Privacy notice

Operator and contact

LeadBroom is operated by WANGQITAO, an independent developer based in China.

Business contact address: No. 78 Sanjiang Road, Yuecheng District, Shaoxing, Zhejiang, China.

LeadBroom Support: support@leadbroom.com

Support is provided in English, primarily through support requests in the application. If you cannot sign in, use the public contact form; email is an independent fallback. We aim to respond within two business days, Monday–Friday, excluding public holidays in China. Support is not available 24/7.

This is a first-response target, not a promise to resolve every issue within two business days or a service-credit SLA. Support is handled personally by the operator.

Information and purposes

We use account emails and authentication records to provide sign-in and account security. Workspace records include organization and member details, customer contact information supplied by users, leads, activities, follow-up tasks and quotes. We use them to provide the workspace, enforce access permissions and respond to support requests. Necessary service, delivery and security logs help diagnose failures and prevent misuse. Support submissions include contact information, a category, subject and plain-text messages; IP-derived fingerprints and request limits help prevent abuse. Public submissions are not automatically linked to an account with the same email address. Please do not upload identity documents, full payment-card details or unrelated sensitive information to the workspace or support email.

Cleaning businesses decide which customer information to put into their workspace and must have an appropriate basis to use it. We use that information for operating and supporting LeadBroom, not to run marketing campaigns to your leads. LeadBroom does not sell workspace customer lists or use them for targeted advertising.

Providers and international processing

The operator is based in China and may access necessary account, workspace and support information from China to operate and support the service. The production Supabase project is in us-east-1 and stores support requests, messages, access records and a delivery queue. Cloudflare provides distributed website delivery, Turnstile abuse prevention and Email Routing to the operator’s private management mailbox, provided by Tencent QQ Mail; replies by email reach the operator and are not automatically synchronized into tickets. Resend delivers authentication and support transaction emails; the current sending region is us-east-1. Feishu receives limited support alerts (environment, request reference, category, time and a protected operations-page link), not message bodies, customer email addresses or verification codes. Zoho is not used for this support channel. Paddle handles software checkout and billing. Provider processing and support access can occur in more than one country. Serving US customers does not mean all data is processed only in the United States.

Paddle processes checkout and billing under its own terms and privacy notice. LeadBroom will use relevant customer, transaction, subscription, invoice and adjustment identifiers and status to reconcile billing and determine workspace access. Payment-card details are provided to the payment provider rather than entered into the LeadBroom workspace.

Retention

We keep workspace records while they are needed to provide the workspace and manage the customer relationship. Canceling renewal does not automatically delete the workspace or constitute a deletion request. Following a verified Owner deletion or closure request, we aim to remove or de-identify the requested business records from active systems within 30 calendar days, subject to applicable rights and narrowly documented exceptions. We review retained data and exceptions at least every 90 days; records are not retained forever by default.

We may retain the minimum transaction references, accounting or dispute facts, and security or request-audit records needed for a specific unresolved issue or applicable obligation. Each exception has a documented purpose, limited access and a review date. No universal statutory retention period is claimed. Unnecessary personal information is removed or de-identified when the documented purpose ends; a payment dispute does not justify retaining unrelated lead records.

We aim to delete or de-identify routine support correspondence within 12 months after a case closes, unless a documented legal, billing or security reason requires a narrower exception. This is an operator-managed review process, not automatic deletion. Provider-controlled delivery and security logs may have different retention periods.

Deletion and access requests

The workspace Owner can request deletion through an in-app support request, the public contact form, or support@leadbroom.com. We verify Owner authority through the account and workspace records, clarify the requested scope, offer an opportunity to export, and review other members, unresolved financial matters and any necessary record-retention exceptions. Export is an option, not a condition for exercising applicable rights. We aim to complete a verified, sufficiently specified request within 30 calendar days; if more information or an exception is needed, we explain the reason and next expected step. Applicable statutory deadlines and rights take precedence and are not automatically paused by this process. Account deletion, workspace deletion and cancellation of renewal are separate actions. A person's lawful request about their own information is assessed even if they are not the workspace Owner.

Backups and recovery limits

The operator keeps encrypted database exports on an operator-controlled device in China, with access limited to the operator. The retention window is seven daily copies and four weekly copies (up to 28 days). Storage objects and platform configuration require separate recovery checks. This is an operator recovery process, not a guaranteed backup or self-service restore service. Point-in-time recovery is not enabled. Provider-internal residual retention remains unverified. Before a restored copy is used, deletion records are applied and billing is reconciled read-only; old charging requests are never replayed.

Browser storage and safeguards

The application uses browser storage for sessions and preferences; demo data stays in the browser. Workspace permissions depend on membership and role. Operator access is limited to what is needed for operation, support or a documented request. Contact support about access, correction or deletion concerns. We verify the requester and applicable scope before disclosing or changing records.