Privacy & Security
6 min read
Data Protection
We take data protection seriously. Your data is encrypted at rest and in transit using industry-standard AES-256 encryption. We never sell your data. We do share it with a small number of sub-processors - OpenAI for lead scoring, Shopify for billing, and Upstash for rate limiting - which are listed in our Privacy Policy.
Security Measures
- Encryption - AES-256 at rest, TLS 1.3 in transit
- Authentication - Signed-in session tokens issued after Shopify verifies your admin session
- Infrastructure - Hosted on Vercel with HTTPS enforced and HSTS preloaded
- Access Control - Role-based permissions, audit logging
- Monitoring - 24/7 anomaly detection and intrusion prevention
What We Collect
We collect only what's necessary to provide our service:
- Account info - Name, email (for login and notifications)
- Shopify data - Customer profiles, orders, products (for scoring)
- Usage analytics - anonymized product usage to improve the service
Data Retention
- Active account data is retained while your account is active
- Cancelled accounts: data deleted after 30 days
- Lead scores and analytics: retained for 12 months
- You can request immediate deletion via Settings > Security > Delete Account
Your Rights
- Access - Request a copy of all your data
- Rectification - Correct any inaccurate data
- Deletion - Request complete data deletion
- Portability - Export your data in CSV/JSON format
- Objection - Opt out of non-essential data processing
Read our full Privacy Policy and Terms of Service.
For security concerns, email support@leadup.business