← Back to Leadomos
Security and privacy
Last updated: 31 October 2026
Data processing agreement (DPA)
The GDPR Article 28 terms under which we process the data of your searches on your behalf. It is part of the terms and accepted with them; you download it already signed by us. If you need a copy signed by both parties, write to contactleadomos@gmail.com.
Where the data lives
- Accounts and searches: on Google Cloud (Firestore), in the Madrid region; functions run in Belgium. All within the EU.
- Payments: handled by Stripe; we never store card numbers.
- Website: hosted on Vercel.
Who processes it
Only the providers we need to run the service:
- Google Cloud / Firebase: accounts, database and backups.
- Apify (Czech Republic, EU): collects the public data for each search.
- OpenAI (US, EU-US Data Privacy Framework): drafts the emails; does not use the data to train its models.
- Stripe: payments and invoices. Google (Gmail): service emails.
The full list, with international transfers, is in the privacy policy (section 6).
How we protect it
- Encryption in transit and at rest; integration keys additionally encrypted with a key of our own.
- Each account can only read its own data: database rules as a closed list, with automated tests.
- Admin access requires an authorised account with two-step verification, logs every action with its reason, and does not show the content of searches.
- Backups: point-in-time recovery for 7 days and a daily backup kept for 14 days, with restoration tested.
- Error alerts and a daily check of every service.
Your data and your account
From Settings you can download all your data and delete your account at any time. How long each kind of data is kept is in the privacy policy (section 5).
The businesses and people in your searches
- Each search runs for you and its results are yours alone: there is no shared database and we do not sell data.
- For that data, you are the controller and Leadomos is your processor (DPA above).
- Anyone who does not want to appear can ask at leadomos.com/remove: they stop appearing in every new search, including the demo.
If you find a security issue
Write to contactleadomos@gmail.com with the details. If a breach affected your data, we would tell you without undue delay and within 48 hours at the latest.