Privacy Policy
How LeadCoAI handles your data. In plain English.
Who we are
LeadCoAI ("we", "us") is operated by Stacy Stanfield. We provide an AI-powered platform that builds websites, runs chat widgets, generates marketing media, and acts as a personal AI assistant for small businesses. Service URL: https://leadcoai.com.
Information we collect
You give us directly
- Account info: name, email address, phone number (optional), business name (optional), password (hashed)
- OAuth login data: if you sign in with Google, Facebook, or Apple, we receive your verified email address and display name from those providers — nothing more
- Content you create: chat conversations with your Personal AI, files you upload, documents you save, prompts you type, websites you ask us to build
- Payment info: processed by Square — we never see or store your card numbers. We only see a transaction ID and amount.
Collected automatically
- IP address at signup and login (used for abuse prevention, rate limiting, fraud detection)
- Browser type, device, referrer (standard server logs, kept ~30 days)
- Usage data: AI token counts, feature usage, errors (for billing accuracy and reliability)
How we use your information
- Run the service — log you in, save your conversations and files, deliver AI responses
- Bill you accurately for AI usage you consume
- Send transactional emails (welcome, billing receipts, support replies)
- Prevent abuse (spam signups, fraud, hostile usage)
- Improve the service based on aggregate, anonymized usage patterns
We do not sell your data. We do not serve third-party advertising on your account or your hosted sites.
Third parties we share data with
Only what's necessary to operate the service:
- AI providers (Anthropic, OpenAI, Google) — your conversation contents are sent to these providers to generate AI responses. Each provider has their own privacy policy. We use API access (not consumer ChatGPT/Gemini); customer data sent via API is not used to train their models per their terms.
- Square — for payment processing only
- Email delivery (Google Workspace SMTP) — to send you transactional emails
- Hosting infrastructure (AWS) — for backups and storage
- Let's Encrypt — to issue SSL certificates for your subdomain
We do not share your data with advertisers, data brokers, or any party outside of running our service.
AI training and your content
Your conversations, files, and generated content are yours. We do not use them to train our models or any third party's models. The AI providers we use (Anthropic, OpenAI, Google) accept data via their commercial APIs under terms that exclude training on that data.
If we ever want to use anonymized examples for marketing or product demos, we will ask for your explicit opt-in first.
How long we keep your data
- Active account: as long as your account is active
- After deletion: we remove account content within 7 business days of a deletion request. See our data deletion instructions.
- Billing/transaction records: retained for 7 years to comply with financial regulations (anonymized after account deletion)
- Server logs: ~30 days
Your rights
You can:
- Access your account data anytime by logging in
- Export your conversations, files, and content (email us)
- Correct any inaccurate info in your account settings
- Delete your account and all associated data — see deletion instructions
- Withdraw consent at any time (account deletion is the simplest way)
If you're in the EU/UK, you also have GDPR rights to portability and to object to certain processing. Email us to invoke any of those.
Cookies and tracking
We use the minimum necessary cookies:
- Session cookie — keeps you logged in
- Auth token cookie — used to restore your session after the browser closes
We do not use third-party advertising, analytics, or tracking cookies on your authenticated account pages. We may use basic analytics (Google Analytics, etc.) on our marketing pages; you can opt out via standard browser controls.
Children's data
LeadCoAI is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, email stacy@leadcoai.com and we'll promptly delete it.
Security
We store passwords hashed, transmit all data over HTTPS, restrict database access, and isolate each customer's files in a per-account sandbox. No system is perfectly secure; if you spot a vulnerability, please email stacy@leadcoai.com directly.
Changes to this policy
If we make material changes, we'll notify you by email and post the change on this page with a new effective date. Continued use after the change indicates acceptance. We won't change the policy in a way that weakens your existing rights without notice.
Privacy questions, deletion requests, data exports, or anything else:
stacy@leadcoai.com