Privacy Policy

1. Free business preview and browser files

LeadLayer AI operates the public website; LeadLayer ONE is a developing product. The current /start experience generates an editable sample and optional static downloads. The unauthenticated preview itself does not publish a website, activate a subscription or create a customer workspace. Signed-in accounts can separately publish eligible pages using the authorized publishing controls.

Information you type into the free preview is used to create the displayed sample. The preview is not a secure channel for personal records, trade secrets, passwords or payment details. A locally downloaded file remains on your device unless you choose to send or share it; browser and infrastructure providers may still process technical usage information.

While you edit a free preview, this browser tab may temporarily hold your answers and sample copy in session storage for up to eight hours to recover from a refresh. It is not an account save or cross-device synchronization. You can clear it using Clear this draft; files you downloaded separately stay on your device.

If you explicitly select Save in this browser, one validated editable preview is kept in this browser’s local storage for up to 30 days until you delete it or clear site data. Anyone using the same browser profile may access it. This is not a LeadLayer cloud backup or a cross-device account save. You may reopen or delete the browser copy from the preview; downloading an editable project file is an independent backup option. Do not save sensitive or confidential information.

An optional free account can store up to 20 owner-only editable business preview drafts in LeadLayer's hosted database. Sign-up uses an email address and authentication provider; project drafts contain the business details and copy you choose to save, plus timestamps and revisions. Drafts can be reopened after signing in. You can download an editable project file or export a JSON archive of your saved drafts to your own device. The bulk archive is portable data, not a one-click hosted restore. You can delete an individual saved draft from My Projects after confirming its name; deletion removes the active hosted draft but not your downloaded files or provider-managed backups subject to retention. For full account deletion, contact hello@leadlayerai.com with identity verification and applicable legal retention. The saved draft itself is not a published website, protected file vault, reliable off-site backup, or subscription; eligible signed-in users can separately publish an approved first page. Do not save confidential or sensitive information. Connected customer records, commerce and autonomous AI operations remain unreleased.

2. Private business identity

A free signed-in customer can visit Account & data at /settings to export their owned business profiles, saved projects, hosted publishing versions, inquiries, available private follow-up notes and notification states as a JSON snapshot up to 4 MB. Exports contain customer contact data and must be kept securely. Provider credentials and other customers' records are excluded; larger requests require identity-verified support. Downloads do not delete accounts or constitute hosted restoration. A free signed-in customer may save one private business identity profile: business name, selected industry, stated operating priority, account ownership, membership role, creation date and revision history fields. You may connect an existing saved preview draft to that profile or disconnect it without deleting the saved draft; the association and its revision are recorded in the database. It is used to show and update that customer's account business context, not to publish a site or share data with other customers. A request to delete the entire account or its business profile can be sent to hello@leadlayerai.com after identity verification and subject to legally necessary retention. Do not enter customer records or sensitive personal information.

3. Optional public first-page publishing

Beginning November 2, 2026, an authenticated customer may explicitly publish a saved business preview as a public one-page website on leadlayerai.com/s/ after linking it to their business profile. The public page displays the business name, stated offer, audience, edited copy and the customer's verified account email as a contact address only after specific affirmative consent. Public information can be indexed, shared, archived or copied. Do not publish secrets, sensitive personal information or confidential customer data.

The platform keeps up to 30 immutable publication snapshots for owner-controlled rollback. Unpublishing stops serving the page through the site URL; it cannot erase third-party caches or copies. Deleting the saved source draft also deletes its hosted publication record and versions. Visitors may contact the business via a direct email link or an optional inquiry form, which stores the visitor's name, reply email, message, and submission timestamp in the business owner's private LeadLayer inbox. The owner can review, change inquiry status, and contact the visitor through their own email app. A new inquiry queues a transactional email alert to the verified account email of the site owner through the existing managed email provider. Its status is shown in the private inbox. Provider acceptance does not establish inbox delivery; failure or uncertain acceptance is displayed for follow-up. No automatic customer reply is sent. A saved inquiry is not proof of email delivery or a reply. Messages are disclosed to the site-owning business, not unrelated customers. Do not submit confidential, payment or sensitive information. Site/project deletion removes active associated inquiries; legally required retention and provider backups may continue under applicable rules. No customer checkout, autonomous follow-up, recurring plan or custom domain is included in this free publishing stage.

4. Private customer support requests

Signed-in customers may create a private support request at /support. Support request records include the category, subject, description, account ownership, timestamps, status and an optional written LeadLayer HQ response. The service checks account verification, limits request frequency and allows only authenticated owners and separately authorized HQ administrators to view the relevant details. Staff responses appear in the private support area, not as guaranteed email delivery. Customers should not submit passwords, payment-card numbers or sensitive third-party data. Current self-service business export does not include support tickets; request a qualifying copy or deletion review through hello@leadlayerai.com, subject to applicable retention duties.

5. Privacy rights, portability and complaints

You may contact hello@leadlayerai.com to request access to or correction of applicable personal information, withdrawal of consent where available, deletion or de-indexing where the law permits, or a portable copy of qualifying computerized personal information collected from you. We may first verify your identity and must respect applicable legal exceptions and record-retention duties.

Privacy inquiries and complaints are directed to Carl Tabet as the individual responsible for privacy matters for this founder-operated brand. You may also contact the competent privacy regulator. Requests will be assessed under applicable law, including Québec's private-sector privacy rules when relevant.

6. Who is responsible

LeadLayer AI is a brand operated by Carl Tabet, an individual founder currently working remotely from Canada. It is not a separate incorporated entity.

Carl Tabet is responsible for privacy matters.

Contact: hello@leadlayerai.com

7. Information we collect

When you submit a Business Performance Review, contact us, or use available website features, we may collect:

• Your name, business name, email address, and website.

• Your country, approximate company size, service interests, and objectives.

• Information you provide about business challenges or processes.

• Correspondence and information needed for an agreed engagement.

• Account, authentication, and session information for authorized accounts.

• Consent and submission records.

Website infrastructure may also process IP addresses, browser and device information, security logs, referral sources, and campaign parameters.

For paid services, we may receive billing details, transaction references, and payment status from the relevant payment provider.

Please do not submit passwords, payment-card details, unnecessary sensitive information, or confidential third-party records through public forms or chat.

8. How we use information

We use information to:

• Respond to inquiries and provide requested preliminary reviews.

• Assess suitability and prepare proposals.

• Deliver agreed services and manage communications.

• Maintain operational, billing, and contractual records.

• Protect our website, prevent misuse, and resolve technical issues.

• Meet applicable legal and recordkeeping obligations.

Submitting an inquiry allows us to respond about that request. It does not automatically subscribe you to unrelated marketing.

Where separate consent is required, we will request it.

9. Providers and sharing

Our website uses third-party infrastructure for hosting, storage, authentication, email, and related operations.

Current infrastructure includes Lovable Cloud for relevant website and operational functions. Email providers process acknowledgments and notifications.

Where payment processing is enabled, Stripe processes the relevant payment transaction.

We share information with providers as needed for the relevant service, with appropriately authorized people assisting an engagement, or where permitted or required by law.

We do not sell or rent personal information.

Internal access is limited to the founder and authorized people who need the information for the relevant purpose.

10. AI features

The public AI assistant sends submitted messages through Lovable AI Gateway to the configured AI service to generate automated responses.

Providers and supporting infrastructure may process or retain information under their applicable terms. We do not promise zero retention or universal exclusion from provider model-improvement practices.

AI responses can be inaccurate. Do not submit confidential or sensitive information to the public assistant.

AI use involving private client systems or confidential materials requires appropriate engagement-specific arrangements.

11. Cookies and privacy preferences

Essential cookies, browser storage, or similar technologies may support functionality, security, authentication, and remembering preferences.

Nonessential analytics and advertising trackers are currently disabled.

Available preferences can be managed through Privacy Settings. Changing a browser preference does not delete inquiries, contractual records, or information already held by providers.

If optional tracking is introduced, we will update the disclosure and obtain any consent required before enabling it.

12. International processing

Information may be stored or processed outside Canada or your country of residence through our service providers.

Such information may be subject to the laws and lawful access procedures of those locations.

We do not guarantee that all information stays within a particular country. Special data-location requirements must be addressed before the relevant service is undertaken.

13. Retention and security

We retain inquiry information for as long as reasonably necessary to address the request and related follow-up.

Service, financial, contractual, and security records may need to be retained longer for their relevant purposes or legal obligations.

Information should not be retained indefinitely without a legitimate reason. Deletion remains subject to lawful preservation requirements and normal backup limitations.

We use safeguards appropriate to the information and systems under our control. No online system can guarantee absolute security.

14. Your rights

Depending on applicable law, you may request access, correction, deletion, or a portable copy of your information, or withdraw consent for relevant processing.

Email hello@leadlayerai.com.

We may verify your identity before fulfilling a request. Requests will be handled within applicable legal requirements, including any exceptions or retention obligations.

You may also contact the applicable privacy authority with a concern.

15. Children and policy changes

This website is intended for business and professional audiences and is not directed toward children.

We may update this policy as our services or practices change. The updated policy will show its effective date. Additional notice or consent will be provided where required.