Privacy Policy

Who we are

Leadsfinder provides B2B prospecting and outreach software for the Swedish market.

For privacy questions or to exercise your rights, contact us at privacy@leadsfinder.nu.

What personal data we process

Account data: the name and email address of people who sign in to Leadsfinder, plus basic usage data.

Business contact data: names, job titles, business phone numbers and business email addresses of company representatives, used to support B2B prospecting.

Content you create: notes, outreach messages, templates, and any call recordings or transcripts you choose to make in the product.

Where the data comes from

Company and industry data is sourced from official Swedish open data — Bolagsverket (the Swedish Companies Registration Office) and SCB (Statistics Sweden) — and from publicly available company websites that we crawl.

Account data comes from you when you register and use the service.

Why we process it and our legal basis

We process business contact data for our legitimate interest in providing a B2B prospecting service (GDPR Article 6(1)(f)). We have weighed this interest against the rights of the individuals, who are addressed in a professional capacity.

We process account data to perform our contract with you (Article 6(1)(b)) and to meet legal obligations such as bookkeeping (Article 6(1)(c)).

Direct marketing and your right to object

You may object to the processing of your personal data for direct marketing at any time. When you object, we stop and add you to a suppression list so you are not contacted again.

To object, email privacy@leadsfinder.nu. Customers can also flag a contact as do-not-contact and submit erasure requests directly in the product.

Who we share data with

We use trusted sub-processors to run the service: Convex (database and backend), Vercel (web hosting), Railway (background processing), Cloudflare R2 (file storage), OpenAI (AI summaries, recommendations and transcription), 46elks (Swedish SMS, MMS and voice), Stripe (payments) and Google Workspace (email delivery).

Some sub-processors may process data outside the EU/EEA. Where they do, transfers are protected by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

We do not sell personal data.

Automated processing and AI

We use AI to summarise publicly available company information, suggest prioritisation against your ideal customer profile, and help draft outreach. These features support the salesperson but make no decisions with legal effect for the people contacted, and there is no automated profiling with such effects.

The AI processing runs at our provider (OpenAI) acting as a processor via their API; content sent there is not used to train their models under their terms.

How long we keep it

Account and customer workspace data is kept while the account is active and for up to 90 days after cancellation, after which it is permanently deleted.

Company and business-contact data from public sources is kept for as long as it is relevant for prospecting, and is removed on a valid objection or erasure request.

How we protect it

Data is transmitted over encrypted connections (TLS). Credentials and integration secrets are encrypted at rest. Access is restricted to what is needed to operate the service.

Your rights

You have the right to access, rectify, erase, restrict and port your personal data, and to object to processing. To exercise any of these, email privacy@leadsfinder.nu.

If you believe we process your data unlawfully, you may lodge a complaint with the Swedish Authority for Privacy Protection (IMY, imy.se).

Cookies

We use only strictly necessary cookies: a sign-in session cookie and a cookie that remembers your language. We do not use advertising or third-party tracking cookies.

Changes to this policy

We may update this policy from time to time. The date above shows when it was last changed.