Privacy policy

This policy explains what Lead Vault (operated by Xyron Studio, “we”) collects when you use vault.xyron.studio, and what we do with it.

Your account data

When you sign up we store your email address, workspace name, password hash (handled by our authentication provider, Supabase), billing status and usage such as credits and unlocked leads. If you pay, Stripe processes your card; we never see or store full card numbers.

Usage and security data

We keep limited technical logs (for example hashed IP addresses for rate limiting and abuse prevention, error logs, and help chat usage counts). We do not use advertising trackers.

Help chat

Questions you type into the help chat may be sent to an AI provider (such as OpenAI, Anthropic or Google) to write an answer. Do not type personal or sensitive information into it. Answers may be cached so repeated questions are cheaper.

Business data in the product

The leads in Lead Vault are business records built from publicly available sources, mainly public business listings and public business websites. If you represent a business and want its record corrected or removed, contact us through the help chat and we will act on it.

Sharing

We share data only with the service providers that run the product (hosting, database, authentication, payments, email and AI providers), or when the law requires it. We do not sell your account data.

Your rights

You can access, correct, export or delete your account data. Where GDPR or similar laws apply you also have the right to object and to complain to your data protection authority. Contact us through the help chat to make a request.

Retention

We keep account data while your account is active and delete or anonymise it within a reasonable time after you close it, except where we must keep records for legal or tax reasons.

Changes

We will update this page when the policy changes and change the date above.