Privacy Policy

Last updated: 17 August 2026

This policy explains what GOLEADX (“we”, “the service”) collects when you use goleadx.com, why we collect it, and the choices you have. It covers both the data of our customers and the business contact data our tools retrieve.

Who we are

GOLEADX operates a lead-generation tool that finds publicly available business contact information. For questions about this policy or your data, write to hello@goleadx.com.

Data we collect about you

• Account data. When you sign in with Google we receive your name, email address and profile picture. We do not receive or store your Google password, and we request no access to your Gmail, Drive or any other Google service.
• Subscription data. Your plan, subscription status, renewal date and credit usage.
• Search history. The keywords, locations and sources of the searches you run, together with how many results each returned.
• Technical data. Standard server logs, including IP address and browser type, kept for security and troubleshooting.
• Promotional code use. When you redeem a code we store the IP address the redemption came from, so that one launch code cannot be claimed repeatedly from the same connection using different email addresses. It is used for that check and nothing else, and is deleted with the rest of your account data.

We never see your card details. Payments are processed by Lemon Squeezy, which acts as the merchant of record. They handle the card data; we only receive the resulting subscription status.

Why we use it

• To create your account and keep you signed in.
• To determine which plan you are on and how many credits remain.
• To show your recent searches and provide support.
• To detect abuse and keep the service secure.

We do not sell your personal data, and we do not use it for advertising or profiling.

Business contact data found by the service

Our tools retrieve information that businesses have made publicly available — for example a company email address published on its own website, a public business listing, or a public social profile. We do not bypass logins, paywalls or technical access restrictions, and we do not buy contact databases.

Search results are held only for the duration of your session so that you can review and export them, and are not retained on our servers afterwards. Once you export a CSV, you become the controller of that data and are responsible for how you use it — including complying with GDPR, CAN-SPAM, ePrivacy and any other rules that apply to your outreach.

If you are a business owner and want your details excluded from results, email hello@goleadx.com and we will add you to our suppression list.

Who we share data with

We use a small number of processors, each for a specific purpose:

• Google — sign-in (authentication only).
• Lemon Squeezy — payments, invoicing and subscription management.
• Apify — runs data-collection jobs on their infrastructure when that backend is enabled.
• Our hosting provider — runs the application and its database.

We disclose data to anyone else only where the law requires it. Some of these providers operate outside your country; where data leaves the EEA it is transferred under the safeguards those providers maintain, such as Standard Contractual Clauses.

How long we keep it

Account, subscription and search-history records are kept while your account is active. If you close your account we delete this data within 30 days, except records we must keep for accounting and tax purposes. Server logs are rotated regularly.

Cookies and analytics

We set one essential cookie: your sign-in session. It is required for the service to work and cannot be turned off while you are logged in. Your theme preference is stored locally in your browser and never sent to us.

We also use Google Analytics to understand which pages people visit and where they arrive from. It sets its own cookies and shares aggregated usage data with Google. We do not use it for advertising, we do not sell what it collects, and we have not enabled ad personalisation. If you would rather not be counted, any browser-level tracking blocker or the Google Analytics opt-out add-on will stop it.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to processing, and to complain to your local data protection authority. To exercise any of these, email hello@goleadx.com. We respond within 30 days.

Security

Traffic is encrypted with TLS, access to production systems is restricted, and passwords are never stored because authentication is delegated to Google. No system is perfectly secure, but we take reasonable measures to protect your information and will notify affected users of any breach that presents a risk to them.

Children

The service is intended for business use and is not directed at anyone under 18. We do not knowingly collect data from children.

Changes

If we change this policy we will update the date at the top of this page, and we will notify active subscribers by email when a change is significant.

This document explains our actual practices in plain language. It is not legal advice — please have a qualified lawyer review it against the regulations that apply to your business before you rely on it commercially.