Privacy Policy

1. Introduction

At BrilliantLeadly ("we", "our", "us"), we respect your privacy and are committed to protecting the personal data of our users ("Users") as well as outlining our practices regarding the business-to-business (B2B) data we aggregate through our Service. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your information.

2. Information We Collect from Users

When you register for an account and use the BrilliantLeadly platform, we collect:

• Account Data: Name, email address, company name, and account identifiers. Authentication is handled by Clerk; we do not store raw passwords in our database.
• Billing Information: We do not store raw credit card data. Payments are processed by Dodo Payments. We store subscription status, plan details, and transaction references.
• Usage Data: Search queries, feature usage, IP addresses, browser types, device information, and timestamps to operate the Service, prevent abuse, and improve performance.
• Support Data: Information you provide when contacting support, including emails and attachments.

3. Data Extracted via the Service (B2B Data)

Our Service aggregates publicly available business data (such as company names, business emails, public social links, and public phone numbers) from sources like Google Maps and public websites.

• Scope: We focus on B2B professional contact information. We do not intentionally scrape or aggregate sensitive consumer (B2C) data.
• Legal Basis (GDPR/CCPA/UU PDP): We process public B2B data based on legitimate interest for B2B prospecting workflows. If you are a professional and wish to request removal of your public B2B data from our index, contact our privacy team.
• Your Responsibility: You decide how exported or scraped data is used. You are responsible for lawful outreach and compliance in your jurisdiction.

4. WhatsApp & Messaging Data

If you connect WhatsApp or use inbox/broadcast features, we may process:

• Connected WhatsApp session identifiers, phone numbers, and connection status.
• Message content, metadata, delivery status, media attachments, and conversation history within the dashboard inbox.
• Recipient phone numbers and campaign configuration you submit for broadcast.
• Technical logs required to route messages through our messaging infrastructure.

Message content is processed to provide inbox, broadcast, and delivery features. You are responsible for obtaining lawful consent and honoring opt-out requests for recipients you contact.

5. How We Use Your Information

We use User Account Data to:

• Provide, operate, and maintain our Service.
• Authenticate users and secure accounts.
• Process transactions and send billing-related communications.
• Deliver scraping, export, pipeline, and messaging features.
• Provide customer support and service notifications.
• Monitor abuse, enforce policies, and improve platform performance.

6. Information Sharing & Third Parties

We do not sell your personal Account Data. We share information only with trusted processors necessary to operate the Service:

• Authentication: Clerk for sign-in, session management, and account security.
• Payments: Dodo Payments for subscriptions, checkout, and tax compliance. Legacy Lemon Squeezy records may remain for older transactions.
• Infrastructure: Vercel for hosting and Convex for database, realtime backend, and server functions.
• Data Extraction: Apify and similar providers used to perform scraping jobs you initiate.
• Messaging Infrastructure: WhatsApp gateway providers (such as GOWA) used to connect and deliver messages from your linked account.
• CRM Integrations: HubSpot or Salesforce only when you explicitly authorize a connection.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to keep you logged in, remember preferences, and collect analytics on Service usage. You can configure your browser to refuse cookies, but some features may not function properly without them. Where required by law, we will request consent before using non-essential cookies.

8. Data Retention

We retain data only as long as necessary for the purposes described in this Policy:

• Account Data: Retained while your account is active and for a reasonable period after closure to resolve disputes, billing, and legal obligations.
• Billing Records: Retained as required for tax, accounting, and fraud prevention.
• Scrape Batches & Exports: Retained while your account is active unless you delete them or request deletion, subject to backup retention limits.
• Messaging Data: Retained while your account is active and needed to provide inbox history and delivery logs.
• Logs & Security Data: Retained for a limited period for monitoring, troubleshooting, and abuse prevention.

9. International Data Transfers

Our processors may store or process data in countries other than your own, including the United States and the European Union. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by our vendors.

10. Data Security

We implement industry-standard security measures, including encryption in transit (SSL/TLS), access controls, and secure database practices. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Your Privacy Rights

Depending on your jurisdiction (including GDPR, CCPA, and Indonesia's UU PDP), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("Right to be Forgotten").
• Restrict or object to certain processing activities.
• Request data portability where applicable.
• Withdraw consent where processing is consent-based.
• Opt out of marketing communications.

To exercise these rights, contact privacy@brilliantleadly.com. We will respond within the timeframe required by applicable law.

12. Children's Privacy

The Service is intended for business users aged 18 and older. We do not knowingly collect personal data from children under 18. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last Updated" date. Where required by law, we will provide additional notice.

14. Contact Us

BrilliantLeadly operates the Service from Indonesia. For privacy inquiries, data deletion requests, or questions about B2B data in our index, contact privacy@brilliantleadly.com.