Privacy Policy for Lead Magic Corporation

Introduction

Lead Magic Corporation ("LeadMagic," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, share, and protect your information when you interact with our services, including our website at leadmagic.io and our data enrichment platform (collectively, the "Services").

As a data provider specializing in business intelligence and data enrichment, we collect, process, and provide business contact information and related data to our customers. This Privacy Policy explains our practices regarding such data processing activities.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, do not use our Services.

1. Information We Collect

1.1 Information You Provide to Us

We collect information you voluntarily provide when you:

• Create an account or register for our Services
• Submit information through our website forms
• Communicate with our customer support
• Subscribe to marketing communications
• Participate in surveys, contests, or events

This information may include:

• Contact information (name, email address, phone number, mailing address)
• Business information (company name, job title, industry)
• Account credentials
• Payment information (processed securely through our payment processors)
• Communications and correspondence with us

1.2 Information We Collect Automatically

When you use our Services, we automatically collect certain information, including:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Location information (derived from IP address)
• Log data and analytics information
• Cookies and similar tracking technologies (as described in our Cookie Policy)

1.3 Information From Third-Party Sources

As a data enrichment provider, we collect information from various third-party sources, including:

• Public databases and directories
• Public social media profiles and professional networks
• Data partners and information providers
• Marketing and analytics partners
• Public records and government databases
• Other publicly available sources
• Web scraping of publicly available business information (in compliance with applicable laws)
• Business registries and corporate filings

2. How We Use Your Information

2.1 Provide and Maintain Our Services

• Deliver our data enrichment services and related features
• Process transactions and manage your account
• Authenticate users and ensure secure access
• Respond to inquiries and provide customer support
• Fulfill contractual obligations to our customers

2.2 Improve and Develop Our Services

• Analyze usage patterns and trends
• Debug and fix issues
• Develop new features and functionality
• Conduct research and analytics
• Improve data accuracy and coverage

2.3 Communicate With You

• Send administrative notifications
• Provide updates about our Services
• Deliver marketing communications (subject to your preferences)
• Respond to your requests and inquiries

2.4 Protect Our Services and Users

• Detect and prevent fraud, spam, abuse, and security incidents
• Enforce our Terms of Service and other policies
• Protect the rights, property, and safety of LeadMagic, our users, and others
• Comply with applicable laws, regulations, and legal processes

2.5 Data Licensing and Sales

• License and sell business contact information to our customers
• Provide data enrichment services to third-party platforms
• Offer API access to our data for integration with customer systems
• Supply data for customer relationship management (CRM) systems
• Enable targeted business-to-business marketing and sales activities

3. Legal Bases for Processing (For EEA, UK, and Similar Jurisdictions)

If you are located in the European Economic Area (EEA), United Kingdom, or similar jurisdictions, we process your personal information based on the following legal grounds. We have mapped each legal basis to the specific processing activities it supports:

Performance of Contract

Processing necessary to provide our Services and fulfill our contractual obligations to you:

• Account creation and management
• Service delivery (data enrichment, email verification, API access)
• Payment processing and billing
• Customer support and communication about your account

Legitimate Interests

Processing that serves our legitimate business interests, balanced against your rights and freedoms:

• Fraud prevention and security (detecting abuse, protecting the integrity of our platform)
• Service improvement (analyzing usage patterns, debugging, developing new features)
• Business intelligence data processing (aggregating and enriching publicly available business contact data for our database)
• Internal analytics and reporting (understanding how our Services are used)

Compliance with Legal Obligations

Processing necessary to comply with applicable laws, regulations, or legal processes:

• Tax and accounting obligations
• Responding to lawful government requests and court orders
• Record-keeping required by applicable regulations

Consent

Processing based on your specific consent, which you may withdraw at any time:

• Marketing emails and promotional communications
• Non-essential cookies and tracking technologies
• Participation in surveys, contests, or events

4. Information Sharing and Disclosure

4.1 With Service Providers (Sub-Processors)

We share information with third-party service providers who perform services on our behalf, such as cloud hosting providers, payment processors, customer support services, and marketing analytics providers. These providers are contractually obligated to protect your data and may only process it on our instructions. A current list of our sub-processors is available upon request by contacting privacy@leadmagic.io, or by visiting our Data Processing Agreement page.

4.2 With Customers and Users of Our Services

As a data enrichment provider, we share business contact information and related data with our customers in accordance with applicable laws and our contractual agreements.

4.3 For Legal Reasons

We may disclose your information if we believe in good faith that such disclosure is necessary to comply with applicable laws, enforce our Terms of Service, detect and prevent fraud, or protect the rights, property, or safety of LeadMagic, our users, or the public.

4.4 Business Transfers

If LeadMagic is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred or disclosed as part of that transaction.

5. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Below are our retention periods by data category:

• Account data (name, email, company): retained for the duration of your account, plus three (3) years after account closure, unless deletion is requested.
• Payment and billing records: retained for seven (7) years after the transaction to comply with tax and accounting obligations.
• Enrichment query logs (API requests, CSV uploads): retained for twelve (12) months, then anonymized or deleted.
• Marketing consent records and communication preferences: retained for three (3) years after last interaction or until consent is withdrawn, whichever is earlier.
• Usage and analytics data (device info, log data): retained for twenty-four (24) months, then aggregated or deleted.
• Business contact data in our database (third-party sourced): retained and refreshed on an ongoing basis, subject to suppression requests and data accuracy reviews.
• Support correspondence: retained for three (3) years after resolution.

When data is no longer needed, we securely delete or anonymize it. If deletion is not immediately possible (for example, due to backup systems), we isolate the data and protect it from further processing until deletion is possible.

6. Data Security

We implement appropriate technical and organizational measures to protect your information from unauthorized access, use, disclosure, alteration, or destruction. These measures include encryption of sensitive data in transit and at rest, access controls and authentication mechanisms, regular security assessments, employee training on data security and privacy, and incident response procedures.

However, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

7. International Data Transfers

LeadMagic is based in the United States, and we process and store information on servers located in the United States and other countries. By using our Services, you acknowledge that your information may be transferred to, stored in, and processed in countries outside of your country of residence, including countries that may have different data protection rules than those of your country.

When we transfer personal information from the EEA, UK, or Switzerland to countries that have not been deemed to provide an adequate level of protection, we use appropriate safeguards, such as standard contractual clauses approved by the relevant authorities.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information. We will respond to rights requests without undue delay and in any event within thirty (30) days of receiving a verifiable request (or forty-five (45) days for requests made under the CCPA/CPRA). If we require additional time, we will notify you of the extension and the reasons for the delay.

8.1 Access and Portability

You may request access to the personal information we hold about you and, in some cases, receive it in a structured, commonly used, and machine-readable format.

8.2 Correction

You may request that we correct inaccurate or incomplete personal information we hold about you.

8.3 Deletion

You may request that we delete your personal information in certain circumstances, subject to legal retention requirements and legitimate business needs.

8.4 Restriction and Objection

You may request that we restrict the processing of your personal information or object to our processing of your personal information in certain circumstances.

8.5 Data in Our Business Database

If your business contact information appears in our database and you are not a LeadMagic customer, you have the following rights:

• You may request to review what information we have about you
• You may request corrections to inaccurate information
• You may request suppression of your information from our database
• You may object to certain uses of your information

To exercise these rights, you may submit a request through our self-service Data Subject Request form, or contact us at privacy@leadmagic.io. We will process suppression requests within thirty (30) days.

8.6 Right to Lodge a Complaint

If you are located in the EEA or UK, you have the right to lodge a complaint with your local data protection supervisory authority if you believe that our processing of your personal information violates applicable data protection law. A list of EEA supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en. For the UK, you may contact the Information Commissioner's Office (ICO) at https://ico.org.uk/. We would, however, appreciate the opportunity to address your concerns before you contact a supervisory authority.

9. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: Request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct: Request that we correct inaccurate personal information we maintain about you.
• Right to Opt Out: Opt out of the "sale" or "sharing" of your personal information as defined under California law.
• Right to Non-Discrimination: Not be discriminated against for exercising your CCPA/CPRA rights.

9.1 Categories of Personal Information Sold or Shared

LeadMagic does "sell" and "share" personal information as defined under California law through our data enrichment services. In the preceding twelve (12) months, we have sold and/or shared the following categories of personal information:

9.2 Opt-Out Rights

To opt out of the sale or sharing of your personal information, please visit our Do Not Sell or Share My Personal Information page or contact us at privacy@leadmagic.io. We will process your opt-out request within fifteen (15) business days.

10. Children's Privacy

Our Services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 16, we will take steps to delete such information as soon as possible. If you believe that we have inadvertently collected information from a child under 16, please contact us at privacy@leadmagic.io.

11. Automated Decision-Making and Profiling

LeadMagic uses automated processes to match, verify, and enrich business contact data (for example, matching an email address to a company record or validating that a phone number is active). These processes are used to improve the accuracy and completeness of data delivered to our customers.

We do not use automated decision-making that produces legal effects or similarly significant effects on individuals (as described in GDPR Article 22). Our data matching and enrichment processes are technical in nature and are not used to evaluate personal aspects such as creditworthiness, reliability, or behavior.

If you have questions about how your data may be processed through automated means, or if you wish to request human review of a specific decision, please contact us at privacy@leadmagic.io.

12. Do Not Track Signals

Some web browsers transmit "Do Not Track" ("DNT") signals. We do not currently respond to DNT signals because there is no industry-standard technology for recognizing or honoring them. If a standard for responding to DNT signals is established, we will revisit this policy. For information about how to manage cookies and other tracking technologies, please see our Cookie Policy.

13. Data Protection Contact and EU Representative

LeadMagic has designated a Data Protection point of contact responsible for overseeing our data protection strategy and compliance with applicable data protection laws. You may reach our data protection team at privacy@leadmagic.io.

If you are located in the European Economic Area and wish to exercise your rights or raise a concern about our data processing practices, you may also contact our EU representative:

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by email (if you have provided one) or by posting a notice on our website prior to the changes becoming effective. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: