Política de privacidade

This policy explains what information Leadnote collects, why, and the choices you have.

1. Information we collect

• Account details: your name, company, email address and a salted hash of your password
• Workspace content: leads, customer details, tasks, quotes, invoices and notes that you or your team add
• Usage data: pages visited, features used, device and browser type, and approximate location from IP address
• Messages you send us through the contact form

2. How we use it

• To provide, secure and improve the service
• To send account, billing and security messages
• To respond to your questions
• To detect abuse, such as spam submissions and repeated sign-up attempts

3. Customer data we process for you

For the leads and customer details you store in Leadnote, you decide what is collected and why, and we process it on your instructions as your service provider. You are responsible for having a lawful basis, including consent where required, to contact those people.

4. Sharing

We do not sell personal information. We share it with infrastructure and communication providers that help us run the service, bound by confidentiality and data-protection terms, and when the law requires it.

5. Retention and deletion

We keep workspace data while your account is active. The Account Owner can delete the whole organisation in the app or on the web: after a 7 day period in which the request can be cancelled, we sign everyone out and delete the workspace content, usually within minutes. Any other user can delete their own account straight away. Records we must keep for tax and accounting (invoices and payment records of the subscription, without contact details) are kept for 8 years after the end of the financial year. Encrypted backups are overwritten as they rotate. Contact-form messages are kept for up to 24 months. Step by step instructions are on the Delete account page.

6. Security

Passwords are hashed, sessions use secure cookies, and access to production data is limited and logged. No system is perfectly secure, so we also encourage unique passwords and limited admin roles.

7. Your rights

Depending on where you live you may have the right to access, correct, export or delete your personal information, and to object to some processing. Use the contact page to make a request and we will respond within 30 days.

8. Cookies and similar technologies

We use a small number of essential cookies, none of them for tracking or advertising: the sign-in session cookie that keeps you signed in; a security cookie that remembers a trusted device when you choose that at two-factor sign-in; a language cookie that remembers the language you pick; and, for about fifteen minutes after you finish the account setup questions, a short-lived cookie that shows the confirmation screen. We also keep your cookie choice in your browser storage.

On the public site (not inside the signed-in app) you can allow optional tracking. When the site operator has switched them on, analytics tools (Google Analytics or Google Tag Manager, and Microsoft Clarity) load only if you allow analytics, and marketing tags (the Meta Pixel and the LinkedIn Insight Tag) load only if you allow marketing. These providers can set their own cookies and receive information such as your IP address, the pages you visit and your device and browser details, under their own privacy policies.

Nothing from these providers loads before you choose, and a Do Not Track or Global Privacy Control signal from your browser is treated as a refusal. You can change your choice at any time with Cookie settings in the page footer.