Privacy Policy

Last updated: July 14, 2026

Please note: This document is a good-faith starting point drafted for a B2B SaaS product, not legal advice. Have a qualified attorney review and tailor it to your jurisdiction and business before relying on it.

This Privacy Policy explains how InsuredLead (“InsuredLead,” “we,” “us”) collects, uses, and shares information when you use our lead-scoring service (the “Service”). It covers both the information we handle as a business (about our customers) and the information we process on our customers’ behalf (their leads).

1. The two roles we play

As a controller — for account and billing information about the businesses and individuals who sign up for InsuredLead, we decide how and why that data is used, and this policy governs it directly.

As a processor — for the lead data our customers send us to be scored, we act on our customers’ instructions. Each customer is the controller of the lead data in their workspace and is responsible for having a lawful basis to collect it and for the privacy notices they give their own leads.

2. Information we collect

Account information you provide: name, email address, workspace name, and authentication credentials.

Billing information: managed by our payment provider, Paddle. We receive limited transaction details (such as plan, amount, status, and invoices) but we do not store your full card number.

Lead data that you or your connected sources send to the Service: the contact details and intake content of your leads (for example, name, phone, email, coverage interest, and the raw form, email, or message text). This is processed to score and rank leads for you.

Usage and device data: log data, IP address, browser type, and product analytics we use to operate and improve the Service.

3. How we use information

  • to provide the Service — ingesting, scoring, ranking, and alerting on your leads;
  • to authenticate you and secure your workspace;
  • to process payments and manage subscriptions through Paddle;
  • to send you transactional messages such as hot-lead alerts, digests, and account notices;
  • to monitor, debug, and improve the reliability and accuracy of the Service;
  • to comply with legal obligations and enforce our terms.

4. AI processing

Lead scoring uses large language models to analyze intake text and produce a score and a plain-English reason. We send lead content to our AI providers (currently OpenAI and Anthropic) solely to generate these results for you. We do not permit these providers to use your lead content to train their general models, and we rely on their enterprise/API data-handling terms to that effect.

5. How we share information

We do not sell your data. We share information only with service providers who help us run the Service, under contracts that require them to protect it. These include:

  • Supabase — database, authentication, and hosting of your data;
  • Vercel — application hosting;
  • OpenAI and Anthropic — AI lead scoring;
  • Postmark — transactional and inbound email;
  • Twilio — SMS alerts (where enabled on your plan);
  • Paddle — payment processing and invoicing;
  • PostHog — product analytics.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets.

6. Data isolation and security

The Service is multi-tenant: each workspace’s data is isolated with row-level security so that one customer cannot access another’s leads. We use encryption in transit, restrict access to production systems, and keep secrets out of client-side code. No system is perfectly secure, but we take reasonable measures to protect your data.

7. Data retention

We retain account and lead data for as long as your workspace is active and as needed to provide the Service. When you close your account, we delete or anonymize your data within a reasonable period, except where we must retain limited records to meet legal, tax, or accounting obligations. A workspace owner may request earlier deletion by contacting us.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete personal data we hold about you, and to object to or restrict certain processing. If we process personal data on a customer’s behalf as a processor, we will refer requests from that customer’s leads to the customer, or assist the customer in responding. To exercise your rights, email us at privacy@insuredlead.com.

9. International transfers

We may process and store information in countries other than where you are located. Where required, we use appropriate safeguards for such transfers.

10. Children

The Service is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 16.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service and update the “last updated” date above.

12. Contact

Questions or requests about privacy? Email privacy@insuredlead.com.