Privacy Policy — LeadGenRunner

1. Introduction

Welcome to LeadGenRunner ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our lead generation service at leadgenrunner.com and associated applications.

By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

This policy applies to all users of the LeadGenRunner platform, including the web application, notification bots, and any related APIs.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect:

Username or email address
Password (stored in hashed, encrypted form using industry-standard algorithms)
Account creation date and time

2.2 Telegram Account Information

When you connect a Telegram account, we collect and store:

Phone number (for authentication purposes only)
Telegram session data (encrypted session strings; we never receive or store your Telegram password)
Authentication status
Selected chat/group information (chat IDs, titles, types)

2.3 Message and Content Data

We collect and store messages from your selected chats and groups, including:

Message text content
Message metadata (message ID, chat ID, sender information, timestamps)

Important: We only collect messages from chats and groups that you explicitly select for monitoring. We do not access or store messages from chats you have not selected.

2.4 Search Keywords and Stop Words

We store the keywords and stop words you configure for filtering and searching messages. These are stored securely and used only to filter messages within your account.

2.5 Payment and Subscription Information

When you purchase a subscription plan, we collect and store:

Subscription plan details (plan type, duration, pricing)
Payment transaction information (amount, currency, payment method type, transaction IDs)
Promo codes used (if applicable)
Subscription start and end dates
Payment status and history

Important: We do not store your credit card details or other sensitive payment information. All payment processing is handled securely by Stripe (see Section 4.3).

2.6 Usage Data

We may collect information about how you use our service, including:

Pages visited and features used
Time and date of access
Error logs and diagnostic information
AI token usage metrics (number of requests, tokens consumed per feature)

3. How We Use Your Information

We use the collected information for the following purposes:

Service Provision: To provide, maintain, and improve our lead generation service
Authentication: To authenticate and manage your Telegram account connection
Message Monitoring: To monitor and store messages from your selected chats and groups in real time
Keyword Filtering: To filter messages based on your configured keywords and stop words
AI Lead Classification: To analyze message intent, urgency, and relevance using OpenAI's API
AI Response Generation: To draft suggested reply messages for identified leads
AI Keyword Generation: To generate keyword and stop word suggestions using AI
Channel Discovery: To find relevant Telegram groups and channels for your niche using AI search
Analytics: To generate statistics about your account usage, chat performance, and keyword effectiveness
Payment Processing: To process subscription payments and manage your subscription lifecycle
Notifications: To deliver lead alerts via our Telegram notification bot
Security: To detect, prevent, and address technical issues and security threats

4. Third-Party Services (Sub-processors)

4.1 OpenAI

We use OpenAI's API for AI-powered features including lead classification, keyword generation, response drafting, and channel discovery. When these features are used:

Message content or business descriptions may be sent to OpenAI's servers for processing
OpenAI processes this information and returns AI-generated results
We do not share your account credentials, payment data, or Telegram session information with OpenAI
OpenAI's use of data sent via API is governed by their data usage policies, which state that API data is not used to train their models

For more information, please review OpenAI's Privacy Policy.

4.2 Telegram

Our service integrates with Telegram's official API (MTProto). Your use of Telegram is subject to Telegram's Terms of Service and Privacy Policy. We only access data that you explicitly authorize us to access through the chats you select.

4.3 Stripe (Payment Processing)

We use Stripe to handle all payment transactions. When you make a payment:

Your payment information (credit card details, billing address) is processed directly by Stripe and is never stored on our servers
Stripe processes your payment using industry-standard encryption (PCI DSS Level 1 certified)
We receive payment confirmation and transaction details from Stripe to manage your subscription
We store only non-sensitive payment metadata (transaction IDs, amounts, payment status)

For more information, please review Stripe's Privacy Policy.

4.4 Hosting Infrastructure

Our application is hosted on cloud infrastructure providers (Heroku / Salesforce Platform). These providers may process your data as part of delivering hosting services, subject to their own privacy policies and data processing agreements.

5. Data Storage and Security

5.1 Encryption

We implement robust security measures to protect your data:

All data is encrypted in transit using TLS 1.2 or higher (HTTPS)
Passwords are hashed using industry-standard algorithms (bcrypt)
Telegram session strings are encrypted at rest before storage
Authentication tokens (JWT) are signed and have limited lifespans
Database connections are secured via SSL/TLS

5.2 Access Controls

We maintain strict access controls:

Access to production systems is restricted to authorized personnel only
Multi-factor authentication is required for administrative access
All access is logged and auditable
Regular security updates and patches are applied

5.3 Data Location

Your data is stored on servers located in the European Union. By using our service, you consent to the transfer and storage of your data in these locations.

6. Data Retention and Deletion

6.1 Active Accounts

We retain your data for as long as your account is active or as needed to provide our services. Message data is retained according to your subscription plan limits.

6.2 Account Deletion

You can delete your account and all associated data at any time through your account settings. Upon account deletion:

All account information is permanently deleted
All stored messages and leads are permanently deleted
All keywords, stop words, and configurations are permanently deleted
All Telegram session data is revoked and permanently deleted
All authentication tokens are revoked

6.3 Financial Records

Payment transaction records and subscription history may be retained for up to 7 years after account deletion to comply with financial regulations and tax requirements. Personal identifiers will be anonymized where legally permissible.

7. Your Rights and Choices

7.1 Access

You can access and view all your account data, messages, leads, and configurations through the service interface at any time.

7.2 Rectification

You can update and correct your account information at any time through your account settings.

7.3 Erasure

You can delete your account and all associated data at any time. This action is irreversible. You may also selectively delete individual chats, keywords, or leads.

7.4 Data Portability

You can request a copy of your data in a machine-readable format by contacting us at danpetrov42@gmail.com.

7.5 Opt-Out

You can disconnect your Telegram account at any time, which will immediately stop the collection of new messages from that account.

7.6 Subscription Cancellation

You can cancel your subscription at any time through your account settings. Upon cancellation:

Your subscription remains active until the end of the current billing period
You continue to have access to all subscription features until expiration
No further charges will be made

7.7 GDPR Rights (EEA Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time
Right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at danpetrov42@gmail.com. We will respond within 30 days.

8. Cookies and Tracking

We use authentication tokens stored in your browser's local storage to maintain your login session. These tokens are necessary for the service to function and are not used for tracking or advertising purposes.

We do not use cookies for tracking or analytics. We do not use third-party advertising cookies. We do not share your information with third-party advertisers or analytics services.

We store a minimal set of user preferences (theme and language selection) in local storage for your convenience. These preferences are stored locally in your browser and are never transmitted to our servers.

9. Children's Privacy

Our service is intended for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If you believe we have inadvertently collected information from a person under 18, please contact us immediately at danpetrov42@gmail.com, and we will take steps to delete such information promptly.

10. International Data Transfers

Your data is primarily stored and processed within the European Union. However, some of our sub-processors (such as OpenAI and Stripe) may process data in the United States or other jurisdictions.

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on the recipient's certification under an applicable data privacy framework.

By using our service, you acknowledge and consent to the transfer, storage, and processing of your data in the locations described in this policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date at the top.

For significant changes that affect how we process your personal data, we will make reasonable efforts to notify you via email or through an in-app notification. You are advised to review this Privacy Policy periodically.

Your continued use of the service after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise any of your rights, please contact us:

Email danpetrov42@gmail.com
Telegram @leadgenrunner
Address Wrzesinska 14, 03-713 Warsaw, Poland