Privacy Policy

When you create an account we collect your email address, and optionally your name and company name. Sign-in uses a one-time code sent to that address; we do not store a password unless you use the legacy password login.

We record operational data needed to run the service: the searches you run, the leads saved to your account, your plan and usage counters, sign-in timestamps, and the IP address that requested a sign-in code (used to rate-limit abuse).

Leads describe organisations, not private individuals. The information comes from public business records and from pages a company publishes on its own website. For each field we store the source name, the source URL and the time it was retrieved.

We do not collect personal information from behind a login, and we do not build profiles of private individuals. Where a published business contact happens to identify a person, it is processed on the basis of legitimate interest in business-to-business communication, and can be removed on request.

• To authenticate you and keep your session
• To run searches, store your leads and apply plan limits
• To send transactional email, sign-in codes, account and billing notices
• To detect and limit abuse of the service

We do not sell your personal information, and we do not send marketing email you have not asked for.

We share data only with the providers needed to operate the service: our hosting provider, our email provider for transactional messages, and the data providers used to fulfil a search. Each receives only what that task requires.

We may disclose information where required by law.

Account records are kept while your account is open. Sign-in codes expire within ten minutes and are deleted after use. Leads held by free accounts are removed after 90 days by a scheduled job. Closing your account deletes your account record and its leads.

Traffic is encrypted with TLS. Sign-in codes are stored hashed, never in plain text. Application secrets are held outside the source tree with restricted file permissions. We do not store card details at any point.

You may request a copy of your data, correction of it, or its deletion. You may also ask that a specific business record be removed from our index. Write to contact@aleeraza.pro and we will respond within 30 days.

We set one cookie, holding your session token. It is HTTP-only, restricted to this site, and expires after seven days. There are no advertising or third-party tracking cookies.

Material changes will be announced by email to account holders before they take effect.