CraftLeads

Privacy Policy

Last updated: February 8, 2026

1. Introduction

Mostly Harmless Code SA ("we", "us", "our"), a company registered in Switzerland, operates CraftLeads ("the Service"). This Privacy Policy explains how we collect, use, and protect your personal data when you use our Service. We are committed to protecting your privacy in accordance with the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).

2. Data We Collect

Account Information

When you create an account, we collect your name, email address, and profile information provided through Google OAuth or email sign-in via our authentication provider (Clerk).

Prospecting Data

The Service collects and processes publicly available business data, including company names, addresses, phone numbers, websites, and publicly listed contact email addresses. This data is gathered from public sources such as Google Maps and company websites.

Usage Data

We collect usage analytics including pages visited, features used, campaign activity, and interaction patterns to improve the Service.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card details. We receive and store transaction identifiers and subscription status from Stripe.

3. How We Use Your Data

  • To provide and operate the Service, including AI-powered prospecting and email generation.
  • To process your payments and manage your subscription.
  • To send transactional emails related to your account and campaigns.
  • To improve the Service based on usage patterns and feedback.
  • To comply with legal obligations.

4. Third-Party Services

We use the following third-party services to operate CraftLeads:

  • Clerk — Authentication and user management.
  • Stripe — Payment processing and subscription management.
  • OpenAI — AI processing for prospect qualification and email generation. Business data from your campaigns may be sent to OpenAI for processing.
  • Google Maps API — Company discovery and location data.
  • Apify — Web scraping for company enrichment data from publicly available websites.
  • PostHog — Product analytics and usage tracking.

Each third-party service has its own privacy policy governing their use of data. We encourage you to review their respective policies.

5. Cookies

We use the following cookies:

  • Session cookies (Clerk) — Required for authentication. These are essential for the Service to function.
  • Analytics cookies (PostHog) — Used to understand how users interact with the Service. These help us improve the product.

6. Data Retention

We retain your account data for as long as your account is active. Campaign data (companies, contacts, generated emails) is retained for the duration of your subscription. When you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

7. Your Rights

Under the FADP and GDPR, you have the right to:

  • Access — Request a copy of the personal data we hold about you.
  • Rectification — Request correction of inaccurate personal data.
  • Deletion — Request deletion of your personal data.
  • Export — Request your data in a portable, machine-readable format.
  • Objection — Object to the processing of your personal data.

To exercise any of these rights, contact us at support@craftleads.ai. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encrypted connections (TLS), secure authentication, and access controls.

9. International Data Transfers

As a Swiss company, your data may be processed in Switzerland and other countries where our third-party service providers operate (including the United States). We ensure that any international transfers comply with applicable data protection laws through appropriate safeguards.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

For any questions about this Privacy Policy or our data practices, please contact us at support@craftleads.ai.