Privacy policy

Who we are

The company details behind NoLeadLost will be listed here once this policy is final. You can send privacy questions to info@no-leadlost.com.

Two roles

For the data of our customers (the businesses that use NoLeadLost) we are the controller. For the data of their customers, such as messages in the website chat, we act as processor and the business is the controller. For EU customers we sign a data processing agreement as required by the GDPR.

What data we process

• Account data: name, email address and password (stored as a secure hash, never readable).
• Business data: such as address, opening hours, services and prices.
• Conversations and appointments: messages, contact details that customers share themselves, and booked appointments.
• Technical data: such as IP address and browser type, for security and troubleshooting.

The chat widget

The chat widget on a business's website stores a random visitor ID in the browser's local storage, so a returning visitor sees their earlier conversation. This ID is not used for tracking across websites or for advertising.

What we use it for

To deliver the service: answering questions, booking appointments, sending messages and keeping your account secure. We don't sell data and don't use conversations for advertising. Payment card numbers and passwords are automatically masked in chats.

Who we share data with

Only with providers needed to deliver the service, such as hosting, email delivery and the language model provider that drafts the replies. We have agreements with each of them about protecting data.

Sub-processors

• Hosting
• Database
• Email delivery
• Language model provider
• File storage

Some of these providers may process data outside your country or the EU. Where required, such transfers are covered by standard contractual clauses or another valid transfer mechanism.

How long we keep data

We keep data as long as your account is active. On request we delete conversations or a customer's data sooner. After you cancel, we delete data within a reasonable period, unless the law requires us to keep it longer. A business can export all its data, erase a single customer's data and delete its whole workspace itself, under Settings, Data & privacy in the dashboard.

Your rights

Depending on where you live, you may have the right to access, correct, delete or transfer your data, and to object to processing. Send your request to info@no-leadlost.com. If you are in the EU and disagree with how we handle your data, you can file a complaint with your local data protection authority.