Privacy Policy

This policy explains what personal data LeadACI collects, why, and your rights. The data controller is [legal name] (Sweden).

What we collect

• Account details: name, email, phone number, password (stored only as a secure hash).
• Business details: brokerage, license state and number, service area, focus, budget range, website, notes.
• Your Google Ads Customer ID and the campaign information we need to manage it.
• Billing: handled by Stripe. We store your Stripe customer reference and billing status, never your full card number.
• Records of use: when you log in, the IP address and browser or device used, which documents you accepted and when, the setup steps you completed, and the reports you viewed.
• Communications: help call requests, messages, and notes from calls with you.

Why we use it

• To provide the service you signed up for (contract).
• To bill you and keep accounting records (contract and legal obligation).
• To prevent fraud, keep accounts secure, and respond to payment disputes and legal claims (legitimate interest).
• To contact you about your account, setup, billing and campaign (contract).

We don't sell your data and don't use it for unrelated advertising.

Who we share it with

Only service providers we need to run LeadACI, under data-processing terms:

• Stripe (payments) · Vercel (hosting) · Turso (database) · GoHighLevel and SignalHouse (text messages)
• Google, when we manage your Google Ads account at your request
• Authorities or courts when the law requires it, and card networks/banks when responding to a payment dispute

Some providers are in the United States; transfers are covered by standard contractual clauses or equivalent safeguards.

How long we keep it

• Account and campaign data: while your account is active and up to 24 months after it ends.
• Billing records, accepted documents and records needed for disputes or legal claims: up to 7 years, as accounting and limitation rules require.
• When you ask us to delete your account, we delete or anonymize everything else.

Your rights

You can ask to access, correct, export or delete your data, object to how we use it, or restrict it. Contact admin.leadaci@gmail.com. You can also complain to the Swedish Authority for Privacy Protection (IMY) or your local data protection authority.

Text messages

If we text you, reply STOP at any time to stop marketing texts. Account and billing messages may still be sent.

Google Ads data

We use the Google Ads API to create and manage your campaigns and to read their results, through our Google Ads manager account after you give it access. We use this data only to run and report on your ads. We don't sell it, use it for advertising to you, or share it beyond the providers listed above. LeadACI's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can remove our access at any time in your Google Ads account under Access and security.

Security

Passwords are hashed, connections are encrypted, and access to client data is limited to our team by role, with every action logged.