Privacy Policy

Overview

Lead2Cash.ai LLC ("Lead2Cash.ai," "we," "us," or "our") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you use our website (lead2cash.ai) and AI sales automation platform (collectively, the "Services").

By accessing or using our Services, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use our Services.

Information We Collect

• Contact information: name, email address, phone number, company name
• Account credentials when you create an account on our platform
• Business information: industry, company size, sales process details
• Payment information processed through Stripe (we do not store card numbers)
• Communications you send us via email, contact forms, or live chat

• Usage data: pages visited, features used, actions taken within the platform
• Device information: IP address, browser type, operating system
• Log data: timestamps, referral URLs, error reports
• Cookie and tracking data as described in the Cookies section below

When you use our platform to manage your sales pipeline, we process personal data about your leads and contacts as a data processor on your behalf. You are the data controller for this information. We process it only according to your instructions and this Policy.

How We Use Your Information

Purpose	Legal Basis (GDPR)
Delivering and operating the Services	Contract performance
Processing payments and billing	Contract performance
Customer support and communications	Contract performance / Legitimate interest
Platform improvements and analytics	Legitimate interest
Security monitoring and fraud prevention	Legitimate interest / Legal obligation
Marketing communications (with consent)	Consent
Legal compliance and regulatory requirements	Legal obligation

We will never use your information for purposes incompatible with those listed above. We will not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Data Sharing & Disclosure

We share your information only in the following circumstances:

We use trusted third-party services to operate our platform. These providers have access to data only as necessary to perform their functions and are bound by data processing agreements:

• GoHighLevel — CRM and automation platform
• Twilio — SMS and voice telephony
• ElevenLabs / Vapi — AI voice services
• SendGrid — Email delivery
• Stripe — Payment processing
• Google — Calendar integration and analytics

We may disclose information if required by law, regulation, legal process, or governmental authority, or to protect the rights, property, or safety of Lead2Cash.ai, our customers, or the public.

In the event of a merger, acquisition, or asset sale, personal data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

We will never sell your personal data to third parties.

Data Security

We implement industry-standard security measures to protect your information:

• All data encrypted at rest using AES-256 encryption
• All data in transit protected by TLS 1.3
• Regular security audits and vulnerability assessments
• Role-based access controls limiting data access to authorised personnel
• Secure development practices and code review processes
• Incident response procedures and breach notification protocols

While we implement strong security measures, no system is completely immune to security risks. We encourage you to use strong passwords and secure your account credentials.

TCPA Compliance

The Telephone Consumer Protection Act (TCPA) governs how automated calls and SMS messages may be sent. Lead2Cash.ai is designed to operate in full compliance with TCPA requirements:

• All automated calls and SMS messages are only sent with proper consent
• Quiet hours enforced: no automated messages sent before 8am or after 9pm local time
• Opt-out requests honoured immediately and permanently within all systems
• Full communication logs maintained for compliance audit purposes
• No messages sent to numbers on the National Do Not Call Registry

Clients using our platform are responsible for ensuring they have obtained proper consent from their own leads before initiating automated communications through our system.

GDPR Rights & Data Subject Requests

If you are in the European Economic Area (EEA) or United Kingdom, you have the following rights under GDPR:

• Right of access — request a copy of your personal data we hold
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your personal data ("right to be forgotten")
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making — not be subject to solely automated decisions that significantly affect you

To exercise any of these rights, contact us at privacy@lead2cash.ai. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Cookies & Tracking

We use cookies and similar tracking technologies to operate and improve our website and platform. Types of cookies we use:

• Essential cookies — required for the website and platform to function. Cannot be disabled.
• Analytics cookies — help us understand how visitors use our site (Google Analytics). Can be disabled.
• Preference cookies — remember your settings and preferences. Can be disabled.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our services.

Data Retention

We retain your information for as long as necessary to provide our services and fulfil the purposes outlined in this Policy:

• Account data: retained for the duration of your account plus 3 years after closure
• Communication logs (calls, SMS, emails): retained for 7 years for compliance purposes
• Payment records: retained for 7 years to comply with financial regulations
• Website analytics: retained for 26 months (Google Analytics default)
• Marketing data: retained until you unsubscribe, then promptly deleted

When data is no longer required, it is securely deleted or anonymised. You may request early deletion of your data as described in the GDPR section above.

Contact Us

For privacy-related questions, data subject requests, or to report a concern, please contact us:

We are committed to working with you to resolve any privacy concerns. If you are not satisfied with our response, you have the right to contact your local data protection authority.

Policy updates: We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Continued use of the Services after changes constitutes acceptance of the updated Policy.