Privacy Policy

1. What data we collect

Data you provide:

• Email address and password (the password is stored hashed, never in plain text)
• SMTP data for sending email (host, username, App Password) - the password is stored encrypted in the database, never in plain text
• Sender name, account settings

Data the system automatically generates/collects:

• Business leads found (name, address, phone, email, website) - from publicly available sources (OpenStreetMap, Geoapify)
• History of sent emails (so the same contact is never emailed twice)
• AI-generated demo websites (Studio plan) and their view statistics

Payments: paid plans are processed by Whop. We do not receive or store your card details; we receive only subscription status.

2. How we use the data

• To provide the core functionality (search, email sending, autopilot)
• To generate AI content (email texts, demo websites) via the Anthropic Claude API
• For system emails (account confirmation, password reset) through our platform SMTP
• We never sell or share your personal data with third parties for marketing purposes

3. Third-party services we use

• OpenStreetMap / Geoapify - for finding public business data
• Anthropic (Claude AI) - powers the chat assistant that runs the dashboard, and generates email texts and demo websites. This means the messages you type to the assistant, along with the relevant business/account data needed to carry out your request (e.g. your plan limits, saved leads), are sent to Anthropic for processing. Avoid typing sensitive personal information into the chat that isn't needed to use the Service.
• Whop (whop.com) - payment processing for paid plans, and an analytics pixel that loads only after you accept it in the cookie banner
• Brevo - email delivery for system emails and outreach sent through the platform
• Your SMTP provider (e.g. Gmail) - for actually sending the emails, using your own credentials
• Hetzner (Germany) - server hosting

Business data © OpenStreetMap contributors (ODbL) and Geoapify.

4. Storage and security

• Account passwords are hashed (never stored in plain text)
• SMTP App Passwords are encrypted in the database (Fernet symmetric cryptography)
• Communication with the application is protected with HTTPS (SSL certificate)
• Data is stored on a server in Germany (Hetzner)

5. Your rights

• Access to your own data - through the app itself (Leads, Settings)
• Deletion of your account and all related data - self-service, in Settings → Privacy → "Delete my account" (or contact us if you'd rather we do it for you)
• If you're in the EU/EEA or UK, under GDPR you also have the right to access, correct, erase, restrict, port and object to processing of your personal data. Email matej@autolead365.com to exercise them.
• You have the right to lodge a complaint with your local data protection supervisory authority.

6. Data retention

We retain your data while your account is active. After account deletion, personal data is deleted within a reasonable timeframe, unless we are legally required to retain certain records. Email addresses that have been unsubscribed or removed are kept on a suppression list so that they are never contacted again.

7. Cookies

• An essential session cookie keeps you logged in. It is always set and needed for the Service to work.
• The Whop analytics pixel is loaded only if you accept it in the cookie banner.
• We use no advertising cookies and no session replay tools. Fonts are self-hosted, so no font requests go to third parties.

You can change your choice at any time: change cookie choice.

8. If your business email is in our database

Source: business contact details that are publicly listed on your website or in OpenStreetMap. Purpose: business-to-business outreach by AutoLead365 users. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).

How to be removed: click "Unsubscribe" in any email you receive, or email matej@autolead365.com. Removal is global across all AutoLead365 users. You also have the rights listed in section 5, including the right to complain to a supervisory authority.

9. Children

The Service is not for anyone under 18, and we do not knowingly collect data from minors.

10. Contact

Questions about privacy? Email us at matej@autolead365.com