LeadPilotBack to home

Last updated: September 13, 2026

Privacy Policy

LeadPilot ("we," "our," or "us") is a B2B SaaS platform that helps businesses automate personalized cold email outreach. This privacy policy explains what data we collect, how we use it, and what rights you have.

1. What Data We Collect

Account Information

When you sign up, we collect your name, email address, and authentication credentials through our identity provider (Clerk). If you subscribe to a paid plan, payment information is processed by Stripe. We do not store credit card numbers on our servers.

Product Configuration

You provide information about your business including company name, product details, website URL, target industries, and ideal customer profiles. This data is used to personalize your outreach campaigns.

Prospect Data

We store business contact information sourced and researched for your campaigns, including names, business email addresses, job titles, company names, professional details, and relevant public business information. Historical records may include previously imported contacts. We also retain opt-out information to prevent further unwanted outreach.

Email Content

We store email drafts, sent messages, and conversation histories generated on your behalf. This includes AI-generated email copy and any replies received from prospects.

Usage Data

We collect activity logs, first-party analytics events, feature usage metrics, and performance data to improve our service and provide you with campaign analytics. If you consent to optional measurement, Google Analytics also receives page-view and engagement data from public marketing and blog pages. We send canonical page paths without URL query strings, account identifiers, emails, pasted domains, prospect data, or message content.

2. How We Use Your Data

  • To send outreach emails on your behalf using your managed email domains
  • To generate personalized email content using AI models (see our Terms of Service Section 5 for important disclaimers about AI-generated content)
  • To score and prioritize prospects based on your ideal customer profile using data-driven analytics from your outreach outcomes
  • To track conversation status, replies, and engagement
  • To process payments and manage your subscription
  • To improve our service quality and platform performance
  • To communicate important service updates

3. AI Content Processing

LeadPilot uses third-party AI models to generate email content on your behalf. Important details about this processing:

  • Your product information, prospect data, and conversation history are sent to AI model providers to generate email drafts and analyze replies.
  • AI-generated content may contain errors, inaccuracies, or hallucinations. We do not guarantee the accuracy of AI output.
  • Your product information is stored and used as context when generating emails. This is not machine learning training, but contextual input to produce relevant content for your outreach.
  • AI services receive the context needed for the requested generation or analysis. Their handling and retention of that context depend on the applicable service terms and account configuration. Contact us for information about the providers and processing arrangements relevant to your account.

4. Third-Party Services

Services used to operate LeadPilot include:

  • Clerk. Authentication and user management. Clerk processes your login credentials and manages session cookies.
  • Stripe. Payment processing. Stripe handles all billing and subscription management. See Stripe's privacy policy.
  • InboxKit. Email delivery for managed domains. InboxKit provisions sending infrastructure and processes outbound emails on your behalf.
  • Business data services. Prospeo supplies B2B contact information and email verification for buyer sourcing. Historical records may include information obtained from earlier services such as Findymail.
  • AI services. Services include Anthropic, Groq, and OpenRouter with its downstream model providers. They process campaign context for tasks such as research analysis, content generation, review, and reply analysis. The services used depend on the task and service configuration.
  • Hosting and storage. Infrastructure services, including Vercel, Neon, and Railway, host application services, store product records, and run background processing.
  • Google Analytics. With your optional consent, Google processes measurement events from public marketing and blog pages so we can understand site performance. We disable automatic page views, Google Signals, and ad-personalization signals in our site configuration.
  • BabyLoveGrowth. Generates and delivers public educational articles for the LeadPilot blog and may read aggregated search and analytics reports that we explicitly connect. It is not connected to LeadPilot customer workspaces, prospect records, inboxes, or message content.

5. Data Retention

We retain account and workspace data to operate the service. Account deletion removes owned workspace records and revokes memberships in shared organizations; it does not delete another organization's data merely because you had access to it. Some records remain outside that deletion, including opt-out suppression records, security and operator audit history, and billing records. Backups and third-party systems follow their applicable retention processes. Contact us for help with a specific deletion or retention request.

6. Cookies

We use essential storage for the service to function and optional measurement storage only when you allow it:

  • Session cookies. Managed by Clerk for authentication. These keep you signed in and are essential for the service to work.
  • Security cookies. Used to prevent cross-site request forgery and protect your account.
  • First-party analytics cookies. Used to understand anonymous marketing sessions, account creation, product activation, and paywall drop-off. These cookies are set by LeadPilot and are not third-party analytics cookies.
  • Optional Google measurement cookies. Set only after you choose "Allow measurement." They help us measure public-page usage and advertising conversions. Choosing "Necessary only" prevents the Google tag from loading; changing from allowed to necessary updates Google Consent Mode and removes accessible Google measurement cookies.

You can change this choice at any time using the "Cookie settings" control. LeadPilot's internal analytics system does not store raw emails, names, IP addresses, full user agents, pasted domains, prospect data, or message content.

7. Your Rights

You have the following rights regarding your data:

  • Access and portability. Billing provides an export of supported workspace data in JSON format, subject to your workspace access and account permissions. Contact us for access requests beyond that export.
  • Deletion. You can start account deletion from Billing. The ownership and retention limits described above apply.
  • Correction. You can update editable account and campaign information through the application. Contact us to request corrections to other records.
  • Objection. Pausing outreach stops new outreach and sourcing under the applicable campaign controls. It does not end all processing, cancel your subscription, or remove stored records. Contact us to make a broader objection or restriction request.

Use Billing for export and account deletion, or Support for help with a data request. You can also contact us at the address below.

8. Security

We take the security of your data seriously and employ the following measures:

  • All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
  • Database credentials and API keys are encrypted at rest
  • Access to production systems is restricted and logged
  • OAuth tokens for connected email accounts are stored with encryption
  • We perform regular security reviews of our infrastructure

9. Contact

If you have questions about this privacy policy or your data, please contact us at:

privacy@leadpilot.ai