Legal

Privacy Policy

Effective date: 2 July 2026

This Privacy Policy explains how LeadOS Technologies FZE and its affiliates ("LeadOS", "we", "us") collect, use, store, share, and protect information when you use our website, platform, or any of our services (collectively, the "Services"). By using the Services, you agree to this Privacy Policy.

1. Who this policy applies to

This policy applies to:

  • Business customers — companies and individuals who subscribe to LeadOS Services.
  • End users — individuals who interact with our customers' businesses through LeadOS-powered channels (e.g. chatbots, booking forms, WhatsApp integrations).
  • Website visitors — anyone visiting myleados.ai or any LeadOS-operated domain.

Our business customers act as independent data controllers for any personal data of their own customers processed through LeadOS. We act as a data processor in those circumstances and process data only on the customer's instructions.

2. What information we collect

2.1 Information you provide directly

  • Account registration details: name, email address, phone number, business name, role.
  • Billing information: processed securely by Stripe. LeadOS does not store full card numbers.
  • Business configuration: website URL, niche, target locations, brand settings, and any content or data you upload or configure within the platform.
  • Communications: messages you send to our support team, email correspondence, and any enquiries submitted through our website.

2.2 Information collected automatically

  • Usage data: features used, pages visited, actions taken within the platform, session timestamps.
  • Device and technical data: IP address, browser type, operating system, referring URLs, device identifiers.
  • Log data: server logs, API request logs, error logs retained for security and debugging purposes.
  • Cookies and tracking: we use essential cookies to operate the platform and analytics cookies to understand usage. See Section 9 for details.

2.3 Information from third-party integrations

When you connect third-party platforms to LeadOS (such as WhatsApp Business, Meta, Google, or your website), we may receive data from those platforms as authorised by you. This may include:

  • Conversation messages and metadata from connected messaging channels.
  • Contact details and interaction history synced from external CRMs.
  • Search Console data from Google (when Google Search Console integration is connected).
  • Booking, appointment, and transaction data from connected scheduling or payment tools.

2.4 AI-generated content and Auto SEO

When you use Auto SEO or other AI features, we process your business configuration (niche, location, keywords, website URL) to generate content. Content generation requests are sent to AI model providers (such as Anthropic). Please refer to those providers' policies for information on how they handle inference data.

3. How we use your information

We use the information we collect to:

  • Provide, operate, maintain, and improve the Services.
  • Process payments and manage subscriptions.
  • Generate and publish AI content on your behalf where you have configured Auto SEO or similar features.
  • Authenticate users and maintain account security.
  • Send transactional communications (account confirmations, invoices, security alerts, service updates).
  • Send marketing communications where you have opted in (you may opt out at any time).
  • Respond to support enquiries and resolve disputes.
  • Comply with legal obligations and enforce our Terms of Service.
  • Analyse usage patterns to improve product performance and user experience.
  • Detect, prevent, and investigate fraud, abuse, or security incidents.

4. Legal basis for processing (GDPR / UAE PDPL)

Where applicable data protection law requires a legal basis for processing, we rely on:

  • Contract performance — processing necessary to deliver the Services you have subscribed to.
  • Legitimate interests — security monitoring, fraud prevention, product improvement, and analytics, where these interests are not overridden by your rights.
  • Legal obligation — where we are required to process data to comply with applicable law.
  • Consent — for marketing communications and non-essential cookies, where required by law.

5. Data sharing and disclosure

We do not sell your personal data. We may share your information with:

  • Service providers — trusted third-party vendors who process data on our behalf to operate the Services (hosting, payments, email delivery, AI model inference, analytics). These providers are bound by data processing agreements.
  • Third-party platforms — when you connect integrations (WhatsApp, Google, Meta, WordPress, etc.), data is shared with those platforms as necessary to provide the integration you requested.
  • Legal and regulatory authorities — where required by law, court order, or to protect the rights and safety of LeadOS, our customers, or the public.
  • Business transfers — in the event of a merger, acquisition, or sale of assets, customer data may be transferred as part of that transaction. We will provide notice before any such transfer takes effect.

6. Data retention

We retain your data for as long as your account is active or as necessary to provide the Services. After account termination:

  • Account data is retained for up to 90 days to allow for reactivation or dispute resolution, then deleted.
  • Billing records and transaction logs are retained for up to 7 years to comply with financial record-keeping obligations.
  • Conversation and content data may be retained for shorter periods depending on the nature of the data and applicable legal requirements.

7. Data security

We implement industry-standard technical and organisational security measures to protect your data, including:

  • Encryption of data in transit (TLS/HTTPS) and at rest.
  • Role-based access controls and tenant data separation.
  • Regular security reviews and vulnerability assessments.
  • Incident response procedures.

No method of transmission over the internet or electronic storage is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

8. International data transfers

LeadOS operates globally and your data may be transferred to and processed in countries outside your own, including the United Arab Emirates and countries where our service providers are located. Where required by law, we ensure appropriate safeguards are in place for such transfers (such as standard contractual clauses or equivalent mechanisms).

9. Cookies

We use cookies and similar tracking technologies on our website and platform:

  • Essential cookies — required for authentication, session management, and basic platform functionality. Cannot be disabled.
  • Analytics cookies — help us understand how visitors use the website (e.g. page views, traffic sources). You can opt out via our cookie preferences or browser settings.
  • Marketing cookies — used to deliver relevant advertising where you have consented. You can withdraw consent at any time.

10. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Correction — request correction of inaccurate or incomplete data.
  • Erasure — request deletion of your personal data, subject to legal retention requirements.
  • Portability — request transfer of your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Restriction — request that we restrict processing in certain circumstances.
  • Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at privacy@myleados.ai. We will respond within 30 days. We may need to verify your identity before processing your request.

11. Children's privacy

The Services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will take steps to delete it.

12. Links to third-party websites

Our website and platform may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or a notice within the platform. The updated policy will be effective from the date stated at the top of this page. Continued use of the Services after that date constitutes acceptance of the updated policy.

14. Contact us

For privacy-related enquiries, data subject requests, or complaints:

Email: privacy@myleados.ai

LeadOS Technologies FZE, United Arab Emirates

If you are located in the EU/EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.