Privacy Policy
Effective date: March 28, 2026
This Privacy Policy explains how GenLead ("we", "us", or "our") collects, uses, and protects information when you use the GenLead service at genlead.dev. We keep things straightforward: we collect only what we need to run the service, we do not sell your data, and we give you control over what we store.
1. What We Collect
| Data | Why we collect it |
|---|---|
| Email address | Account creation and authentication via Supabase. Used to send transactional emails (password reset, subscription receipts). |
| Billing information | Processed entirely by Stripe. We store only a Stripe customer ID — we never see or store your full card number. |
| Tenant configuration | The keywords, subreddits, lead score threshold, and voice/tone examples you configure. Required to operate the monitoring pipeline on your behalf. |
| Scored leads | Reddit posts/comments that matched your keywords, along with the AI-generated score, reasoning, and drafted message. Stored so you can review and act on leads. |
| Feedback and corrections | Score corrections and message edits you submit. Used to improve scoring accuracy for your account. |
| Usage data | Server-side logs (request paths, timestamps, error messages) used for debugging and monitoring service health. Not tied to individual user actions beyond what is necessary for troubleshooting. |
We do not collect: browser cookies beyond the Supabase authentication session token, tracking pixels, third-party analytics scripts, or any Reddit account credentials.
2. Reddit Data
GenLead monitors publicly available Reddit posts and comments — content that any person can read without logging in. We do not access private messages, moderation queues, or any non-public Reddit data. The Reddit usernames of matched post authors are stored with lead records so you can find the original post and reach out.
We access Reddit public data through third-party data providers. By using GenLead, you understand that lead data originates from public Reddit discussions.
3. How We Use Your Data
We use the data we collect to:
- Operate the monitoring pipeline and deliver leads to your dashboard
- Score leads and draft outreach messages using Cloudflare Workers AI
- Authenticate your account and maintain your session
- Process subscription payments via Stripe
- Improve scoring accuracy based on your feedback
- Diagnose and fix bugs or service disruptions
- Send transactional emails (account events, billing receipts)
We do not sell your data to third parties. We do not use your data to train general-purpose AI models. We do not send marketing emails beyond product updates directly related to your GenLead subscription.
4. Third-Party Services
GenLead uses the following sub-processors to deliver the Service. Each handles data as described below:
- Supabase — stores your account, configuration, leads, and feedback in a hosted PostgreSQL database. Data is encrypted at rest and in transit. (Supabase Privacy Policy)
- Cloudflare — hosts the backend worker and runs Workers AI for lead scoring. Cloudflare processes lead content (Reddit post text + your keywords) to generate scores. (Cloudflare Privacy Policy)
- Stripe — processes subscription payments. Stripe stores your payment method. We never see your full card number. (Stripe Privacy Policy)
- Reddit data providers — provide access to public Reddit post and comment data for monitoring. No personal GenLead user data is shared with these providers.
- Search data providers — retrieve Google search results for the SEO tool. Query strings (your keywords) are sent to the provider. No personal user data is shared.
5. Cookies and Sessions
We use a single session cookie set by Supabase to keep you logged in. This cookie is strictly necessary for authentication — no third-party tracking cookies, no advertising cookies, no analytics cookies are used.
6. Data Retention
We retain your data for as long as your account is active. Specifically:
- Leads and scored data — retained indefinitely while your account is active, so you can review historical leads. You can delete individual leads from the dashboard.
- Feedback and configuration — retained until you delete them or your account.
- Billing records — retained by Stripe per their policies; we retain the Stripe customer ID for the lifetime of your account.
- Server logs — retained for 30 days for debugging purposes, then deleted.
When you delete your account, we delete your email, configuration, leads, and feedback within 30 days. Anonymized or aggregated data (e.g., total lead counts with no personal identifiers) may be retained for service analytics.
7. Your Rights
You have the following rights over your data:
- Access — request a copy of all data we hold about you
- Correction — ask us to correct inaccurate data
- Deletion — delete your account and all associated data from your account settings, or by emailing us
- Export — export your leads as CSV from the dashboard at any time
- Portability — request a machine-readable export of your configuration and lead data
To exercise any of these rights, email support@genlead.dev. We will respond within 30 days.
8. Security
All data in transit is encrypted via HTTPS/TLS. Data at rest is encrypted by Supabase (AES-256). Access to the Supabase database is restricted to the GenLead worker via a service role key stored as a Cloudflare Worker secret. We do not log or expose authentication tokens in application logs.
No system is perfectly secure. If you discover a security vulnerability, please disclose it responsibly to support@genlead.dev.
9. Children's Privacy
GenLead is not directed at children under 13. We do not knowingly collect personal information from children. If we learn that we have done so, we will delete the information promptly.
10. International Users
GenLead is operated from the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US or other countries where our sub-processors operate (EU for Supabase, global edge for Cloudflare). By using the Service, you consent to this transfer.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you via email or dashboard notice at least 14 days before material changes take effect. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
12. Contact
Questions or requests about your privacy? Email us at support@genlead.dev. We typically respond within 2 business days.