Privacy Policy

1. Who we are

No Lead Lost ("we," "us," or "our") operates the website and services available at noleadlost.com. We provide a lead capture and qualification widget that businesses ("customers") embed on their websites to engage with their visitors ("end users").

Questions about this policy can be directed to support@noleadlost.com.

2. Information we collect

From customers (businesses using No Lead Lost):

• Account information: name, email address, password
• Payment information: processed securely by Stripe — we never store card numbers
• Widget configuration: questions, qualification logic, calendar settings, notification email addresses
• Usage data: number of leads captured, plan usage, login activity

From end users (visitors to customer websites):

• Contact information voluntarily submitted: first name, last name, email, phone, website URL
• Responses to qualifying questions
• IP address
• Page URL visited and referrer
• UTM parameters present in the URL
• A first-party identifier (nll_vid) stored in the browser's local storage, used to recognize returning visitors
• On paid plans with visitor identification enabled: business contact and professional information matched to the visitor by our identification partner, described in section 4 below

3. How we use information

Customer information is used to:

• Provide, operate, and improve the No Lead Lost service
• Process payments and manage subscriptions
• Send transactional emails (welcome, lead notifications, usage summaries)
• Respond to support requests

End user information is used to:

• Deliver lead data to the customer whose widget the end user interacted with
• Determine qualification status based on the customer's configured logic
• Identify the visitor and their company for the customer's site (paid plans only)

We do not sell end user data to third parties. We do not use end user data for advertising purposes.

4. Visitor identification (paid plans)

Customers on paid plans can enable visitor identification, which attempts to match anonymous visitors on the customer's website to business contact information so the customer can follow up.

How it works:

• When identification is enabled, the widget loads a script from our identification partner, Datamoon, on the customer's website.
• The partner uses the visitor's IP address, device signals, and identifiers to match the visitor against its database of business contact information.
• When a match is found, we receive and store a record that may include: name, business email address, business phone numbers, LinkedIn profile URL, job title, seniority, and function, employer name, website, industry, size, and revenue range, and, where available, age range and gender.

We deliberately do not store consumer financial attributes (such as income or net worth), home addresses, or precise location coordinates: these fields are removed before any record is saved, even if our partner provides them.

Identified visitor records are made available only to the customer whose website the visitor visited. Visitor identification is designed for business audiences on United States-directed websites.

Opting out: to opt out of identification and have your identified record deleted, email support@noleadlost.com. We will delete your records, forward your request to our identification partner, and suppress future identification of your record within our systems. You may also contact the business whose website you visited. We additionally honor the Global Privacy Control browser signal: when your browser broadcasts GPC, the identification script is not loaded at all.

5. Data sharing

We share data only with the following categories of third parties, and only as necessary to operate the service:

• Supabase — database and authentication hosting
• Stripe — payment processing
• Resend — transactional email delivery
• Vercel — application hosting
• Datamoon (paid plans) — visitor identification: matches site visitors to publicly available business contact and company information

Customers may configure integrations (Zapier, HubSpot, Salesforce) that transmit lead data to their own third-party systems. We are not responsible for data handling by those systems once transmitted.

6. Data retention

Customer account data is retained for the duration of the account. Lead data, including identified visitor records, is retained indefinitely unless deletion is requested. If you cancel your account, you may request deletion of your data by emailing support@noleadlost.com.

End users may request deletion of their data, including identified visitor records, by contacting us directly or by contacting the business whose widget they interacted with.

7. Cookies and tracking

The No Lead Lost application uses session cookies required for authentication. The widget installed on customer websites does not set cookies by default. The widget stores a first-party identifier (nll_vid) in the browser's local storage to recognize returning visitors across sessions; on paid plans this identifier is also used by our visitor identification provider. Customers on paid plans may optionally enable Meta Ads, Google Ads, or Google Tag Manager pixels, which may set their own cookies subject to those providers' policies.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), encrypted storage, and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's privacy

No Lead Lost is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at support@noleadlost.com and we will delete it.

10. Your rights

Depending on your location, you may have rights to access, correct, or delete your personal data, or to object to or restrict certain processing. This includes the right to opt out of visitor identification as described in section 4. To exercise these rights, contact us at support@noleadlost.com.

11. Changes to this policy

We may update this policy from time to time. We will notify customers of material changes by email or by posting a notice in the dashboard. Continued use of the service after changes constitutes acceptance of the updated policy.