Information we collect
We collect account details such as name, email, phone number, company, authentication identifiers, and login activity; subscription and payment status; run configuration, usage, and generated outputs; support messages and attachments; operational logs; and HubSpot company data authorized through OAuth.
HubSpot data
LeadDemon requests read-only access to HubSpot companies. We use company names, domains, locations, identifiers, and related company properties to create a CRM snapshot and compare it with prospect records. LeadDemon does not edit or delete HubSpot records.
ChatGPT and Codex plugin
When you authorize the LeadDemon plugin, your host can send business prospects to LeadDemon and receive your account email, connection status, comparison results, matching company details, and links to your CSV and Excel outputs. Those results become available to the host under its own terms and privacy settings. The plugin does not return the complete HubSpot snapshot. Downloads require the same LeadDemon account and expire after ten minutes; files already downloaded are not deleted when a link expires.
Plugin authorization and your HubSpot connection are separate. Revoking plugin authorization stops that authorization from accessing LeadDemon; it does not disconnect HubSpot or delete earlier runs. You can disconnect HubSpot on the Account page and request deletion of stored outputs by contacting us. Facebook research uses your host's permitted browsing capabilities; the plugin does not provide a Facebook login or bypass access restrictions.
How we use information
We use information to authenticate users, provide subscriptions, execute requested discovery and CRM gap runs, generate exports, monitor reliability and usage, prevent abuse, provide support, and comply with legal obligations. We do not sell personal information or HubSpot customer data.
Service providers
LeadDemon uses Clerk for authentication, Stripe for subscription billing, Microsoft Azure for application hosting and storage, HubSpot for authorized CRM access, and selected search, data, or AI providers when a user requests features that require them. Providers process data only for the service being delivered and under their applicable terms.
Retention and deletion
We retain account, billing, connection, run, output, and support data while needed to provide the service, maintain security and financial records, or meet legal obligations. Disconnecting HubSpot removes the active OAuth connection but does not automatically delete previous run outputs. You may request account or output deletion by emailing us.
Security
We use HTTPS, managed authentication, restricted secrets, access controls, and managed cloud infrastructure. No method of storage or transmission is completely secure, but we work to limit access and reduce unnecessary data collection.
Your choices
You may update account information, disconnect HubSpot, cancel a subscription, or request access, correction, export, or deletion of personal information. Some financial and operational records may be retained where required by law or necessary for security.
Policy changes
We may update this policy as LeadDemon changes. The effective date at the top of this page identifies the current version.
Contact
Privacy and deletion requests can be sent to mitchell@winklytics.com.