Privacy Policy

LeadLumo is an online service operated by Muhammet Yuşa Öztürk as an individual service provider based in Istanbul, Türkiye. Questions and privacy requests may be sent to support@leadlumo.io.

Depending on how you use LeadLumo, we may process:

• Account data, including your name, email address, and authentication identifiers.
• Workspace data, including memberships, invitations, roles, and plan information.
• Searches, user-selected business records, notes, tags, research status, and scheduled-search settings.
• Subscription references, plan status, and transaction identifiers. Full payment-card details are handled by Paddle and are not stored by LeadLumo.
• For accounts that previously connected the retired Google Sheets integration, limited connection data until the user disconnects it.
• Technical information such as IP address, browser information, request logs, error logs, and security events.
• Messages and information you send to our support address.

We use personal data to provide and secure the service, authenticate users, manage workspaces, run searches, save user-selected business records, process subscriptions, respond to support requests, prevent abuse, diagnose errors, and comply with legal obligations.

Where applicable, we rely on performance of our contract with you, our legitimate interests in operating and securing LeadLumo, compliance with legal obligations, and consent where consent is required. You may withdraw consent for optional processing at any time without affecting earlier lawful processing.

LeadLumo relies on service providers that may process data on our behalf or under their own terms, including Supabase for authentication and database services, Vercel for hosting, Paddle as merchant of record and payment provider, Google for business search, and SerpAPI when configured as a search provider.

Business-profile information may originate from third-party business directories and search providers. LeadLumo does not provide personal-email discovery, enrichment, downloadable business lists, spreadsheet synchronization, or a public data API. Users are responsible for using viewed or saved business information lawfully and in accordance with applicable provider terms.

Our providers may process data outside Türkiye or your country of residence. Where required, transfers are made using appropriate contractual or legal safeguards provided by the relevant service provider.

We retain account and workspace data while your account is active and for as long as reasonably necessary to provide the service, resolve disputes, enforce agreements, maintain security, and meet legal or accounting duties. Backup copies may remain for a limited period after deletion. OAuth connections and associated tokens are removed or invalidated when the integration is disconnected, subject to provider behavior and legal retention requirements.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data, and to withdraw consent or complain to a supervisory authority. Send requests to support@leadlumo.io. We may need to verify your identity before completing a request.

LeadLumo uses authentication cookies required to keep you signed in and secure your session. We also use browser local storage to remember interface preferences such as theme. Third-party checkout or integration services may use their own necessary technologies under their respective policies.

We use reasonable technical and organizational measures intended to protect personal data. No internet service can guarantee absolute security, so you should use a strong password and protect access to your account.

LeadLumo is intended for business users and is not directed to children under 18. We do not knowingly collect personal data from children.

We may update this policy as the service or legal requirements change. Material updates will be communicated through the service or another reasonable channel. Contact support@leadlumo.io with questions or requests.