Legal

Privacy Policy

Last updated: March 2025

1. Information We Collect

We collect the following types of information:

**Account Information:** When you register, we collect your name, email address, and a hashed version of your password. If you sign up via Google, we receive your name, email, and profile picture from Google.

**Usage Data:** We log scan queries (industry, location, radius, result count) to track your daily usage quota and improve service quality.

**CRM Data:** Any leads you save, notes you add, and statuses you set are stored in your account. This data is yours.

**Support Tickets:** When you submit a support request, we store your message and contact details.

**Payment Data:** Payment processing is handled by Razorpay. We store only your subscription status, plan ID, and customer reference. We never store raw card numbers.

2. How We Use Your Information

–To provide and maintain the B2BLeadFinder service

–To enforce daily scan limits and subscription access

–To send transactional emails (account setup, password reset, subscription confirmations)

–To send service notices (trial expiry warnings, billing changes)

–To respond to support requests

–To improve the service through aggregate, anonymized usage analytics

We do not sell your personal data to third parties. We do not use your data for advertising.

3. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Supabase (EU/US region). We apply industry-standard security measures including:

–Passwords are hashed using bcrypt (12 rounds) — never stored in plain text

–All API routes require authentication; admin routes require elevated role verification

–Database connections use TLS/SSL encryption

–JWT tokens are signed with a secret and expire after 30 days

–Rate limiting protects against brute-force and abuse

While we take security seriously, no system is 100% impenetrable. We recommend using a strong, unique password for your account.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all associated data — including scan history, saved leads, CRM notes, and support tickets — is permanently deleted within 30 days. Anonymized aggregate statistics may be retained for analytics.

5. Third-Party Services

B2BLeadFinder uses the following third-party services:

–Google Maps Platform – for business search and location data (Google Privacy Policy applies to data processed through their API)

–Razorpay – for payment processing (Razorpay Privacy Policy applies to payment data)

–Supabase – for database hosting

–Vercel / Next.js – for application hosting and serverless functions

–Google OAuth – optional sign-in method

Business data displayed in search results (names, addresses, phone numbers, websites) is sourced from publicly available Google Maps data.

6. Cookies and Sessions

We use session cookies to keep you logged in via NextAuth.js. These are HTTP-only cookies and cannot be accessed by client-side JavaScript. We do not use tracking cookies or advertising cookies. No third-party analytics scripts are loaded on our pages.

7. Your Rights

You have the right to:

–Access your personal data (available in Account Settings)

–Correct inaccurate data (update your name, email in Account Settings)

–Delete your account and all associated data (available in Account Settings → Danger Zone)

–Export your leads as a CSV at any time

–Opt out of non-transactional emails by contacting us

For requests related to GDPR or other data protection regulations, email us at the address below.

8. Children's Privacy

B2BLeadFinder is a B2B tool intended for business professionals aged 18 and over. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance.

10. Contact

For privacy-related questions or requests, contact us at:

**Email:** support@b2bleadfinder.in

We aim to respond within 5 business days.