Privacy Policy

We collect account information such as email address, authentication identifiers, and purchase-related data needed to run DNLeads.

We also collect product usage information such as search inputs, billing events, API key activity, and operational logs needed for support, security, and service improvement.

When you use Campaigns, we store the contacts you import, campaign drafts, delivery and verification results, and conversations needed to send messages and handle replies. Email connections use SMTP/IMAP or, when available to your account, Google OAuth and the Gmail API.

Included Free-tool allowances are counted using a hashed account identifier. Device, browser, and network signals may still be used for platform security.

Information is used to provide the search workspace, enforce billing and usage limits, secure the API, respond to support requests, and improve platform reliability.

We may use operational analytics and billing events to detect abuse, investigate failures, and understand platform load.

DNLeads uses infrastructure and third-party providers such as Clerk for authentication, Paddle for billing operations, and hosting, database, and Redis services to operate the platform.

These providers only receive the information needed for their operational role.

Optional email verification sends only the selected email addresses to a contracted verification service. Campaign messages and inbox synchronization use your connected email provider. AI Spin Text sends the text fragment you select to a contracted AI service to generate alternatives; avoid including confidential information in that selection. Contact Support for current processor information and data-processing requests.

DNLeads does not store full card data locally. Payment handling is performed through Paddle.

Billing-related records may include transaction identifiers, checkout identifiers, plan information, payment events, and related customer email details needed to provision access and support billing questions.

DNLeads API keys are shown once when created and are stored hashed on the server. Connected email account passwords and platform provider credentials are encrypted because the service needs to use them to connect.

We maintain usage logs and security controls to protect the platform and investigate suspicious activity.

We do not sell personal information. We only share information when required to operate the service, comply with legal obligations, enforce platform rules, or respond to abuse and security issues.

Searches, their inputs, results, and downloads are retained for 4 calendar months from search creation across all tools and plans. At expiry, searches and their data are automatically and permanently deleted from the account and operating service, including local application copies. Searches disappear from history and the API and cannot be browsed, downloaded, or recovered through the account. Separate external disaster-recovery backups may exist; expired records are excluded from any restoration to the service.

Reusable tool input, output, and enrichment data expires after up to 4 calendar months from collection or a fresh update. Reading or reusing data does not renew this period. Files you download to your own devices remain under your control.

We retain account, billing, and operational records for as long as reasonably necessary to operate DNLeads, comply with legal obligations, resolve disputes, and maintain security logs.

Campaign contacts, messages, and verification results are retained to operate your workspace. Campaign deletion is available in the workspace; account data access or deletion requests can be sent to Support. The search retention period above does not automatically delete campaign history. Verification results may be reused for up to 4 calendar months after the check before a new check is needed. A verification result describes the email address, not your account, so a recent result for the same address may be reused across accounts instead of checking the address again. These shared results hold no account information and are deleted 4 calendar months after the check.

Essential cookies and local technologies are used to protect DNLeads, maintain authentication, prevent fraud, and complete checkout and payment confirmation. Services such as Clerk and Paddle may set these technologies when their features are used. They are necessary for the service requested by the user.

Optional analytics cookies are used only after consent to help us understand traffic and product performance through Google Analytics. Optional marketing technologies are also disabled until consent is provided.

Your choice applies across DNLeads, including the blog at dnleads.co/blog, and is retained for up to six months, after which DNLeads may ask again. Provider cookies may have their own retention periods described in the provider's documentation.

You may accept all optional cookies, reject them, or choose analytics and marketing separately. You can reopen Cookie Settings at any time from the footer; withdrawing consent stops future optional storage and removes accessible DNLeads analytics cookies where possible.

You may also contact support to ask questions about your account data or billing-related records. You may stop using the platform and allow purchased access to expire naturally.

We apply reasonable technical and organizational safeguards, including authenticated access checks, API key hashing, rate controls, and billing webhook verification.

No system can promise perfect security, so you should also protect your own credentials and account access.

Connecting Google is optional. Google handles account authorization; DNLeads does not ask for your Google password. We request permission to send messages you compose or schedule and read mailbox messages to find replies, delivery reports, and Sent copies related to your Outreach conversations.

We inspect bounded message headers to match conversations and store the content of matched replies and delivery reports. We do not copy your entire mailbox, download attachments, modify incoming mail, or request permission to delete Gmail messages. Access and refresh tokens are encrypted on our server.

Google mailbox data is used only to provide the connected email features you authorize. We do not sell it, use it for advertising or credit decisions, or use it to train general-purpose AI models. Gmail messages are not automatically sent to our AI text service. Other users cannot read your conversations, and administrator conversation inspection excludes other accounts' Google email content.

DNLeads complies with the Google API Services User Data Policy, including its Limited Use requirements. Data transfers are limited to operating your authorized features, security, and legal requirements under that policy.

Disconnect Google from Email accounts to remove saved authorization tokens and stop future Gmail access. You can also revoke access in your Google Account. Disconnecting does not delete campaign history; delete campaigns in the workspace or contact support@dnleads.co to request deletion of account and stored Gmail conversation data. Necessary billing, security, and suppression records may be retained as described in this policy.

For privacy questions, contact support@dnleads.co.