Privacy policy

Last updated: 25/08/2026

Two kinds of data, two different roles

Leadsoon processes your account data on one side, and on the other the prospects’ contact details your campaigns bring you. These two kinds of data follow different rules, and the distinction matters.

1. Your account data

Your identity: name, email address, company, password (stored as a hash).
Your answers: sector, offer, area, budget, goal, resources: what is needed to build the campaign.
Your activity: campaigns prepared, results entered, messages written.
Your messages: the content of the contact form.

For this data, Leadsoon is the controller. It is used only to run the service. It is neither sold nor passed to third parties for advertising.

1a. The newsletter

If you sign up from the footer, we keep your email address, the sign-up date and a truncated fingerprint of your IP address (proof of the sign-up, without the address itself). It is used only to send you our tips and news. Every email contains an unsubscribe link; one click is enough, and you can also write to us from the contact page.

2. Your prospects’ contact details

This data passes through two pairs of hands, and responsibility changes along the way.

At collection, Leadsoon is the controller. Leadsoon runs the ad, hosts the form and collects the answer. The person is told so when filling in the form: they know they will be put in touch with the business advertised, and which one.

Once the details are passed on, you in turn become controller for what you do with them: calling back, following up, a sales offer, keeping them. You answer the access, correction and deletion requests these people send you.

In both cases:

A prospect is passed to one business only. Leadsoon does not resell the same contact to several customers and pools nothing between accounts.
Leadsoon does not use your contacts for its own sales.
You can view, export and permanently delete a contact at any time.
When a person asks Leadsoon to erase their data, the request is carried out and passed on to the business they were sent to.

3. The emails you send

Messages are sent in your name, from Leadsoon. The content, pace and targeting are up to you. Leadsoon keeps a record of sends, opens and replies so you can follow your exchanges, and enforces two non-negotiable safeguards: an unsubscribe link in every message, and an immediate stop to any sending to a person who has unsubscribed or reported a message.

4. Assisted writing

When automatic rewording of ad texts is on, only the information you entered about your offer (business, sector, city, customers) is sent to the processing provider, for the duration of the call. No prospect data is ever sent, and the strategy is still calculated locally.

5. Cookies

Two cookies are set, both needed for the site to work: the session cookie, required to keep you signed in and to keep your creation flow from one page to the next, and the light or dark theme you chose, remembered so we do not ask again on every visit. No advertising tracker, no third-party analytics, and neither is read by a third party. The details are in the legal notice.

Under the GDPR, you have the right to access, correct, erase, restrict and port your data. Write to us from the contact page: we answer within a month.

Deleting your account erases your campaigns, your contacts, your history of exchanges and your results records.

Signing in with Google or Facebook. From these services we receive only your name, your email address and a technical identifier, and we post nothing on your behalf. To delete this data, first remove Leadsoon from your account (Facebook: Settings & privacy › Settings › Apps and websites; Google: myaccount.google.com › Security › Your connections to third-party apps), then ask for your Leadsoon account to be deleted from the contact page. It is done within thirty days.

If you are a prospect and want your details removed, first contact the business that got in touch with you: it is their decision. If you get no answer, write to us and we will pass it on.

7. Share links

A campaign sheet can be shared through a read-only link. This link contains a random token: anyone who has it can view the sheet. Share it only with the people concerned. No contacts appear on these shared sheets.

8. Base map

The geographic targeting screen can show a road map. The base map is provided by OpenFreeMap (data © OpenStreetMap): when the map is shown, your browser downloads the map images directly from this service, which then sees your IP address, as with any image loaded from a third-party site. No other data is sent to it: not the area you entered, not your business, not your account. If the map does not load, a diagram drawn by Leadsoon takes its place.

9. Hosting and retention

The servers that host the service are located in the European Union. The publisher, Scale4Scale LLC, is a company incorporated under US law: as such, it may access from the United States the data needed to run and support the service. No data is passed to a third party, sold or used for advertising.

Your contacts are kept for as long as you keep them in your CRM; the data of a closed account is erased within thirty days.

10. Controller

The controller is Scale4Scale LLC, whose full details are in the legal notice. Any request can be sent to contact@leadsoon.ai or through the contact page.