Privacy Policy

Last updated: October 09, 2026

LeadExtractor ("we", "our", "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.

1. Information We Collect

a. Personal Information You Provide

  • Account Information: Email address, password (stored securely as a hashed value), and role assignment.
  • Email Account Credentials: When you connect an email account via OAuth or IMAP, we securely store access/refresh tokens or encrypted passwords to enable features like lead extraction and campaign sending.
  • Campaign Content: Subject lines, email body content, attachments, and recipient lists you upload or generate.
  • Proxy Lists: If you choose to use SOCKS5 proxies, we temporarily store the list of proxy endpoints you provide.

b. Information Collected Automatically

  • Usage Data: We log actions such as extraction jobs, campaign creation, email sends, and MX record lookups to provide functionality and improve performance.
  • Technical Data: IP address, browser type, operating system, and referral URLs are collected for security and analytics purposes.
  • Cookies: We use essential cookies for authentication, session management, and theme preferences (dark/light mode).

2. How We Use Your Information

  • To Provide Core Services: Extracting leads, sending campaigns, managing email accounts, and exporting data.
  • To Improve User Experience: Monitoring job progress, displaying real-time updates, and optimising performance.
  • To Ensure Security: Authenticating users, encrypting sensitive data (tokens and passwords), and preventing unauthorised access.
  • To Communicate: Sending system notifications, password reset links, and email verification requests (via the email service you configure).
  • To Comply with Legal Obligations: If required by law, we may disclose information to comply with regulatory requirements.

3. How We Share Your Information

  • Third-Party Service Providers: We use trusted third parties to operate our application, such as:
    • PostgreSQL – for data storage.
    • Hangfire – for background job processing.
    • Email Providers (Microsoft, Google, Yahoo, IMAP) – for sending emails and extracting leads, as per your connected accounts.
  • Proxies: If you configure SOCKS5 proxies, your emails may be routed through these third-party proxy servers.
  • Legal Requirements: We may disclose information if required by law, court order, or governmental regulation.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Security

  • Encryption: All OAuth tokens, passwords, and sensitive credentials are encrypted using ASP.NET Core Data Protection with a secure key storage mechanism.
  • Secure Connections: All communication between your browser and our servers is encrypted via HTTPS.
  • Access Controls: Role-based access (Admin, UserLevel1, UserLevel2) limits what users can see and do within the application.
  • Certificate Validation: For SMTP/IMAP connections, certificate errors are handled according to your configuration.

While we take reasonable measures to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

5. Data Retention

  • Extracted Leads: Stored as long as your account is active or until you delete them.
  • Campaigns & Sends: We retain campaign records and send attempts to provide audit logs. You may delete them via the application.
  • Attachments: Uploaded attachments are stored temporarily and are automatically deleted after 7 days of campaign completion.
  • Account Information: Stored until you delete your account or request removal.
  • Logs & Job History: Retained for operational and diagnostic purposes.

6. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request corrections to inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to our legal obligations.
  • Restriction: Request restrictions on how we process your data.
  • Objection: Object to the processing of your data for certain purposes.

To exercise these rights, please contact us using the details provided below. We will respond within a reasonable timeframe.

7. Children's Privacy

LeadExtractor is not intended for children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information.

8. Third-Party Links

Our application may contain links to third-party websites (e.g., email provider OAuth pages). We are not responsible for the privacy practices or content of such third parties. We encourage you to review their privacy policies.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Telegram: @zleet

Or via the support channels provided within the application.

This Privacy Policy applies exclusively to LeadExtractor and its associated services.