Privacy Policy

Alongside the records you create, Leadesi keeps a few logs on its own.

Lead activity. Every lead carries a timeline of what has happened to it - stage changes, notes, calls you log, and emails sent or received. It is part of the lead record and is deleted along with it.

Text message notifications. When Leadesi sends a booking confirmation, reminder, or cancellation by SMS, we record the number it went to, what kind of message it was, whether it sent, and when. We do not keep the text of the message itself.

Help chat. If you ask the in-app help assistant a question, we store your question and the answer it gave, so we can see where the product confuses people. These are deleted automatically after 90 days.

We do not run session recording, and we do not use a third-party error-tracking service. Our hosting and database providers keep ordinary server access logs, as any web host does.

In transit. Everything travels over TLS. Leadesi is not served over plain HTTP.

At rest. The database is encrypted at rest by our hosting provider.

Account isolation. Every record in Leadesi carries the account it belongs to, and Postgres row-level security enforces that at the database level - not only in application code. A query made under your session can only return your own account's rows.

Connected accounts. When you connect Gmail, Google Calendar, or Xero, the access tokens are encrypted with AES-256-GCM before being stored, using a key held outside the database. A copy of the database on its own does not give anyone access to your mailbox or accounting data.

Sign-in. You sign in with Google, or with an email address and password. We never see or store your password - it is hashed by our authentication provider.

Payment details. Card numbers never reach Leadesi's servers. Payment and billing happen on Stripe's hosted pages; we store only a customer reference and your subscription status.

Access inside your account. People you invite hold a role - owner, admin, or member - and settings that change how the account works are restricted to owners and admins at both the application and the database layer.

Our access. Leadesi staff do not browse customer data. Access to production is limited to the people who maintain the service, and is used only to fix a fault or to answer a support request you have raised.

Leadesi is a CRM. It is designed to hold names, contact details, notes about a job, bookings, and email correspondence. It is not designed to hold sensitive information - health or medical details, government identifiers such as a driver's licence, passport, or tax file number, card or bank account numbers, or information about a person's race, religion, sexuality, or political views.

Please do not enter that kind of information into lead notes, custom fields, or attachments. If your business genuinely needs to record something in one of these categories, contact us before you do - we would rather tell you honestly whether Leadesi is the right place for it.

Where sensitive information does reach us anyway - inside a forwarded email thread, for example - it is protected by the same measures described above: encrypted in transit and at rest, isolated to your account by row-level security, and deleted when you delete the record or close your account.

Keeping you signed in. Leadesi sets functional cookies that are necessary to keep you signed in and to remember your preferences. The product does not work without them.

Understanding how our site is used. Our marketing site uses Google Analytics, loaded through Google Tag Manager, to understand how people find and move around it - which pages are viewed, roughly which part of the world you are in, and which site referred you. We look at this in aggregate to decide what to improve. These scripts load only if you accept them in the cookie banner shown on your first visit - until you do, no analytics runs and no analytics cookies are set.

Analytics runs on our marketing site only. The Leadesi app itself - where your leads, clients, and email live - carries no analytics trackers at all. We do not run advertising or retargeting pixels on either site, and your customer data is never sent to Google.

Your choices. The cookie banner asks before any analytics loads. Choose "Change settings" in the banner to turn analytics off and save that choice. You can change your mind at any time through the "Cookie settings" link in the footer - your choice is remembered in a small functional cookie for six months, after which we ask again. Beyond that, you can block or delete cookies in your browser settings, and Google publishes a Google Analytics opt-out add-on for the major browsers. Declining or blocking affects nothing about how the Leadesi app works for you.