Draft: replace the [bracketed] parts with your details and have this reviewed by a lawyer in your country before launch.
Privacy policy
Last updated: [date]
LeadBuzzPro ("we") is a browser extension and website operated by [your name or company], [address, country]. This policy explains what data LeadBuzzPro handles and why. Contact: .
1. Data that stays on your computer
LeadBuzzPro only reads a page when you open it and press Start (or start a background queue yourself, see section 3). Depending on the site, it reads what that page shows:
- Social sites (Instagram, LinkedIn, Facebook, YouTube, TikTok, X, Reddit): names, usernames, profile links, headlines and the comments people posted.
- Maps (Google, Bing and Apple Maps): business names, categories, addresses, phone numbers, websites, ratings and opening hours.
- Job and freelance sites (Upwork, PeoplePerHour, LinkedIn Jobs, Fiverr, Toptal): job posts, budgets, skills, seller and freelancer profiles, and the client or seller details those pages show. If a poster wrote an email address, website or company name into their own post, LeadBuzzPro saves that too.
All of this is stored only in your browser's local storage, together with your leads, notes, message templates and settings. We do not receive or store it, except as described in sections 2 and 3. LeadBuzzPro never reads pages you don't run it on, your browsing history, or content hidden from you.
2. Data our server receives
- License and device: your license key, the email you used at checkout, a random device ID created by the extension, a device name such as "Chrome on Mac", and when each device was last seen. Used to check your plan and limit devices per license.
- Usage counters: the number of rows exported each month on the Free plan, counted per device and per IP address, and the number of AI drafts per Pro license. Used to enforce plan limits.
- Problem reports: if you click "Report a problem" in the extension, we receive the site, the page type with names, IDs and search terms removed (for example "www.instagram.com/:x/followers"), the mode, how many rows were found, the extension and rules version, and the note you write.
- Early-access list: if you join the waitlist on our website, we store your email and when you joined, only to tell you when LeadBuzzPro launches. Ask us any time to remove it.
- Website analytics: only if you allow it, our website uses Google Analytics 4 and Microsoft Clarity. That data goes to Google and Microsoft, not to our license server. See section 6.
- Payments: handled by Freemius, Inc., our reseller and merchant of record. Freemius runs the checkout (it loads from checkout.freemius.com when you click a buy button), takes the payment, issues the invoice and collects any sales tax or VAT. We receive your email, name, Freemius customer and purchase IDs, plan, billing period, renewal date and refund or cancellation status, so we can issue and manage your license key. We never see your card details. Freemius processes your data as an independent controller under Freemius' privacy policy.
3. Optional features that send data
- AI drafts (Pro): when you click "AI draft", the person's name, handle, bio/headline and comment, plus your name, offer, tone and link, are sent to our server and to Anthropic (the Claude API) to write the message. We don't keep the text after the draft is returned. Anthropic processes it under its privacy policy and commercial terms.
- Profile enrichment and client / seller details (Pro): when you start it, the extension opens the saved profiles, jobs or gigs one at a time in background tabs of your browser and reads the public details shown there (for example follower count, bio, website, or a client's country and hiring history). This happens in your browser; the results stay in local storage like everything else.
- Email verification (Pro): when you click "Verify emails", those email addresses are sent to our server, which checks their format and looks up whether their domain receives mail (a DNS query through Cloudflare). No email is sent to the address. We keep only a monthly count of checks.
- Sending tools (Pro): if you connect Instantly, Smartlead or lemlist and click "Send leads", the leads you send (email, name, company, website, phone and a comment snippet) go directly from your browser to that tool with your own API key. We never see the key or the leads. That tool's own policy applies.
- API and AI agents (Pro): if you turn on cloud sync, your lead list is stored on our server as described for Teams below, and anyone holding one of your API keys can read it, update lead statuses and export it through our API or MCP endpoint. Keys are stored only as a hash; you can revoke them at any time in Account.
- Teams (Pro): if you create or join a team, your lead list (names, profile links, bios, comments, business or job details, status, notes, assignments and history) is stored on our server so your teammates can see it. Leaving the team stops syncing; when the last member leaves, the team's data is deleted.
- Webhooks: if you add a webhook URL (for example Zapier or Make), lead details are sent directly from your browser to that URL. That service's own policy applies.
4. Your responsibilities for people's data
The people you collect are not LeadBuzzPro users, and you decide what to do with their information. If you contact them or store their details, you may be a "data controller" under laws such as the GDPR. Only collect what you need, honor requests to be removed, and follow anti-spam rules.
5. What we don't do
- We don't use or transfer data for purposes unrelated to LeadBuzzPro's features, and we don't use it to determine creditworthiness or for lending.
- We don't sell or rent personal data.
- We don't read your social media messages, passwords or session cookies.
- We don't use advertising trackers in the extension, and the extension doesn't download or run code from our server: the "extraction rules" it receives are data (page patterns), not code.
6. Cookies and website analytics
leadbuzzpro.com only uses analytics if you allow it. On your first visit a banner asks you to Accept all, Reject or Choose. Nothing below loads until you decide, and rejecting is as easy as accepting. If your browser sends a Global Privacy Control or Do Not Track signal, we treat that as "Reject" and don't show the banner; you can still opt in from "Cookie settings".
- Google Analytics 4 (Google Ireland Limited, and Google LLC in the US), the "Analytics" switch. It records the pages you view, how you arrived (the referring site, search engine, and campaign tags in the link such as
utm_sourceorref), your device type, browser, screen size and language, an approximate location derived from your IP address (Google does not store the IP address itself), and actions on this site such as clicking "Add to Chrome", opening checkout, joining the early-access list or following a link to one of our sister sites. It sets first-party cookies_gaand_ga_<ID>, which last up to 2 years. When you follow a link between leadbuzzpro.com, postbuzzpro.com and sendbuzzpro.com, a_glparameter is added to the link so the visit counts as one session. We keep Analytics data for [14] months. Advertising storage, ads personalisation and Google Signals are off. See Google's privacy policy and how Google uses data from sites that use its services. - Microsoft Clarity (Microsoft Corporation), the "Session recording" switch. It records how you use our pages (clicks, taps, scrolling, mouse movement and the page layout) so we can replay sessions and build heatmaps that show where pages confuse people. It also records your device, browser and approximate location. Text you type, such as email addresses and license keys, is masked in your browser and never sent. It sets first-party cookies
_clck(up to 1 year) and_clsk(1 day). Clarity is linked to our Google Analytics, so we can open a recording from an Analytics report. Microsoft keeps recordings for about 30 days. See the Microsoft privacy statement. - Your choice is saved in your browser's local storage (
bz-consent) for 6 months, then we ask again. It is not a cookie and is not sent to us. Each of our three sites asks separately. - Cloudflare Web Analytics, if we turn it on, counts visits without cookies or personal identifiers, so it doesn't need your consent.
- Links to our sister sites carry a
refparameter and campaign tags so we can count visits between them; they identify the site you came from, not you.
Changing your mind. You can withdraw or change your consent at any time: click Cookie settings at the bottom of any page (or the button below), turn the switches off and save. We then stop Google Analytics and Clarity on this site and delete their cookies; clearing this site's data in your browser does the same. Withdrawing doesn't affect data collected before.
Our legal basis is your consent (GDPR Article 6(1)(a), and the ePrivacy rules for cookies). Google and Microsoft may process this data in the United States; both are certified under the EU-U.S. Data Privacy Framework. [Check this paragraph against your local law before launch.]
7. Where data is stored and for how long
Our server runs on Cloudflare. License, device and usage records are kept while your license is active and for up to [12] months after, for billing and fraud prevention. Team data is kept until the team is deleted. You can ask us to delete your data at any time.
8. Your rights
You can ask to access, correct or delete the data we hold about you by emailing . Uninstalling the extension deletes everything stored in your browser.
9. Changes
If we change this policy, we'll update the date above and, for significant changes, tell Pro users by email.