Privacy Policy
Last updated
This policy explains what personal data ULeads collects when you visit uleads.io or use the app, why, who else processes it, and what you can ask us to do with it. It describes how the product actually works today.
1. Who we are
ULeads is a web service at uleads.io that helps people who sell to local businesses find those businesses on Google Maps and keep track of who they have contacted. In this policy “ULeads”, “we” and “us” mean the operator of uleads.io, which decides how the personal data described here is used.
For anything about your data, write to [email protected]. ULeads is not affiliated with Google.
2. The short version
- We collect what is needed to run your account and the searches you make — nothing about you is sold.
- Analytics cookies load only after you accept them. Product usage is measured in our own database.
- Payments are in crypto through NOWPayments. We never see or hold wallet keys.
- Product emails can be switched off with one click; account emails cannot, because you need them.
- You can ask for a copy of your data or for your account to be deleted at any time: [email protected].
3. What we collect and why
| Data | When | Why |
|---|---|---|
| Account details: name, email address, password, workspace name | When you register | To create and secure your account and send account emails. Passwords are stored only as a one-way hash (bcrypt); we cannot read them. |
| Google or GitHub sign-in: the account ID at that provider, your email and name | If you choose to sign in with Google or GitHub | To sign you in. We request only basic profile and email access and never receive your password for those services. |
| Signup context: IP address, browser user agent, and the source that first brought you to the site (UTM tags, referring site, landing page) | Once, at registration | To stop abuse and duplicate free accounts, and to know which channels bring customers. |
| What you do in ULeads: searches (city, category, country, keyword, filters), results you open, leads you save, statuses, next steps, notes, exports and plan usage | While you use the product | To provide the service, enforce plan limits and show your history. |
| Product events, such as “search started”, “lead saved” or “export completed”, with a timestamp and the time you were last active | While you use the product | To understand how ULeads is used and where it falls short. Events are stored in our own database, contain no business names, phone numbers or text you typed, and are not shared with advertising services. |
| Billing: plan, billing period, payments (amount, currency, status, invoice number, the payment provider's reference) and billing details you choose to add (company name, VAT ID, address, billing email) | When you pay or edit billing details | To activate plans, issue receipts and meet accounting obligations. |
| Support messages, together with your name, email, workspace and plan | When you write to support | To answer you. Messages from the in-app form are delivered to our team's private Telegram chat. |
| Email preferences, and for product emails whether a link in them was clicked | When we email you | To respect unsubscribes and learn which emails are useful. |
| Technical data: IP address, request logs, error reports | On every request | To keep the service secure and fix faults. |
4. Your location
The home page suggests a city for your first search in two ways:
- Automatically.Our server reads the country that Cloudflare attaches to your request and looks up your IP address with the ipwho.is service to suggest a city. The guess is kept in our server's memory for up to an hour and is not stored with your account.
- “Use my location”. Only if you click it and allow your browser to share your position, your coordinates are sent from your browser to BigDataCloud, which turns them into a city name. We do not receive the coordinates; the city name is remembered in your browser.
5. Business listing data
Searches return what businesses publish about themselves on Google Maps: name, category, address, phone number, website, rating, number of reviews, number of photos and a Google Maps link. This describes businesses, not private individuals, and ULeads does not collect owners' names or email addresses.
The results of a search are reused for anyone who runs the same search within 30 days, so the same market is not looked up twice. Your own search history and the leads you save keep the details as they were at the time of the search, until you delete them or your account.
If you represent a business and want its details removed from ULeads, write to [email protected].
7. Emails we send
Account emails are always sent, because the account does not work without them: email confirmation, password reset, payment confirmation and receipt, and a reminder a few days before a crypto-paid month ends.
Product emails help you get value from the account — for example a welcome note, results you have not looked at yet, your free search being available again, leads waiting in your pipeline, follow-ups due today or a plan limit reached. We send at most one every 48 hours. Occasional announcements to customers fall in the same group. We send these because you are a customer, and every one carries an unsubscribe link; Gmail and Outlook also show a one-click unsubscribe button. Unsubscribing does not affect account emails.
8. Who processes data for us
We do not sell personal data. We share only what each provider needs to do its job:
| Provider | What for | What it receives |
|---|---|---|
| Cloudflare | DNS, content delivery and security in front of uleads.io | Every request to the site, including your IP address |
| Our hosting provider | Servers and database, located in Europe | All data stored by ULeads |
| Business data from Google Maps; Google sign-in if you use it; Google Analytics through Tag Manager if you accept cookies | Search terms (city, category, country, keyword) without your identity; sign-in data; analytics data | |
| GitHub | Sign-in, if you choose it | Sign-in data |
| NOWPayments | Cryptocurrency payments | The plan price, an order reference and description. You pay on NOWPayments' page, under their terms |
| Google Workspace | Delivering account and product emails | Your email address and the email content |
| Sentry | Error monitoring for our servers, when enabled | Technical details of a failed request. Configured not to send personal data by default |
| Telegram | Internal notifications to our team | New signups (name, email, workspace, signup source), purchases and support requests |
| ipwho.is | Suggesting your city from your IP address | Your IP address |
| BigDataCloud | Only when you click “Use my location” | Your coordinates, sent directly from your browser |
Some of these providers process data outside your country, including in the United States. We may also disclose data when the law requires it.
9. Staff access
To investigate a problem you report, authorised ULeads staff can open your workspace in a support session. A session lasts at most 15 minutes, cannot change your password, workspace settings or billing, and is recorded in an audit log.
10. How long we keep data
- Account, workspace, searches, leads and notes: for as long as the account exists.
- After you ask us to delete your account, we remove it with its workspace, searches, leads and notes within 30 days. Database backups are kept for 14 days, so deleted data disappears from them within 14 days after that.
- Invoices and payment records: for the period accounting and tax law requires, then deleted.
- Server logs and error reports: for a limited period, only as long as needed to run and fix the service.
11. Security
Passwords are hashed, email confirmation and password reset links are single-use and expire, keys for external services stay on our servers and never reach your browser, and all traffic uses HTTPS. No system is perfectly secure; if something goes wrong that affects your data, we will tell you.
12. Your rights
You can ask for access to your data, a copy in a portable format, correction, deletion, or restriction of how it is used, and you can object to processing based on our legitimate interests. Write to [email protected] from the address on your account; we will answer within one month.
To delete your account, send the same request. Product emails can be stopped at any time with the unsubscribe link, without deleting anything. If you think we have handled your data wrongly, you can also complain to the data protection authority where you live.
13. Children
ULeads is a business tool and is not meant for anyone under 16.
14. Changes to this policy
When this policy changes, the date at the top changes with it. If a change affects how your data is used, we will tell registered users by email before it takes effect. The terms of service are at /offer.
15. Contact
Privacy questions and requests: [email protected]. Everything else: [email protected].