LeadVixo Privacy Policy

This Privacy Policy (the "Policy") is an integral part of the LeadVixo Terms of Use (the "Terms"). All terms used herein carry the same meanings as in the Terms unless otherwise stated. We are committed to protecting your privacy and will only use your personal data to provide our services, as described in this Policy. This Policy explains: what data we collect and from which sources; on what legal basis we process it; how we use it; with whom we share it; how long we retain it; your rights as a data subject; and how we keep your data secure. We also use cookies — please refer to our Cookies Policy for details on our cookie practices. For any questions regarding this Policy, please contact us at support@leadvixo.com.

1. CHANGES AND UPDATES TO THIS POLICY

We may revise this Policy from time to time to reflect changes in law, technology, or our business practices. We encourage you to review this page periodically. Any material changes will be notified by posting the updated Policy at https://leadvixo.com/privacy-policy and, where appropriate, by email. Your continued use of the Website or Platform following any update constitutes your acceptance of the revised Policy.

2. DATA CONTROLLER, DATA PROCESSORS, AND THIRD-PARTY DISCLOSURES

2.1 Roles. LeadVixo acts as:

• Data Controller in respect of Client Data (as defined in section 4) — LeadVixo determines the purposes and means of processing this data.
• Data Processor in respect of Business Data and Shared Data — LeadVixo processes this data on behalf of its Clients, who act as Controllers. All such processing is governed by the LeadVixo Data Processing Agreement. If you submit a request relating to Business or Shared Data, LeadVixo will promptly redirect it to the relevant Client.

2.2 Third-Party Service Providers. To operate, improve, and support our services, we may share your data with trusted third-party providers, including:

• Cloud storage and hosting providers
• Data analytics and measurement partners
• Marketing and advertising platforms
• Payment processing providers
• Customer communication and support tools

These providers act as data processors on our behalf and are contractually bound to process data only as instructed by us and in compliance with applicable law. 2.3 Sharing with Clients. LeadVixo shares Business and Shared Data with its Clients for the purpose of providing our Services — specifically, to give Clients access to accurate and up-to-date B2B contact information. 2.4 Sharing with Affiliates. We may share data with our current and future parent companies, subsidiaries, and affiliated entities under common ownership, who may act on our behalf for any of the purposes described in this Policy. 2.5 Legal and Regulatory Disclosures. We may disclose data as necessary to: enforce the Terms; protect the rights, privacy, safety, or property of LeadVixo, our Clients, or others; respond to lawful requests from courts, law enforcement, regulatory authorities, or other public bodies; or as otherwise required by applicable law. 2.6 International Transfers. Our servers are based in the United States. If you are located in the European Economic Area (EEA) or another jurisdiction with data transfer restrictions, your data may be transferred to and processed in countries that may not provide the same level of data protection as your home country. Where we transfer personal data originating from the EEA to third countries without an adequate level of protection, we do so under Standard Contractual Clauses approved by the European Commission, or another lawful transfer mechanism.

3. CHILDREN'S PRIVACY

Our Website and Platform are not directed at children. You must be at least 18 years of age (or the age of legal majority in your jurisdiction) to use our services. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete it as soon as possible. If you believe we may hold personal data of a child, please contact us at support@leadvixo.com.

4. DATA WE COLLECT AND OUR DATA SOURCES

We collect and process the following categories of personal data: 4.1 Business Data. LeadVixo collects and maintains business contact information about professionals and companies ("Business Data"), including: name; business email address; business phone number; website and social media URLs (including LinkedIn); job title, seniority, and role; company name and location; and other publicly available professional information. Business Data is sourced from:

• LeadVixo's proprietary web-scanning technology, which collects publicly available information;
• Trusted data partners and third-party providers;
• Market research surveys and phone interviews conducted by our in-house research team.

4.2 Shared Data. Clients may contribute business contact information about themselves, their colleagues, or their prospects when using the Platform ("Shared Data"). Shared Data may include: name; business email and phone number; website and social media URLs; job title, seniority, and role; company name and location; and any other data the Client voluntarily provides. We may also collect Shared Data when you: submit information through the Platform; use the Services; provide details about your prospects; or refer others to LeadVixo. 4.3 Client Account and Usage Data. When you use our Website and Platform, we collect:

• Account data: full name; company name and job title; account photo; billing name and address; email address; LinkedIn ID; phone number; and any other information you provide.
• Usage data: session duration and history; interaction data; feature usage statistics; survey responses; support communications (including language of requests); and any messages you send us.
• Technical and device data (collected automatically): how you found us; IP address; language settings; time zone; device type, model, and settings; operating system; internet service provider; mobile carrier; hardware ID; country, region, and city.
• Third-party analytics data: session counts and durations; device operating systems and models; geographic data; first launch dates; page visit frequency.

4.4 Data Quality and Opt-Out Management. LeadVixo processes only business-related contact information. Personal email addresses (e.g. Gmail, Yahoo) are excluded from our Business and Shared Data. We maintain an opt-out list of individuals and companies who have requested removal or to whom we were unable to deliver a processing notice. Public servants and public figures are also excluded from our Business and Shared Data as a safeguard.

5. PURPOSES AND LEGAL BASES FOR DATA PROCESSING

5.1 Business and Shared Data. We process Business and Shared Data for the following purposes:

• To build and maintain our B2B sales intelligence database and enable Clients to generate, manage, and contact leads;
• To enable Clients to serve relevant display advertising on social and other platforms;
• To allow Clients to enrich and update their CRM records with current business contact data;
• To run our own marketing campaigns and promote our services.

The legal basis for processing Business and Shared Data is legitimate interests — both LeadVixo's and its Clients' legitimate interest in making business contact information available for B2B commercial purposes. This data has a limited impact on individuals' private lives and is widely disclosed in professional contexts. LeadVixo has implemented appropriate safeguards, including processing notices, opt-out mechanisms, and data minimisation practices. 5.2 Client Data. We process Client Data for the following purposes:

• To make the Website and Platform available and provide relevant services;
• To communicate with you about your account, service updates, and products;
• To notify you of important changes to the Website or Platform;
• To analyse usage, support regional users, and develop and optimise our services;
• To keep the Website and Platform secure, enforce our Terms, and prevent fraud;
• To conduct market research and generate statistical insights;
• To comply with our legal obligations.

The legal bases for processing Client Data are:

• Performance of a contract: to provide the Platform, technical support, and service communications;
• Legitimate interests: to send marketing communications (subject to your right to opt out); to analyse and improve our services; to maintain security and prevent fraud;
• Legal obligation: where required by applicable law.

Where data is collected for marketing purposes, we will request your separate consent. You may withdraw that consent at any time, free of charge, by clicking "Unsubscribe" in any marketing email or by contacting us at support@leadvixo.com.

6. DATA RETENTION AND LOCATION OF PROCESSING

6.1 Retention Periods. We retain personal data for as long as necessary to fulfil the purposes for which it was collected, taking into account the nature, sensitivity, and volume of the data. Specifically, we retain data:

• For as long as we have an ongoing relationship with you and as needed to provide the Services;
• As required to comply with our legal obligations;
• As necessary to resolve disputes or protect ourselves in connection with potential legal claims;
• As necessary to enforce our agreements.

When data is no longer required, we will securely delete it or, where deletion is not immediately possible, put in place measures to prevent further use. 6.2 Data Erasure Requests. You may request the erasure of your data or restrict its processing at any time by contacting us. Please note that exercising this right may result in the loss of access to the Website and Platform. 6.3 Location. Our servers are based in the United States. Your data will generally be processed and stored there. Where you are located in the EEA or another jurisdiction with data transfer restrictions, please refer to section 2.6 for details on the transfer safeguards we apply.

7. YOUR DATA SUBJECT RIGHTS

As a data subject, you have the following rights under applicable data protection law. To exercise any of these rights, please contact us at support@leadvixo.com. We will respond within one month of receipt. Where requests are complex or numerous, we may extend this period by a further two months and will inform you of any extension within the first month.

• Right of access: You may request confirmation of whether we process your personal data and, if so, obtain a copy of that data along with details of the processing (purposes, categories, recipients, retention period).
• Right to rectification: You may request the correction of inaccurate personal data or the completion of incomplete data we hold about you.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where there is no lawful basis for its continued processing.
• Right to restrict processing: You may request that we limit our processing of your data — for example, while you contest its accuracy, or where you require the data to be retained for legal claims despite no longer needing it processed.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible.
• Right to object: You may object at any time to processing of your personal data based on legitimate interests, including profiling and direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with your local data protection supervisory authority at any time.

For opt-out requests, please visit our Opt-Out page or email us at support@leadvixo.com.

8. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful access, accidental loss, destruction, or damage. These measures include access controls, encryption, data processing agreements with all contractors who may access personal data, and regular security assessments. For further detail on our security practices, please refer to our Data Processing Agreement. While we take data security seriously, no system is completely immune from risk. We encourage you to maintain the security of your account credentials and notify us immediately at support@leadvixo.com if you suspect any unauthorised access.

9. NOTICE TO CALIFORNIA RESIDENTS

This section applies solely to California residents and provides additional disclosures under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"). 9.1 No Sale of Personal Information. LeadVixo does not sell your personal data for monetary consideration. We do not sell, rent, release, disclose, disseminate, transfer, or otherwise communicate your personal data to third parties in exchange for money or other valuable consideration. 9.2 Your CCPA Rights. California residents may, up to twice per 12-month period, request the following information about data collected in the past 12 months:

• The categories and specific pieces of data collected about you;
• The categories of sources from which it was collected;
• The business or commercial purpose for collection;
• The categories of third parties with whom we shared the data;
• Whether any data was sold or disclosed for a business purpose, and to whom.

You also have the right to request deletion of your personal data and the right not to receive discriminatory treatment for exercising your rights. 9.3 Opt-Out. To opt out of the sale or sharing of your personal information (to the extent applicable), please visit our Do Not Sell My Personal Information page. 9.4 Submitting Requests. To submit an access or deletion request, contact us at support@leadvixo.com. We may take reasonable steps to verify your identity before responding. A reasonable fee may apply where permitted by law. 9.5 Shine the Light. Under California Civil Code § 1798.83, California residents may also request information about personal data shared with third parties for their direct marketing purposes. Contact us at support@leadvixo.com to make such a request.

10. NOTICE TO NEVADA RESIDENTS

Under Nevada Revised Statutes Chapter 603A, certain Nevada residents may opt out of the sale of "personally identifiable information" for monetary consideration. If you are a Nevada resident and wish to submit an opt-out request, please visit our opt-out page or contact us at support@leadvixo.com. We may take reasonable steps to verify your identity and the authenticity of your request.

11. NOTICE TO UK RESIDENTS

If you are located in the United Kingdom, your personal data is processed in accordance with the UK GDPR and the Data Protection Act 2018. You may contact our UK Data Protection representative at any time with questions about how we process your data or to submit a complaint, by emailing support@leadvixo.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

12. NOTICE TO EEA RESIDENTS

If you are located in the European Economic Area, you have the rights described in section 7 in accordance with the GDPR (Articles 12–23), including the right to be forgotten. LeadVixo provides processing notices to all EEA data subjects as required under GDPR Articles 13 and 14. For opt-out requests, please visit our opt-out page.

13. GOOGLE API COMPLIANCE

LeadVixo's use of Google APIs is limited to the following purposes:

• Authenticating users via Google Auth;
• Sending scheduled emails on behalf of users;
• Collecting aggregate performance statistics on email campaigns (e.g. number of sends, replies).

We do not store or transfer to third parties any data accessed through Google APIs. No personal data accessed via Google APIs is retained on our systems beyond what is strictly necessary to perform these functions. LeadVixo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

14. CONTACT US

If you have any questions about this Policy or about your personal data, please contact us:

• General enquiries: support@leadvixo.com
• Data Protection Officer: dpo@leadvixo.com

We aim to respond to all enquiries within 5 business days.