GDPR & CCPA Compliant

Privacy Policy

Last Updated: September 6, 2026

1. Overview & Data Responsibility

Lead Rescue AI ("we", "our", or "us") respects your privacy and is committed to protecting the personal data of our SaaS users and their prospects. This Privacy Policy describes how we collect, store, process, and disclose information when you access our application at https://leadrescueai.xilxil.com and related API endpoints.

2. Information We Collect

  • Account & Auth Information: Name, email address, password hash, organization name, payment billing reference tokens.
  • Lead & Prospect Data: Information imported by customer accounts (Name, Email, Phone, Company, Product Interest, Deal Value, CRM Stage).
  • Usage & Telemetry: Log files, IP address, user agent, timestamps, API performance metrics.
  • RAG Knowledge Data: Custom product documentation, FAQs, and company context provided by users.

3. How We Process & Protect Data

We process data strictly to provide AI lead qualification, RAG retrieval, CRM synchronization, and automated follow-ups.

Encrypted in Transit & At RestAll database records and network calls utilize AES-256 and TLS 1.3 encryption.
Tenant IsolationPostgreSQL Row-Level Security (RLS) ensures organizations cannot access foreign lead records.

4. Your Rights (GDPR & CCPA)

Under applicable privacy regulations, users and data subjects maintain the right to:

  • Request an export copy of all stored personal lead data.
  • Request full deletion ("Right to be Forgotten") of lead profiles.
  • Opt out of automated automated email/SMS contact sequences.

5. Third-Party Sub-processors

We partner with audited sub-processors to deliver services:

OpenRouter / OpenAILLM Lead Scoring & Qualification
Supabase / PostgreSQLEncrypted Relational Data Storage
ResendTransactional Email Delivery
Stripe / PayoneerPayment Processing & Billing