Privacy Policy.

Account data — When you register, we collect your name, email address, and payment information. Payment data is processed by Stripe or Paystack and we do not store full card numbers.

Usage data — We collect information about how you use Leadash, including pages visited, features used, and actions taken. This helps us improve the product.

Lead data — Contacts you upload, scrape, or import into your workspace are stored in your private workspace. We do not access, sell, or share your lead data with third parties.

Communication data — Email subjects, bodies, and metadata for sequences you create are stored and processed on your behalf to deliver the service.

Device and log data — We automatically collect IP addresses, browser type, operating system, and referral URLs when you use the platform.

To deliver, maintain, and improve the Leadash platform.

To process payments and manage your subscription.

To send transactional emails such as account confirmations, receipts, and security alerts.

To monitor for abuse, fraud, and violations of our Terms of Service.

To analyse aggregate usage patterns for product development. No personally identifiable data is used in these analyses.

We do not sell your personal data. We share data only in these circumstances:

Service providers — We use third-party services including Supabase (database hosting), Stripe and Paystack (payments), and Vercel (infrastructure). Each operates under their own privacy policy.

Legal obligations — We may disclose data when required by law, court order, or to protect the rights and safety of Leadash and its users.

Business transfers — In the event of a merger, acquisition, or sale of assets, data may be transferred as part of that transaction. We will notify users before their data is transferred.

We retain your data for as long as your account is active or as needed to provide services. If you cancel your account, your workspace data is retained for 30 days before permanent deletion, giving you time to export.

You can request deletion of your account and all associated data at any time by contacting support@leadash.com. Deletion is processed within 30 days.

If you are located in the European Economic Area, you have the following rights under GDPR:

Right of access — Request a copy of the personal data we hold about you.

Right to rectification — Correct inaccurate or incomplete data.

Right to erasure — Request deletion of your personal data ('right to be forgotten').

Right to data portability — Receive your data in a structured, machine-readable format.

Right to restrict processing — Limit how we use your data in certain circumstances.

Right to object — Object to data processing based on legitimate interests.

To exercise any of these rights, email support@leadash.com. We will respond within 30 days.

We use essential cookies required for authentication and security (session tokens). We do not use third-party advertising cookies.

Analytics cookies (if enabled) collect anonymous usage data to help us improve the product. You can opt out at any time via your browser settings.

The Leadash app for iOS and Android gives you access to the same workspace as the web platform, and everything above applies to it equally. Two things are specific to the app:

Push notifications — If you allow notifications, we store a push token issued by Apple or Google (via Expo), the platform you are on, and your device name, so we can deliver alerts about replies, campaign milestones, and inbox health to the right device. You can turn individual alerts off in the app under Settings, revoke notifications entirely in your device settings, or sign out to remove the device from your account.

No advertising or tracking — The app contains no advertising, no third-party analytics or attribution SDKs, and no cross-app or cross-site tracking. We do not collect your contacts, location, photos, or device advertising identifier.

Payments are never taken inside the app. Where a purchase applies, you are handed to our payment provider in a browser, and card details are entered there rather than in the app.

We apply industry-standard security practices: TLS encryption in transit, AES-256 encryption at rest for sensitive credentials, regular security audits, and role-based access controls.

Despite these measures, no system is perfectly secure. If you discover a security vulnerability, please report it responsibly to support@leadash.com.

We may update this Privacy Policy from time to time. We will notify registered users by email at least 14 days before material changes take effect. Continued use of the platform after that date constitutes acceptance of the updated policy.

This policy was last updated on 7 October 2026.

Questions about this policy? Reach our team at support@leadash.com and we will respond within 2 business days.