Privacy Policy

Who we are

Leaddit is provided by Nomadan Apps Ltd, 148 Faneromenis Avenue, 3rd Floor Office, 6035 Larnaca, Cyprus. We are the controller of personal data used to operate Leaddit. Contact us at [email protected].

Leaddit finds public Reddit conversations relevant to your product, scores buyer intent, and drafts replies. You review, edit and post replies yourself.

Information we collect

We collect account details such as your name, email address and profile picture, authentication and session information, product descriptions and keywords, scan settings, saved leads and reply drafts. We also process public Reddit posts and their public author and subreddit information.

We collect service activity, error and security logs, including account actions, timestamps and network information needed to operate and improve the service. Our providers may process browser, device and IP information when delivering their services.

If you choose product-update emails, we record your choice, when it was made, the policy version and how it was recorded. Email delivery records include the recipient address, message identifier, delivery status and bounce, complaint or unsubscribe events.

How we use information

We use account and product information to provide the service, authenticate you, find and score relevant conversations, generate keywords and reply drafts, manage subscriptions and respond to support requests. Where applicable, this processing is necessary to perform our contract with you.

We use service and security records for our legitimate interests in maintaining reliability, preventing abuse and improving Leaddit. We also process information where necessary to meet legal obligations.

We use your optional email choice as consent for product announcements, relaunch invitations and other promotional updates. Creating an account or accepting this policy does not by itself subscribe you to those emails.

Your email choices

Product-update emails are optional. You can turn them on or off during onboarding or in Account settings. They include news about new features, product relaunches, onboarding tips and offers. You can unsubscribe using the link in an email, change your Account setting, or contact us. Withdrawing consent does not affect processing already carried out before withdrawal.

Account, authentication, billing, security and support messages are separate from optional product announcements. Lead-alert emails follow the Auto-scan email setting and have their own unsubscribe control. Turning off product updates does not turn off these service messages or lead alerts.

An updated privacy policy does not subscribe an existing account. We require a recorded opt-in before sending a product-update campaign.

Providers and sharing

We do not sell personal data. We share information needed to run the service with providers including Google for sign-in, MongoDB Atlas for database services, Hostinger for the server, Vercel for the website, Lemon Squeezy for payments, OpenAI for AI features, and Resend for email delivery.

OpenAI receives the product descriptions, relevant public Reddit content and other input needed to generate keywords, scores and reply drafts. Information you put into these inputs may include personal data; avoid including sensitive information that is not needed for the feature.

Resend receives your email address, the name used in the greeting, email content and delivery metadata. Resend and its infrastructure providers process this information to deliver messages, report delivery events and manage abuse and suppression. Each provider also has its own privacy notice.

We may disclose information where required by law, to protect legal rights or security, or as part of a business transfer subject to applicable protections.

International processing

Our providers operate in multiple countries. Information may be processed outside Cyprus and the European Economic Area, including in the United States. Our current Resend sending region is Tokyo, Japan; choosing a sending region does not mean all provider processing stays in that country.

For applicable international transfers, provider agreements may include safeguards such as the European Commission Standard Contractual Clauses. Resend’s Data Processing Addendum incorporates those clauses for applicable transfers. Contact us for information about the safeguards relevant to your data.

Retention and deletion

We retain account and product data while it is needed to provide the service. You can request deletion in Account settings or by contacting us. Account deletion removes the active account, associated product and lead records, and revokes its session tokens.

We retain a limited hashed record of deleted account information and usage for up to one year to prevent repeated free-tier abuse. This record is not a new mailing-list subscription.

Email message bodies in our sending queue are removed after the provider accepts them or permanently rejects the send. Delivery identifiers and status records are retained to prevent duplicate sends and investigate delivery problems. Pending or uncertain sends may retain the message while they await resolution; account deletion removes queued account emails.

A minimal address and reason may remain on a suppression list after a bounce or complaint so that we do not send further mail to that address. Provider records, backups and information required for legal or security purposes may remain subject to their retention periods. Contact us about a deletion or retention request.

Your rights

Where applicable, you can request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent. Contact [email protected] to exercise these rights; we may need to verify your identity.

You can lodge a complaint with your local data protection authority, including the Cyprus Commissioner for Personal Data Protection.

Security and children

We use HTTPS and access controls to protect information. No service can guarantee absolute security. Leaddit is not intended for children under 13. Contact us if you believe a child has provided personal information.

Changes to this policy

We publish updates on this page and change the date below. Where a material change requires additional notice or consent, we will provide it through an appropriate channel. A policy change does not retroactively grant permission for optional emails.