Privacy Policy

This Privacy Policy explains how ValueColony Ltd ("ValueColony", "we", "us") collects and uses personal data when you use Leadova (the "Service"). ValueColony Ltd is the data controller for personal data processed through the Service.

1. Data we collect

• Account data — name, email, hashed password, authentication provider IDs.
• Mailbox data — when you connect Gmail or Outlook, we access inbound email metadata and message contents needed to detect leads, draft replies, and run your leak scan.
• Billing data — handled by Stripe; we store a customer reference, subscription status, and the last 4 digits / brand of the card.
• Usage & telemetry — log data, IP address, device/browser, error traces, and product analytics.

2. How we use it

• To provide, secure, and improve the Service.
• To detect leads, score intent, and generate AI replies on your behalf.
• To process payments, send transactional email, and provide support.
• To comply with legal obligations.

3. Legal bases (UK/EU GDPR)

• Contract — to deliver the Service you have subscribed to.
• Legitimate interest — to secure the Service, prevent abuse, and improve product quality.
• Consent — for optional marketing emails and non-essential cookies.
• Legal obligation — for tax, accounting, and lawful requests.

4. Sub-processors

We share data only with vetted sub-processors that support the Service:

• Supabase (database & auth hosting)
• Cloudflare (edge hosting & WAF)
• Stripe Payments Europe, Limited (billing & tax)
• Google LLC (Gmail API, when you connect Gmail)
• Microsoft Corporation (Graph API, when you connect Outlook)
• OpenAI, Google, and Anthropic (AI model providers, via the Lovable AI Gateway)

5. International transfers

Some sub-processors are located outside the UK/EEA. Where required, transfers are protected by Standard Contractual Clauses or an adequacy decision.

6. Retention

We retain account and mailbox data for as long as your account is active. After cancellation, data is deleted within 30 days, except where we are required to retain records (e.g. invoices for tax purposes).

7. Your rights

Subject to applicable law, you can request access, rectification, deletion, portability, or restriction of your personal data, and you can object to processing. Email privacy@leadova.app. You may also lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

8. Security

We use TLS in transit, encryption at rest, role-based access control, audit logging, and least-privilege access for staff.

9. Cookies

We use strictly necessary cookies for authentication and session management. Optional analytics cookies are only set with your consent.

10. Contact

ValueColony Ltd · privacy@leadova.app