Privacy Policy

Smart Lead Lab ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered sales automation platform.

Customers remain responsible for determining whether the Service is appropriate for their industry and jurisdiction. Regulated or high-impact uses may require additional agreements, controls, or approval before onboarding.

When a customer enables calling, SMS, or AI receptionist features, we process communication data to place or receive communications, generate responses, route calls, schedule appointments, maintain security, and troubleshoot service failures.

To provide AI, voice, communications, calendar, payment, hosting, storage, and security features, we may send the information needed for the requested feature to our service providers. Depending on what you enable, this can include business profiles, product and service details, website or image scan inputs, prompts, content inputs and outputs, lead and contact information, call or message metadata, recordings and transcripts, appointment details, and technical diagnostics.

Providers may include AI, telephony, voice, payment, cloud, and monitoring providers identified in this policy, and may process data in the United States or other locations where they operate. Their processing is also subject to their own terms and privacy practices. We use these providers to operate, secure, troubleshoot, and improve the Service; we do not sell personal information for the purpose of permitting another company to market directly to you.

You must have a lawful basis to provide information to the Service and to request communications, recording, transcription, or AI processing. In particular, obtain any required notice and consent from callers, recipients, employees, and other individuals before submitting their data or contacting them. Our Terms of Service explain the limits of AI outputs and third-party service availability.

Connecting Google Calendar is optional and separate from signing in. Connections request https://www.googleapis.com/auth/calendar.events.owned, which permits access to events on calendars you own. Smart Lead Lab uses your primary Google calendar to display existing events, calculate availability, and create, update, or delete appointments through the calendar and scheduling features you enable, including receptionist booking. Synchronization can copy existing Smart Lead Lab appointments to Google and import existing Google events into Smart Lead Lab. Data includes event identifiers, titles, descriptions, start and end times, attendees, locations, conferencing details, and OAuth access and refresh tokens. We do not request calendar-list, calendar-settings, or sharing-permission access. Connections that were authorized with an earlier permission must reconnect before Calendar features can be used. Google sign-in is a separate feature that uses basic account identity information.

We use this data to provide the calendar and scheduling features you authorize and to secure the connection. Connection credentials and synchronized event records are stored in our access-controlled application infrastructure, including Google Cloud/Firebase. Service providers may process the information needed to host and deliver these features; when you enable AI-assisted scheduling, relevant scheduling information may also be processed by our AI and voice providers to carry out that feature. We do not sell Google user data, use it for advertising or credit decisions, or use it to train generalized AI or machine-learning models. Human access is limited to your affirmative permission for specific data, necessary security investigation, legal requirements, or aggregated internal operations permitted by Google's Limited Use requirements. We do not expose your non-public calendar content to other users without your permission.

Use Disconnect Google Calendar on the Calendar page to remove our stored connection credentials and imported Google event cache. Requests already in progress may finish. Appointments originally created in Smart Lead Lab and events already written to Google remain. Disconnecting in Smart Lead Lab does not remove the permission shown in your Google Account; you can also revoke that permission at Google Account connections. We retain synchronized records while needed for the connected feature and app-created appointment records until deleted or no longer needed. To request deletion of retained calendar data, email customer.service@smartleadlab.com. Limited legal/security records and backup copies may remain until their applicable retention or backup cycle ends.

We use administrative, technical, and organizational safeguards designed to protect Google user data from unauthorized access, use, loss, alteration, or disclosure. Smart Lead Lab's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. These Google-data restrictions take precedence over any broader data-use language elsewhere in this policy.

Stripe processes subscription payments and provides us with billing status, invoice, payment method, and subscription-period information needed to administer your account. We do not store complete card numbers.

• • Monthly subscription charges are non-refundable once the billing period begins, and no prorated refund or credit is provided for a partial month, except where required by law or expressly stated otherwise.
• • If you cancel, the cancellation takes effect at the end of the current paid billing period. You may continue using subscribed services and remaining plan credits until that date, subject to applicable limits.
• • The subscription will not renew, you will not be charged for the next billing period, and subscription access ends when the current paid period expires.

We use technical and organizational safeguards designed to protect personal data, including transport security, provider-managed infrastructure controls, authenticated access, redacted operational monitoring, and periodic dependency and access-rule review. No internet service can guarantee absolute security.