Privacy Policy

AI Lead Gen ("we", "us", "the platform") is a marketing automation service that helps businesses optimize campaigns, manage leads, and send email/SMS communications using AI. This policy explains what data we collect, why, and how we protect it — including data accessed through connected stores such as Shopify.

Account information: name, email address, and password (managed securely by our authentication provider, Supabase Auth). We never store raw passwords ourselves.

Campaign content: the marketing copy, subject lines, and images you create or generate on the platform.

Contact/lead data: names, email addresses, phone numbers, and company names that you upload manually, via CSV, or import from a connected store, so you can send campaigns to them.

Connected-store data (e.g. Shopify): with your explicit authorization, we access store details, products, and — where separately approved — customer and order records, solely to power features like customer import for campaigns.

Usage data: how many AI optimizations you run, campaign performance metrics, and basic log/error data needed to operate the service reliably.

We use collected data to: operate and improve the platform; generate AI-optimized campaign copy and images; deliver your campaigns via email/SMS/WhatsApp; import contacts from stores you connect; provide customer support; and enforce our Terms of Service.

We do not sell your personal data or your customers' data to third parties.

To provide the service, data is processed by trusted infrastructure and communication providers, including:

Supabase (database, authentication, file storage) · Vercel (application hosting) · Groq (AI language model processing of campaign copy) · Brevo, SendGrid, and Twilio (email, SMS, and WhatsApp delivery) · Shopify and Google Ads (only if you choose to connect them).

Each of these providers processes data only as needed to perform their function for us and is bound by their own privacy and security commitments.

We retain your account and campaign data for as long as your account is active. If you disconnect a store (e.g. Shopify), we stop syncing new data from it. If you uninstall the app from your store, we automatically erase the store's connection data. You may request full deletion of your account and associated data at any time by contacting us.

Where a connected store's customer requests erasure of their personal data through that store, we will delete any matching records we hold within a reasonable time, consistent with applicable law.

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these rights, contact us using the details below.

We use industry-standard measures — encrypted connections (HTTPS/TLS), access-controlled databases with row-level security, and scoped API credentials — to protect your data. No system is 100% secure, and we encourage you to use a strong, unique password.

This service is intended for business use by adults. We do not knowingly collect personal information from children under 16.

We may update this policy as the platform evolves. Material changes will be reflected by updating the "Last updated" date above.

Questions about this policy or your data can be sent to saboorafzal94@gmail.com.