01About this policy
This policy explains how LeadTerminal handles personal data when you visit leadterminal.ai, use app.leadterminal.ai, connect an email account, or appear as a business contact in the service. LeadTerminal is provided by A1 Consulting Oy, Finland.
Contact us at info@leadterminal.ai about this policy or your personal data.
02Our role and your organisation’s role
LeadTerminal is responsible for how it processes account, support, security and independently collected business-directory data. When an organisation uses the service to manage its own contacts, messages and campaigns, that organisation decides the purposes of that processing and LeadTerminal processes the data to provide its requested service.
Customers are responsible for their own outreach notices and lawful basis. Where required, the parties must enter into a data processing agreement; this policy does not replace that agreement.
03Information we handle
Account and support information includes your name, work email, organisation, account identifiers, team membership, settings and information you submit to us. Workspace information includes imported or saved contacts, lists, campaign instructions, message drafts, sent messages, replies and campaign activity.
Business-directory information may include professional names, roles, business contact details, company affiliations and source information from official registers, company websites, public professional sources and customer submissions. We also process technical information such as IP addresses, browser details, timestamps, authentication events and service logs needed to operate and protect the service.
04Why we use information
We use information to provide accounts and team workspaces, search and organise business information, prepare and deliver customer-approved messages, match replies, provide support, prevent misuse and maintain the service. We process account information as necessary to perform our agreement with you, or on our legitimate interest in administering an organisation’s account.
Our legitimate interests also include maintaining relevant business information, securing the service and responding to requests. We rely on consent where required for optional features and on legal obligations where applicable.
Public availability of a business email address does not by itself authorise every type of marketing.
05Google and Microsoft email connections
Connecting an account is optional. Google access uses gmail.send to send messages on your behalf and userinfo.email to identify the connected sender.
Microsoft access uses User.Read to identify the signed-in account, Mail.Send to send messages on its behalf, and offline_access to maintain the connection without repeated sign-in. We store the sender identity, connection settings and access and refresh tokens on our server.
These connections are used for the sending features you request. They do not grant inbox-reading access.
Messages you send, their recipients and send records may remain in your workspace and in your email provider’s systems.
06Separate inbox connections
If you separately configure an IMAP inbox connection, we process the connection credentials and the messages retrieved for inbox and reply-handling features. This is separate from Google or Microsoft send-only authorisation.
Do not connect an inbox unless you are authorised to use it and to make its relevant contents available to your organisation’s workspace.
07Google data and Limited Use
Information obtained through Google APIs is used only to provide and improve the user-facing email features you request. It is not sold, used for advertising or used to train general-purpose artificial intelligence models.
Human access is limited to your permission for a specific purpose, security needs, legal requirements, or other cases permitted by Google’s policy. LeadTerminal’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
The policy is linked below.
08AI-assisted features and email activity
When you request AI-assisted research or drafting, relevant instructions, company and contact information, and any content supplied to that feature may be processed by an AI service provider to generate the result. Review generated content before using it.
Do not include information you are not authorised to share. If a sender enables email-open tracking, messages may contain a small image that records an open event and related technical data.
Image blocking and automated scanners can affect these records. Delivery, bounce, reply and unsubscribe events may also be recorded.
Senders are responsible for required notices and permissions for tracking and outreach.
09Who receives information
Authorised people in your workspace can access information according to their role and the features you use. Business-directory results are made available to customers for professional use.
Service providers process information needed for hosting, authentication, email delivery, AI features and technical support; these include Hetzner for hosting, Clerk for sign-in and account authentication, and Google, Microsoft or your configured email provider for connected email features. An AI service provider processes information supplied to the AI feature you request.
Contact info@leadterminal.ai for the provider and transfer details relevant to your use of the service. Messages and recipient details are sent to the relevant email providers and recipients when you send.
We may disclose information where required by law or necessary to protect legal rights and service security. We do not sell connected-mailbox data or OAuth tokens.
We do not sell or rent private customer workspace data, account information or connected-mailbox data, or provide it to third parties for their own advertising. Such information is used to deliver, secure and support the app, comply with legal obligations and carry out your instructions.
This does not mean that no external provider processes information: the service providers and recipients described above are involved where needed for the features you use. Business-directory information available through the app is distinct from private customer workspace data.
10Storage, security and international processing
The service is hosted on Hetzner infrastructure. We use HTTPS, server-side credential handling and access controls to protect information.
No service can guarantee absolute security. Connected providers and other service providers may process data outside your country, including outside the European Economic Area.
Where applicable, transfers must use a lawful mechanism, such as an adequacy decision or standard contractual clauses and any necessary supplementary safeguards. Contact us for information about processing relevant to your account.
If a personal-data breach affects data we process for a customer, we will notify that customer without undue delay after becoming aware of it. We will notify authorities and affected individuals where required by applicable law.
11Retention, disconnection and deletion
We retain account and workspace information while it is needed to provide the service and address support, security or legal requirements. Retention depends on the data’s purpose, your account status, deletion requests and any applicable record-keeping obligations.
Contact us to request account or workspace deletion. Disconnecting a Google or Microsoft sender removes its connection record and stored tokens from the active application database; it does not delete previously sent messages or campaign history.
Google disconnection also attempts to revoke the grant. You can revoke access directly in your Google or Microsoft account.
Backup copies may remain until replaced in the backup cycle, and limited records may be retained where legally required or necessary to honour an unsubscribe request.
12Your choices and rights
Subject to applicable law, you can request access, correction, deletion, restriction and portability of your personal data, withdraw consent, and object to processing based on legitimate interests. You can object to direct marketing at any time.
Use the unsubscribe option in a message or contact its sender; contact LeadTerminal about information held in our directory. Withdrawal does not affect earlier lawful processing.
We may need to verify your identity and will respond within the period required by law. For data controlled by a customer, we may refer your request to that customer.
You may complain to the Finnish Office of the Data Protection Ombudsman or your local supervisory authority. Send requests to info@leadterminal.ai with the subject “Privacy request”.
Tell us whether you seek access, correction, deletion or exclusion from our directory, and provide the email address or public profile needed to locate the record. Do not send identity documents unless we request them through an appropriate channel.
An objection to future use may require keeping a minimal suppression record to avoid adding the same information again.
13Cookies and changes
The service uses cookies and browser storage for sign-in, secure account connections, preferences and related operational functions. Email-open tracking is separate from these website functions.
This policy does not treat optional tracking as necessary or replace any consent required by law. We may update this policy as the service changes.
The date at the top identifies the current version; material changes will be brought to your attention through appropriate service notices.