Last updated: September 22, 2026
Lead Agent ("we", "us", "our", or "the Operator") operates a sales prospecting and customer relationship management (CRM) platform that helps you discover, qualify, and reach out to potential business customers. The Operator is a sole proprietorship with its principal place of business in the State of Nevada, United States.
This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website, web application, and related services (collectively, the "Service"). "You" refers to both registered users of the Service (account holders) and individuals whose contact information is processed through the Service (prospects).
By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, you must not use the Service.
A. Information collected from account holders. When you register for an account, we collect:
B. Publicly scraped and aggregated data (prospects). To provide lead-discovery features, the Service collects and aggregates publicly available business contact and firmographic information from third-party sources, including publicly accessible websites, business directories, and professional networks. This may include a prospect's name, job title, company, business email address, company website, and industry.
C. Automatically collected data. When you visit the Service, we and our service providers automatically collect information through cookies, pixel tags, and similar technologies, including your IP address, browser type, device information, pages visited, and referring URLs.
We use the information we collect to:
The Service uses cookies and similar technologies for authentication, session management, analytics, and advertising. Some cookies are placed by third parties, including Google, which uses cookies to serve ads based on your prior visits to our and other websites.
Google AdSense and third-party advertising. We use Google AdSense and the Google Interactive Media Ads (IMA) SDK to display and serve advertisements, including rewarded video ads shown to free-tier users. Google and its partners may use cookies and device identifiers to serve ads based on your visits to this site and other sites on the internet. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to our site and/or other internet sites.
Restricted Data Processing. We support Google's Restricted Data Processing (RDP) mode. When you opt out using the "Do Not Sell or Share My Personal Information" link in our footer, we enable RDP, which limits Google's use of your data to serving non-personalized ads and prevents the use of your personal data for personalized ad targeting.
"Selling" and "sharing" under state law. Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and similar laws in other states, the term "sell" is defined broadly to include the disclosure of personal information to a third party for monetary or other valuable consideration, and "share" includes the disclosure of personal information to a third party for cross-context behavioral advertising. Our use of third-party advertising technologies like Google AdSense, which may use cookies or device identifiers to serve ads based on your activity across websites, may constitute a "sale" or "share" of personal data under these laws.
You have the right to opt out of these "sales" or "shares" of your personal information. You may exercise this right at any time by clicking the "Do Not Sell or Share My Personal Information" link in the footer of our website, which enables Google Restricted Data Processing mode and disables personalized advertising. You may also opt out through browser-based tools such as the Global Privacy Control (GPC) signal, which we honor.
We do not sell your personal information for monetary consideration. We share information with third parties only as described in this policy:
When the Service collects publicly available business contact information about prospects, the Operator acts as a data controller for the limited purpose of aggregating and displaying that information to account holders for their prospecting use. Account holders act as independent controllers of prospect data they process for outreach purposes and are responsible for ensuring their use complies with applicable data protection laws, including obtaining any required consents.
Right to removal. If you are a prospect whose information appears in the Service, you may request that we remove your personal information from our prospect database by submitting a removal request through our Request Removal page or by contacting us at clientkeyllc@gmail.com. You will need to provide the Prospect ID(s) associated with your data, which can be found in the application. We will process verified removal requests within five (5) business days.
Suppression list. When your prospect data is removed at your request, we add your email address and company domain to an internal suppression list. This list is checked during every future prospecting campaign run and prevents your data from being re-collected or re-inserted into our database by the AI prospecting engine. The suppression list is retained for as long as the Service operates to ensure your removal request is permanently honored.
Note that removal from our database does not affect data that account holders may have already exported or stored independently.
The Service is not directed at individuals under 16 years of age, and we do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us and we will delete it promptly.
We use industry-standard security measures including encryption in transit (TLS/HTTPS) and at rest, role-based access controls, and row-level security to isolate your data from other users. Despite these measures, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
We maintain written data processing agreements with our service providers (including Stripe, Google, and AI/LLM providers) that contractually require them to implement reasonable security practices and procedures, including encryption and access controls, and to notify us of any security incident affecting your data.
We retain your account data for as long as your account is active. You may request deletion of your account and associated data at any time through your account settings or by contacting us. Upon deletion, your data is permanently removed from our active production database.
Backup retention. Residual copies of deleted data may exist in encrypted backup snapshots for a maximum of thirty (30) days, after which backups are overwritten and the data becomes permanently unrecoverable. We do not retain deleted personal information beyond this backup window except where required for legal compliance, dispute resolution, or to enforce our agreements.
Secure disposal. When personal information is no longer needed, we dispose of it using methods designed to render it unrecoverable, including secure overwriting of backup media and permanent deletion from production databases. Suppression records are maintained indefinitely to prevent re-collection of previously removed prospect data, as described in Section 6.
Depending on your jurisdiction, you may have the following rights regarding your personal information:
California (CCPA/CPRA), Nevada (NRS 603A), and other U.S. states: Residents of California, Nevada, Colorado, Connecticut, Utah, Virginia, and other states with comprehensive privacy laws have the rights described above. Nevada residents may also submit opt-out requests through the Nevada Attorney General's portal.
European Economic Area, UK, and Switzerland (GDPR/UK GDPR): You have the right to access, rectify, erase, restrict processing, object to processing, and data portability. You also have the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. The lawful bases for our processing include consent, contract, legitimate interests, and legal obligation. To the extent required by law, the Operator is the data controller.
To exercise any of these rights, contact us using the details in Section 12. We will verify your identity before processing your request and respond within the timeframes required by applicable law (generally 30–45 days).
The platform integrates with third-party services such as Google (Gmail, AdSense), Stripe, and AI providers. Each service has its own privacy policy, and we encourage you to review them. We are not responsible for the privacy practices of third-party services, and their use of your data is governed by their own policies and your settings with those providers.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on this page and updating the "Last updated" date. Your continued use of the Service after any change constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to request removal of your prospect information, please contact us at clientkeyllc@gmail.com or through the "Privacy Request" link available in the footer of every page. You may also submit a data removal request directly at our Request Removal page.