Privacy Policy

Leadsaro is a CRM service operated by InstaForce Lda, Portugal. This Privacy Policy explains how InstaForce Lda (“InstaForce”, “we”, “us”) handles personal data when you visit Leadsaro, create an account, use the service, contact us, or subscribe to a paid plan.

1. Who is responsible for your data?

For account, website, billing, support and direct Leadsaro customer relationships, the data controller is InstaForce Lda, Portugal. Privacy requests can be sent to info@leadsaro.com.

When a Leadsaro customer stores personal data about its own prospects, clients, employees or other contacts in the CRM, that customer normally determines why and how that data is used. In those situations, the customer is normally the controller and InstaForce Lda processes the data on the customer’s behalf as a service provider/processor, subject to the applicable agreement.

2. Data we may collect

• Account data: name, business name, email address, authentication information, account role and workspace settings.
• CRM data: records, notes, contact information, statuses, follow-ups, custom fields and other information you choose to store in your workspace.
• Communication data: email, call and follow-up metadata and content where those features are used.
• Subscription and billing data: plan, subscription status, payment status and transaction references. Payment-card or wallet credentials are handled by the relevant payment provider rather than stored directly by Leadsaro where hosted checkout is used.
• Technical data: IP address, browser/device information, session information, security logs and diagnostic data.
• Support and enquiry data: information you provide when contacting support, requesting a Corporate proposal or otherwise communicating with us.
• Marketing preferences: whether you have chosen to receive product news, tips or commercial communications.

3. Why we use personal data

We use personal data to create and secure accounts, provide and improve the Leadsaro service, manage subscriptions, provide support, prevent abuse and fraud, maintain service security, communicate about the account, respond to enquiries, comply with legal obligations and, where permitted, send marketing communications.

Depending on the activity, processing may be necessary to perform a contract, comply with a legal obligation, pursue legitimate interests such as operating and securing the service, or rely on consent. Where marketing requires consent, you may withdraw that consent at any time.

4. Trial registrations and marketing

When you start a free trial, your account email is retained as part of the Leadsaro account record so that we can provide and administer the trial. Choosing whether to receive promotional email is separate from creating the account. You can change your marketing preference or unsubscribe from marketing communications at any time.

5. Service providers and recipients

We may use carefully selected providers for hosting, databases, authentication, email delivery, telephony, payment processing, customer support, security, diagnostics and other infrastructure required to operate Leadsaro. These providers receive only the information needed to perform their role and are subject to appropriate contractual and security obligations.

We may also disclose information where required by law, to protect legal rights or service security, or in connection with a corporate transaction subject to applicable safeguards.

6. International data transfers

Some service providers may process data outside the European Economic Area. Where required, we use an applicable transfer mechanism or safeguard, such as an adequacy decision or approved contractual safeguards.

7. How long we keep data

We keep personal data only for as long as necessary for the purpose for which it was collected, to operate an active account, resolve disputes, enforce agreements and comply with legal, tax or accounting requirements. Workspace data is handled according to the customer account lifecycle and applicable contractual arrangements. Backup copies may remain for a limited period before being overwritten or deleted.

8. Security

We use technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No internet service can guarantee absolute security, so customers should also use strong credentials, protect account access and assign permissions appropriately.

9. Cookies and local storage

Leadsaro may use strictly necessary cookies or local storage for authentication, security and session continuity. If optional analytics or advertising technologies are introduced, they will be handled in accordance with applicable consent requirements.

10. Your rights

Where the GDPR applies, you may have rights to access, correct, erase or restrict personal data, receive certain data in a portable format, object to certain processing and withdraw consent where processing is based on consent. You may also lodge a complaint with the competent supervisory authority, including Portugal’s Comissão Nacional de Proteção de Dados (CNPD) where applicable.

If your request concerns data stored by a company using Leadsaro, you should normally contact that company first because it may be the controller of that CRM data.

11. Children

Leadsaro is a business CRM service and is not intended for use by children.

12. Changes to this policy

We may update this Privacy Policy when the service, our providers or applicable requirements change. The latest version will be published on this page with the updated date.

13. Contact

InstaForce Lda
Portugal
Leadsaro privacy: info@leadsaro.com