in with Google.
Google User Data
When you connect a Gmail account, Leadxus requests the following Google API scopes:
https://www.googleapis.com/auth/gmail.readonlyRead incoming emails to detect lead enquiries.
https://www.googleapis.com/auth/gmail.sendSend automated reply emails on your behalf.
https://www.googleapis.com/auth/gmail.modifyLabel or mark emails as processed after a lead is detected.
https://www.googleapis.com/auth/pubsubReceive real-time push notifications when new emails arrive.
We access only the email metadata and body content necessary to detect lead enquiries. We do not read, store, or process emails unrelated to lead detection.
Lead Data
When a lead is detected, we extract and store contact details present in the email (name, phone, email address, service requested) in your Leadxus account. This data belongs to you and is visible only to your team.
Usage Data
We collect standard server logs (IP address, browser type, pages visited, timestamps) for security monitoring and service improvement. This data is not sold to or shared with third-party advertisers.
3How We Use Google User Data
Leadxus's use of data received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
Gmail data is used only to:
- Detect and classify inbound lead emails in your connected Gmail inbox.
- Extract lead contact information (name, phone, email, enquiry details) from those emails.
- Send automated reply emails to leads using your Gmail account.
- Maintain a real-time Gmail Watch subscription for instant lead notifications.
We do not use Gmail data to:
- Serve advertisements.
- Train AI or machine-learning models beyond your own account.
- Share, sell, or transfer your Gmail data to any third party.
- Access emails unrelated to lead detection.
4Data Sharing
We do not sell your personal data. We share data only in limited circumstances:
Service providers
Third-party infrastructure (cloud hosting, database) who process data on our behalf under strict data processing agreements.
n8n Workflows (optional)
If you enable n8n integrations, lead data you configure to be sent to your n8n webhook is transferred to your own instance. We do not control what n8n does with that data.
Legal requirements
We may disclose data if required by law, court order, or to protect the rights and safety of Leadxus or its users.
5Data Retention
Lead data and email metadata are retained for the duration of your subscription plus 30 days after account deletion to allow for data export. After that period, all your data is permanently deleted from our systems.
OAuth tokens (Google refresh tokens) are stored encrypted in our database and are deleted immediately when you disconnect your Gmail account or delete your Leadxus account.
6Security
We protect your data with:
AES-256 encryption for all OAuth tokens at rest
TLS/HTTPS encryption for all data in transit
JWT auth with short-lived access tokens and refresh rotation
Rate limiting and brute-force protection on all endpoints
In the event of a data breach affecting your personal data, we will notify you within 72 hours as required by applicable law.
7Your Rights and Choices
Revoking Gmail Access
Disconnect your Gmail account at any time from Email Settings, or revoke access directly from your Google Account permissions.
Data Access and Portability
Export your lead data as CSV from the Leads page at any time. For a full data export or deletion, contact privacy@leadxus.com.
Account Deletion
Delete your account from Settings. This permanently removes your account, all connected integrations, and lead data within 30 days.
GDPR / CCPA Rights
If you are in the EU/EEA or California, you have additional rights including access, correction, deletion, and portability. Contact privacy@leadxus.com to exercise these rights.
9Children's Privacy
Leadxus is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us immediately.
10Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app banner. The "last updated" date at the top always reflects the most recent revision.
11Contact Us
For any privacy-related questions or requests:
Leadxus Privacy Team
privacy@leadxus.com