Privacy Policy

Last updated April 27, 2026

Data We Collect

We collect email address, password hash (Argon2id), and a PayPal payer reference for completed orders. We do not store your name or billing address — PayPal holds those for invoicing. IP addresses in server logs are rotated after 30 days.

How We Use Your Data

We use your email to authenticate your account, send order confirmations, and notify you about your data locks. We never sell your data to third parties.

Data Retention

Order records are retained for 7 years. User accounts are deleted on request or after 2 years of inactivity. Download audit logs are retained for 90 days.

Your Rights (GDPR / CCPA)

You have the right to access, correct, and delete your personal data. Contact us at privacy@theleadsguru.com. We will respond within 30 days.

Sub-Processors

We use PayPal (payments), DigitalOcean Spaces (file storage, S3-compatible), Bright Data (data collection), and Postmark or Resend (email delivery).

Cookies

We use one session cookie (Auth.js JWE) to maintain your login. No advertising or tracking cookies are set.