Lead Tracker

Privacy policy

Last updated 2 November 2026

Who we are

Lead Tracker is run by SC LIFE CHANGERS SRL, Int. Gheorghe Simionescu nr. 19, Sector 1, Bucharest, Romania (“we”). For anything about this policy or your data, write to eugen@lifechangers.co.

We handle two kinds of personal data, in two different roles:

  • Your account. When you sign up and use Lead Tracker, we decide how your account data is used. We are its controller, and this policy describes what we do with it.
  • Your workspace. The contacts, leads, companies, notes and other records you and your team put into Lead Tracker belong to your organization. Your organization is their controller; we are its processor and handle them only to provide the service, under our data processing agreement.

What we collect about you

  • Account details: your name, email address and password (stored only as a salted hash by our sign-in provider).
  • Workspace membership: which organizations you belong to, your role, and invitations you send or receive.
  • Security log: security-relevant actions in your workspace, such as role changes, invitations, API keys, exports and erasures, with the time and the person who did them. Admins of your organization can see it.
  • Technical data: to stop abuse we count requests per IP address and per account. We keep only a one-way hash of these values, for up to a day. Our hosting provider keeps standard server logs, including IP addresses, for a short time.

Cookies. We use only the cookies needed to keep you signed in. We don’t use analytics, advertising or tracking cookies, and we don’t share your data with advertisers.

Why we use it

  • To provide the service you signed up for: sign-in, workspaces, invitations and password resets (performance of a contract, GDPR Art. 6(1)(b)).
  • To keep it secure: rate limits, the security log, and investigating abuse (our legitimate interest in protecting the service and its users, Art. 6(1)(f)).
  • To meet legal obligations, such as answering lawful requests from authorities (Art. 6(1)(c)).

We don’t sell personal data, use it for advertising, or use workspace data to train AI models.

Data in your workspace

Your organization decides what it stores about its leads and contacts, and is responsible for having a lawful basis and telling those people. Lead Tracker gives it the tools: a lawful basis and consent record per contact, do-not-contact, per-person export and erasure, and retention rules.

If you are someone whose details a Lead Tracker customer holds (for example, you filled in one of their forms), please contact that organization. If you write to us instead, we’ll pass your request on to them.

Who we share it with

We use these providers to run Lead Tracker. Each processes data only on our instructions, under a data processing agreement.

ProviderWhat forWhere
Supabase, Inc.Database, sign-in and backupsEU (Paris)
Vercel Inc.Runs the applicationUSA
Resend, Inc.Sends invitation and password reset emailsUSA

Where a provider handles data outside the European Economic Area, the transfer is covered by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. We tell organizations before adding a provider that handles their workspace data.

How long we keep it

  • Account data: while your account is active. When you ask us to delete it, we do so within 30 days.
  • Workspace data: until your organization deletes it, or deletes the organization. Trashed records are deleted for good after 30 days, and your organization can set its own retention rules.
  • Backups: deleted data stays in our database backups until they expire, at most 30 days later.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Write to eugen@lifechangers.co. We’ll answer within one month.

You can also complain to a data protection authority, in particular in the EU country where you live or work. We’d appreciate the chance to sort it out first.

Security

Data is encrypted in transit and at rest. Access rules are enforced inside the database, so one organization can never see another’s data, and roles limit what each person can do. Secret keys never reach your browser. If a breach puts your data at risk, we’ll tell the authority within 72 hours and tell you without undue delay.

Children

Lead Tracker is a business tool and isn’t meant for anyone under 16.

Changes

If we make a material change to this policy, we’ll email account owners before it takes effect. The date at the top shows the latest version.

SC LIFE CHANGERS SRL. Int. Gheorghe Simionescu nr. 19, Sector 1, Bucharest, Romania.

Terms of servicePrivacy policyData processing agreement