Privacy Policy – FinaLeads

Effective Date: January 2025
Last Updated: January 2025

1. Introduction

FinaLeads Inc. (“we”, “us”, “our”) operates the website https://finaleads.com and provides cloud-based B2B lead generation and email marketing services (the “Service”).

This Privacy Policy explains how we collect, use, process, and protect your personal data when you use our Service, in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.

Data Controller: FinaLeads Inc.
Contact: support@finaleads.com
Address: 30 N Gould St Ste R, Sheridan, 82801, USA
EU Representative: [To be appointed when required]

2. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: To provide our services as outlined in our Terms of Service
• Legitimate Interests: To improve our services, prevent fraud, and conduct marketing activities
• Consent: For marketing communications and cookies (where required)
• Legal Obligations: To comply with applicable laws and regulations

3. Personal Data We Collect

3.1 Account Information

• Identity Data: Name, email address, company name, job title
• Contact Data: Phone number, billing address
• Technical Data: IP address, browser type, device information
• Usage Data: Pages visited, features used, time spent on platform

3.2 Payment Information

• Financial Data: Payment method details (processed securely by Stripe Inc.)
• Billing Data: Invoice history, subscription details

3.3 Marketing Data

• Communication Preferences: Newsletter subscriptions, marketing consent
• Interaction Data: Email opens, clicks, engagement metrics

3.4 Automatically Collected Data

• Log Data: Access logs, error reports, performance metrics
• Analytics Data: Google Analytics information (anonymized where possible)
• Cookie Data: As detailed in our Cookie Policy below

4. How We Use Your Personal Data

4.1 Service Provision

• Create and manage your account
• Process payments and billing
• Provide customer support
• Deliver core platform features (lead generation, email marketing, data extraction)

4.2 Service Improvement

• Analyze usage patterns to enhance functionality
• Develop new features and tools
• Conduct performance optimization
• Ensure platform security and stability

4.3 Marketing and Communication

• Send service updates and important notifications
• Deliver marketing content (with your consent)
• Provide onboarding assistance
• Share product announcements and feature updates

4.4 Legal and Security

• Prevent fraud and unauthorized access
• Comply with legal obligations
• Protect our rights and those of our users
• Conduct audits and investigations when necessary

5. Data Sharing and Recipients

5.1 Service Providers

We share data with trusted third-party providers who assist in delivering our services:

Payment Processing:

• Stripe Inc. (Payment processing, fraud prevention)

Cloud Infrastructure:

• OVH SAS (Data hosting – France)
• Cloudflare Inc. (CDN and security)
• Amazon Web Services (Backup storage)

Analytics and Marketing:

• Google LLC (Analytics, Ads)
• Facebook/Meta (Marketing)
• Calendly LLC (Scheduling)

Communication:

• Crisp IM SARL (Customer support)
• Slack Technologies (Internal communication)

5.2 Legal Requirements

We may disclose personal data when required by law, court order, or to protect our legal rights.

5.3 Business Transfers

In case of merger, acquisition, or sale, personal data may be transferred to the new entity with appropriate safeguards.

6. International Data Transfers

Your data may be processed in countries outside the European Economic Area (EEA), including the United States. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy Decisions where available
• Certification schemes and codes of conduct
• Additional safeguards as required by GDPR Article 46

7. Data Retention

7.1 Account Data

• Active accounts: Data retained while account is active
• Deleted accounts: All personal data deleted within 30 days of account deletion
• Backup data: Automatically purged after 1 year

7.2 Legal Retention

Some data may be retained longer for:

• Legal compliance (up to 7 years for financial records)
• Dispute resolution
• Fraud prevention
• Legitimate business interests

7.3 Marketing Data

• Consented communications: Until consent is withdrawn
• Unsubscribed contacts: Maintained in suppression list to honor opt-out

8. Your Rights Under GDPR

8.1 Right of Access

Request confirmation of data processing and obtain a copy of your personal data.

8.2 Right to Rectification

Correct inaccurate or incomplete personal data.

8.3 Right to Erasure (“Right to be Forgotten”)

Request deletion of personal data when no longer necessary or consent is withdrawn.

8.4 Right to Restrict Processing

Limit how we process your data in certain circumstances.

8.5 Right to Data Portability

Receive your data in a structured, machine-readable format.

8.6 Right to Object

Object to processing based on legitimate interests or for marketing purposes.

8.7 Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that significantly affects you.

8.8 How to Exercise Your Rights

• Online: Access most rights through your account dashboard
• Email: Contact support@finaleads.com
• Response time: We will respond within 30 days
• Verification: We may need to verify your identity

9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use

Essential Cookies:

• Authentication and security
• Session management
• Load balancing

Analytics Cookies:

• Google Analytics (anonymized)
• Usage statistics
• Performance monitoring

Marketing Cookies:

• Advertising effectiveness
• Remarketing (with consent)
• Social media integration

9.2 Cookie Management

You can control cookies through:

• Browser settings: Block or delete cookies
• Opt-out tools: Google Analytics opt-out
• Consent management: Update preferences anytime

Note: Disabling essential cookies may affect service functionality.

10. Data Security

10.1 Technical Safeguards

• Encryption: AES encryption for data at rest and in transit
• Access controls: Role-based access and multi-factor authentication
• Network security: Firewalls, intrusion detection, DDoS protection
• Regular updates: Security patches and vulnerability assessments

10.2 Organizational Measures

• Staff training: Regular privacy and security education
• Access limitation: Need-to-know basis for personal data access
• Incident response: Procedures for data breach notification
• Vendor management: Due diligence on third-party processors

10.3 Data Centers

• Location: HIPAA-compliant facilities in the US and France
• Physical security: 24/7 monitoring and access controls
• Compliance: SOC 2, ISO 27001 certified facilities

11. Children’s Privacy

Our Service is designed for business use and not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data promptly.

12. Data Protection Officer

While not required to appoint a DPO, we have designated a privacy team to handle data protection matters:

Privacy Contact: privacy@finaleads.com

13. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, particularly in your country of residence, workplace, or where an alleged infringement occurred.

EU Data Protection Authorities: https://edpb.europa.eu/about-edpb/board/members_en

14. Changes to This Policy

We may update this Privacy Policy to reflect:

• Changes in our services
• Legal or regulatory updates
• Best practice improvements

Notification method:

• Email notification for material changes
• Website notice for minor updates
• 30-day notice period for significant changes

15. Contact Information

For privacy-related inquiries:

• Email: admin@finaleads.com
• Subject line: “Privacy Policy Inquiry”
• Response time: Within 72 hours

For general support:

• Email: support@finaleads.com
• Live chat: Available through your account dashboard

Postal address: FinaLeads Inc.
30 N Gould St Ste R
Sheridan, WY 82801
United States

Language Note: This Privacy Policy is originally written in English. In case of conflicts between translations, the English version shall prevail.

Governing Law: This Privacy Policy is governed by applicable data protection laws, including GDPR for EU residents.