Privacy Policy
Last Updated: October 2, 2026
1. Introduction
LeadMove ("we", "our", or "us") operates as a Software as a Service (SaaS) platform for lead distribution: our customers ingest leads and route them to their buyers. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Data Controller vs Data Processor
It is important to understand the distinction between different roles in data processing:
- You (our customer) are the Data Controller for the leads you ingest into our platform
- LeadMove acts as a Data Processor, storing and processing leads on your behalf
- You are responsible for ensuring compliance with GDPR and other data protection laws when capturing leads
3. Information We Collect
3.1 Account Information
When you create a LeadMove account, we collect:
- Name and email address
- Organization name
- Password (encrypted)
- Billing information (processed securely through Stripe)
3.2 Lead Data (Processed on Your Behalf)
We store lead data that you send to our platform — via webhook, CSV import, or manual entry — including:
- Contact information (names, emails, phone numbers)
- The lead fields you define per pipeline (e.g. zip code, property type)
- Consent records and timestamps, where you provide them
- IP addresses and user agents
- UTM parameters and tracking data
3.3 Usage Data
We automatically collect information about how you use LeadMove:
- Login times and activity logs
- Feature usage and interactions
- Device information and browser type
3.4 Data from Meta (Facebook and Instagram)
When a customer connects a Facebook account to LeadMove to receive leads from Meta lead ads (instant forms on Facebook and Instagram), we store:
- The identifier and name of the connected Facebook account
- The identifiers and names of the Facebook Pages that account manages
- The access tokens Meta issues for that account and those Pages, encrypted at rest
- The answers submitted to the lead forms the customer links to LeadMove, which Meta sends us to provide the service on the customer's behalf, with the ad, ad set, campaign and form they came from
Purpose. We use this data only to retrieve the leads submitted to the forms the customer linked, and to route and deliver them as that customer configured. Form answers are lead data processed on the customer's behalf (section 3.2). We do not use data from Meta for advertising, we do not sell it, and we share it only at the customer's direction.
Retention. Access tokens are deleted when the customer disconnects the Facebook account. The record of each lead notification received from Meta is kept for 90 days. Leads themselves follow the retention of the customer's other lead data (section 8).
Deletion. A customer can disconnect at any time in Settings, Integrations. A person can also remove LeadMove from their Facebook account (Settings and privacy, Apps and websites), which stops our access, or request the deletion of their data through Facebook: we delete the connection, its account identifiers and its tokens, and give a confirmation code with a page to check the status of the request.
4. How We Use Your Information
- To provide and maintain our service
- To process and deliver leads to your configured destinations
- To send service-related notifications (delivery failures, system alerts)
- To improve our platform and develop new features
- To provide customer support
- To detect and prevent fraud or abuse
5. Data Sharing and Disclosure
We do not sell your data. We may share information in the following circumstances:
- At your direction: When you configure lead delivery to external systems (webhooks, email, Google Sheets)
- Service providers (sub-processors): With trusted third parties who help us operate our service. Full list below.
- Legal requirements: When required by law or to protect our legal rights
- Business transfers: In connection with a merger, acquisition, or sale of assets
6. Sub-processors
LeadMove relies on the following sub-processors to deliver the service. Each operates under a Data Processing Agreement and processes only the data needed for its purpose.
| Sub-processor | Purpose | Hosting region |
|---|---|---|
| Vercel | Application hosting & web analytics | US / EU |
| Supabase | Database (PostgreSQL) & authentication | US |
| Stripe | Payment processing & billing | US / EU |
| Resend | Transactional & lifecycle email delivery | US |
| Twilio | SMS delivery (optional, customer-provided) | US |
| OpenAI | AI-assisted lead scoring (can be turned off per organization) | US |
| Anthropic | AI assistant (optional, org-level) | US |
| PostHog | Product analytics | US / EU |
| Sentry | Error monitoring | US |
| Crisp | Customer support chat | EU (France) |
| Sanity | Blog & content management | EU (Netherlands) |
This list is updated when sub-processors change. By using LeadMove, you consent to the engagement of these providers in line with our data processing terms.
Third-party assistants you connect
You can connect an AI assistant of your choice — Claude, ChatGPT or another client — to your workspace from Settings › Developers. An assistant you connect is your sub-processor, not ours: it reads your account data, including lead contact details unless you turn on “Mask personal fields”, under the terms of whoever provides it. It is off until you connect one, and an owner or admin can switch it off, suspend it or revoke it at any time.
We never share your data with an assistant you have not connected, and a connection never gives access to payment details, passwords or API keys.
7. Data Security
We implement industry-standard security measures to protect your data, including encryption in transit and at rest, regular security audits, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
8. Data Retention
We retain your account data and lead data for as long as your account is active. When you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal or compliance purposes.
9. Your Rights (GDPR)
If you are in the European Economic Area (EEA), you have the following rights:
- Right to access: Request a copy of your personal data
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your data
- Right to restrict processing: Request limitation of how we process your data
- Right to data portability: Receive your data in a structured format
- Right to object: Object to our processing of your data
To exercise these rights, please contact us at the email address below.
10. Cookies
We use essential cookies to maintain your session and authentication. We do not use tracking cookies for advertising purposes. You can control cookies through your browser settings.
11. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.
13. Contact Us
For any questions about this Privacy Policy, or to exercise your data rights, please contact us at:
Email: hello@leadmove.io
We will respond to your request within 30 days.