Legal/Privacy Policy

Privacy Policy

Last updated: July 24, 2026GDPR & CCPA
⚠️
Demo placeholder. Sample text for the prototype — not legal advice. Replace with counsel-reviewed copy before launch.

1. Introduction

This Privacy Policy explains how Zamorins Tech ("LeadZapp", "we", "us") collects, uses, and protects personal information when you visit our website or use our services. By using LeadZapp you agree to the practices described here.

LeadZapp acts as a data controller for account and website data, and as a data processor for the lead data you generate within your workspace, as described in our Data Processing Agreement.

2. Information we collect

Information you provide

  • Account details — name, work email, password, company name.
  • Billing information — processed by our payment provider (Stripe); we do not store full card numbers.
  • Configuration you enter — ICP profiles, integration settings, support messages.

Information collected automatically

  • Usage and device data — pages viewed, features used, IP address, browser type.
  • Cookies and similar technologies — see our Cookie Policy.

Lead data

Leads generated in your workspace may contain business-contact information about third parties. You control this data; we process it on your behalf under the DPA.

3. How we use information

  • To provide, maintain and improve the service.
  • To process runs, deliver leads, and generate exports.
  • To handle billing, subscriptions and support.
  • To secure the platform and prevent abuse.
  • To send service and, where permitted, marketing communications.

4. Legal bases (GDPR)

Where GDPR applies, we rely on: performance of a contract (to deliver the service), legitimate interests (to secure and improve the service), consent (for optional cookies and marketing), and legal obligation (for tax and compliance records).

5. Sharing & subprocessors

We do not sell personal information. We share data with vetted subprocessors who help operate the service — search, enrichment, email verification, AI, payments, hosting and email delivery. The current list is on our Subprocessors page.

6. Data retention

We retain account data for as long as your account is active and as needed to comply with legal obligations. Lead data is retained per your workspace settings and deleted on offboarding. You can request deletion at any time (see GDPR & CCPA).

7. Your rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. See GDPR & CCPA for how to exercise them.

8. Security

We use encryption in transit and at rest, strict access controls, tenant isolation, and continuous monitoring. Details are in our Security & Compliance statement.

9. International transfers

Where data is transferred across borders, we use appropriate safeguards such as Standard Contractual Clauses.

10. Changes & contact

We may update this policy and will post the new "last updated" date above. Questions? Contact [email protected].