Compliance
Responsible data, in writing.
We process business contact data for B2B prospecting. Here's where we stand, what we've published, and how anyone can control their data. We only show a badge once it's real.
Version 1.0 · Last updated [DATE]
Documents
Where we stand
Terms, Privacy, DPA
PublishedPlain-language documents covering customers and people in our dataset.
GDPR
Program alignedLegitimate-interest assessment, opt-out, access and deletion requests, DPA with SCCs.
CCPA / CPRA
Rights honoured"Do not sell or share" requests handled through the opt-out page within [45] days.
SOC 2 Type I
PlannedReadiness work underway. Target date [QUARTER]. We'll post the report here, not before.
How we source data
- Only licensed suppliers and public sources we're permitted to use. Nothing from behind a login.
- Every field carries its source, licence scope and the date it was last checked.
- A field is served only if it passes permitted-use, quality and suppression checks.
- Business data only. No sensitive categories, no personal home addresses.
Subprocessors
| Subprocessor | Purpose | Location |
|---|---|---|
| [Cloud hosting provider] | Application hosting, database, backups | [Region] |
| [Payment processor] | Subscription billing | US |
| MillionVerifier | Primary email verification | [Region] |
| Reoon | Second-opinion email verification | [Region] |
| [Email provider] | Transactional and opt-out emails | [Region] |
| [Analytics provider] | Product analytics (customers only) | [Region] |
Web scraping runs on our own self-hosted infrastructure. We give [30] days' notice before adding a subprocessor.
Security
TLS in transit, encryption at rest.
Least privilege, role-based admin, key rotation.
Every ingestion, merge, deletion and export is logged.
Customers notified within [72] hours of a confirmed breach.
Your privacy choices
Remove yourself from Leadsets, or opt out of sale/sharing under CCPA.
No account needed. Requests: privacy@leadsets.ai
Draft. Statuses, subprocessors and timelines must be confirmed before publishing. Never show a certification badge until the report exists.