Privacy Policy
Last updated: May 2025LeadBabu ("we", "our", "us", or "the Platform") operates as a business-to-business software platform serving performance marketing agencies. This Privacy Policy describes how we collect, process, store, and protect data in connection with use of our website and services at leadbabu.com.
This policy covers three categories of persons: agency users and their authorized team members, end clients whose data is managed through the Platform by an agency, and visitors to our website. By using LeadBabu, you confirm that you have read and agreed to this policy.
1. Scope and Roles
LeadBabu operates in two distinct capacities depending on the type of data involved:
- Data Controller: For data collected directly from agency users during account registration, access requests, and platform use (names, emails, business details), LeadBabu is the data controller.
- Data Processor: For lead data, campaign data, ad spend data, and client data that agencies input or import into the Platform on behalf of their end clients, LeadBabu acts solely as a data processor. The agency is the data controller for that data and is solely responsible for ensuring it has a lawful basis to process it and has obtained all necessary consents from its end clients.
2. Data We Collect
From Agency Users Directly:
- Name, work email, phone number, and job title
- Agency name, website URL, and business information
- Details about client volume and ad spend scale provided during onboarding
- Messages submitted through access request forms or support inquiries
Data Processed on Behalf of Agencies:
- Lead records including names, contact details, submission timestamps, and source attribution
- Ad spend figures and campaign performance metrics imported from connected advertising platforms
- Client names and identifiers assigned by the agency within the Platform
- Any custom fields or notes entered by agency team members
Technical Data Collected Automatically:
- IP address, browser type, device type, and operating system
- Pages visited, session duration, and referring URLs
- Log data for security monitoring and error diagnosis
3. How We Use Data
- To review, process, and respond to early access applications
- To deliver, maintain, and improve Platform features and infrastructure
- To provide customer support and onboarding assistance
- To send service-related communications (not marketing unless explicitly opted in)
- To detect, investigate, and prevent fraud, abuse, or unauthorized access
- To comply with applicable legal obligations
We do not use your data or your clients' data for advertising, behavioral profiling, AI model training, benchmarking, or any purpose beyond delivering the Platform to you.
4. Strict Confidentiality of Agency and Client Financial Data
LeadBabu is used by agencies that manage advertising budgets on behalf of clients. We understand that commercial arrangements between an agency and its clients, including pricing structures, margins, markups, and cost allocations, are highly sensitive and confidential.
LeadBabu does not access, inspect, analyze, export, or disclose any financial data that reflects the difference between what an agency charges its clients and what it pays for ad spend or services. Any budget figures, cost data, or billing-related information entered into the Platform is treated as strictly confidential agency business information. LeadBabu employees and authorized contractors are expressly prohibited from accessing, sharing, or using this data for any purpose other than operating and maintaining the technical infrastructure of the Platform.
LeadBabu does not produce reports, benchmarks, or aggregated datasets that could identify or expose individual agency pricing arrangements to any third party, including other agencies, advertisers, or media vendors.
5. Data Sharing and Disclosure
We do not sell, rent, or trade personal data or client data. We share data only as follows:
- Infrastructure providers: Cloud hosting, database, and security vendors who process data under binding data processing agreements that prohibit independent use of your data.
- Authorized integrations: When an agency connects a third-party platform (Google Ads, Meta Ads, a CRM, etc.), data is exchanged only to the extent required to operate that integration. The agency controls which integrations are active and may revoke any connection at any time.
- Legal obligations: We may disclose data where required by applicable law, a valid court order, or a lawful government request. We will notify you prior to disclosure where legally permitted to do so.
- Business succession: In the event of a merger, acquisition, or asset sale, user and client data may transfer to a successor entity under the same or stronger confidentiality protections. Affected users will be notified in advance.
6. Data Retention
Account data is retained for the duration of the account relationship and for up to 90 days after closure unless a longer period is required by law. Lead and campaign data processed on behalf of an agency is retained only as long as necessary to provide the service or as instructed by the agency. You may request full data deletion at any time by contacting privacy@leadbabu.com.
7. Security
We maintain technical and organizational security measures appropriate to the sensitivity of the data we process, including TLS encryption for all data in transit, encryption at rest for stored data, role-based access controls, audit logging of data access events, and regular vulnerability assessments. Internal access to customer data is strictly limited on a need-to-know basis and governed by confidentiality agreements.
In the event of a confirmed data breach that poses a material risk to users, we will notify affected parties within 72 hours of becoming aware of the incident.
8. Cookies and Tracking
We use essential session cookies to operate the Platform and analytics cookies to understand aggregate usage patterns. We do not use advertising cookies or cross-site tracking pixels. You can disable non-essential cookies through your browser settings. Disabling session cookies will prevent Platform login.
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right to access: obtain a copy of the data we hold about you
- Right to rectification: request correction of inaccurate data
- Right to erasure: request deletion of your personal data
- Right to restriction: limit how we process your data in certain circumstances
- Right to portability: receive your data in a structured, machine-readable format
- Right to object: object to certain types of processing including direct communications
- Right to complain: lodge a complaint with your local data protection authority
Submit requests to privacy@leadbabu.com. We will respond within 30 days. For requests relating to end client data that an agency controls, we will refer the request to the relevant agency as the data controller.
10. Children
LeadBabu is a professional B2B service. We do not knowingly collect data from anyone under 18. If we become aware of such data, we will delete it immediately.
11. Changes to This Policy
We may update this policy to reflect changes in our practices or applicable law. We will give active users at least 14 days notice by email before material changes take effect. Continued use after the effective date constitutes acceptance.
Contact
For privacy questions, data requests, or confidentiality concerns:
LeadBabu Privacy
Email: privacy@leadbabu.com
General: hello@leadbabu.com