Privacy Policy

This policy explains what personal data YouLeadMe handles, why, and what you can do about it. It covers two different groups of people: our customers, who hold an account with us, and the business contacts our customers reach out to.

1. Who is responsible

YouLeadMe is a product of Asset Organize Winsnes, a company registered in Norway. Asset Organize Winsnes is the data controller for your account and for how the platform operates. When a customer runs a campaign, that customer is the controller for their own outreach and the choice of who to contact; we act as their processor for those sends.

2. If you are a customer

We hold what is needed to run your account:

• Your name, email address and password (stored only as a hash — we cannot read it).
• Your plan, billing period and invoices.
• Your sending settings, email signature and any logo you upload.
• Lists, campaigns and results you create in the product.
• Which page of our website you first arrived on, the site that sent you there, and any campaign tags on the link you followed. This attribution information is recorded when you arrive and is kept with your account if you create one. We use it to understand which pages and marketing sources bring customers to YouLeadMe.

Website visit measurement. We count visits to our public website so we can understand how much traffic YouLeadMe receives and measure the performance of our website and marketing. A visit is counted as one session rather than one page view, so viewing several pages during the same visit does not create several visits. A session ends after 30 minutes of inactivity.

To avoid counting the same visit more than once, we create a short-lived pseudonymous code from the visitor's IP address and browser information using a secret that is replaced every day and deleted after three days. The IP address itself is not stored in our analytics database. The code is not used to identify visitors, cannot be used to follow a visitor from one day to the next, and is not linked to a YouLeadMe account.

We use this visit information for aggregated website traffic measurement, attribution and to understand the performance of our website and marketing. We do not use advertising cookies or third-party analytics trackers, and nothing is stored on your device for this measurement.

We rely on our legitimate interests in understanding use of our public website, measuring the effectiveness of our marketing and improving YouLeadMe. We limit the information collected and use a cookieless, first-party approach designed not to create profiles of website visitors.

We use customer account data to provide the service, bill you, and send service messages such as renewal reminders and security notices. We do not sell it, and we do not use your campaign content to build products for anyone else.

3. If you received an email from a YouLeadMe customer

Your details reached our customer through this platform, so it is fair that you know how.

Where it came from. Business contact details come from three kinds of public source:

• Official national company registers — the Brønnøysund Register Centre in Norway, the CVR in Denmark, the PRH in Finland, INSEE/Sirene in France, and Companies House in the United Kingdom.
• OpenStreetMap, a public community-maintained geographic database, for countries where no open company register is available. This is the source for most countries outside those listed above.
• Publicly available company websites, from which we read published contact details.

We do not buy contact lists, and we do not collect data from private social media profiles.

What is held. Company name, registration number, industry, address, website, a general business email address, and a business phone number. This is information a company publishes so that others can contact it.

Why. The lawful basis is legitimate interest: B2B outreach to a company's published business address, about products relevant to that business. We balance this against your interests, which is why every message identifies the sender, states why you were contacted, and offers a one-click way to stop.

How to stop it. Use the unsubscribe link in any message. It takes effect immediately and applies to every campaign from that sender, not just the one you received. You can also reply and ask — replies automatically stop any remaining follow-ups. Or write to support@youleadme.com and we will remove you and suppress the address so it cannot be re-added.

4. If you connect your mailbox

Customers can let YouLeadMe watch the inbox their campaign replies arrive in, so that follow-ups stop by themselves when somebody answers. If you have turned that on:

• We read incoming messages in order to recognise a reply, ignore automatic out-of-office messages, and judge whether the reply is interest, a “not right now”, or a request to be left alone.
• We keep only that judgement — one word per reply, plus the sender and the date. Message contents are never written to our database and never shown to our staff.
• The mailbox is opened read-only, so nothing is marked as read, moved or deleted. Your credentials are encrypted.
• You can disconnect at any time in Settings, which deletes the stored credentials.

5. Who else sees the data

We use the following providers to run the service. Each acts on our instructions and may not use the data for their own purposes.

• Resend — transmits campaign and account email, and reports delivery, bounces and opens. Sending is configured in the EU (Ireland) region.
• Supabase — the database holding accounts, contacts and campaigns.
• Render — runs the application servers.
• Vercel — serves the website.
• Stripe — takes payments and calculates applicable tax. Stripe receives your name, billing address, VAT number and card details; we never see or store card details ourselves.
• Sentry — records technical errors so faults can be found and fixed. Credentials are removed and email addresses are masked before anything is sent.

We do not sell personal data to anyone, ever.

6. Where the data is held

The database and email sending are located in the European Union. Some of the providers above are companies established in the United States and may process data there or elsewhere. Where that happens, the transfer relies on the safeguards in those providers' data processing terms, including the European Commission's standard contractual clauses.

7. How long it is kept

• Account data: while your account is open, then deleted on request.
• Invoices: retained as long as accounting law requires.
• Contact records: until the customer deletes them or the account closes.
• Unsubscribe records: kept indefinitely on purpose. Deleting them is the only way we could accidentally contact you again.
• Records of access to customer accounts: kept for 24 months and then deleted automatically. A record may be kept longer only where it is needed for a documented security investigation or to meet a legal retention requirement. Only an owner can place such a hold, it requires a written reason, and the hold is itself recorded.
• Website visit records: individual visit records are kept for 25 months and then deleted automatically. Only the monthly visit totals are kept after that, for historical growth reporting. Visit records are not linked to a YouLeadMe account or user. The rotating secret used to create the short-lived pseudonymous visit code is replaced every day and deleted after three days.

8. Your rights

Whether or not you are a customer, you can ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to it being processed. Where processing is based on legitimate interests, you may object to that processing. Write to support@youleadme.com and we will respond within 30 days. If you are in the EEA or the UK and are not satisfied, you may complain to your national data protection authority — in Norway, Datatilsynet.

9. Security

Passwords are stored as salted hashes and never in readable form. Traffic is encrypted in transit. Access to production data is limited to those who need it to operate the service.

Access to customer accounts. Authorized personnel may access your account in read-only mode when necessary for legitimate support or troubleshooting purposes. Such access is time-limited, requires a documented reason, and is recorded in an audit log. You will not ordinarily receive a separate notification when such access occurs.

• It is read-only. The person sees what you see in your account, including your lists, campaigns and results, and cannot change, send or delete anything.
• Each session ends automatically after 30 minutes.
• It is limited to authorized personnel, and each person can open only accounts that hold less access than they do.
• Every access is recorded: who opened the account, which account, when, and the reason given.

We do not use this access to analyze the behavior of individual customers. Product improvement and usage analysis rely on aggregated usage data instead.

10. Changes

If this policy changes in a way that affects you, we will say so on this page and update the date above.

11. Contact

Questions about anything here go to support@youleadme.com.

Terms of Service · Back to home