Privacy Policy

At Leadde, we are committed to upholding strong privacy protections for our customers, users, and website visitors. This Privacy Notice ("Notice") outlines how we collect, use, and safeguard the information you provide to us, as well as your privacy rights and choices.

This Notice applies to the data processing activities of Leadde and its affiliated entities in connection with the Leadde Services and Leadde websites (such as Leadde.ai) (collectively, our “Services”). It does not apply to any third-party applications or software integrated with the Services (“Third-Party Services”), or to the privacy practices of any other third-party products, services, or businesses. Unless otherwise defined, capitalized terms in this Notice have the same meaning as in our Terms of Service.

About Us

Leadde acts as the data controller for the Services described in this Notice.

However, for certain activities outlined herein, if you access our Services on behalf of your organization and your organization holds an enterprise account with us, Leadde will act as a data processor. In such cases, your organization is the data controller. For information about how to exercise your rights and the legal basis for processing your personal data in this context, please refer to your organization’s privacy notice.

What Types of Personal Data Do We Process?

A) Information You Provide When Interacting with Our Services

Registration Data: When you register for our Services, you are required to provide your email address, password, and username. This information is necessary to enable access to and use of our Services.
Additional Information You Choose to Share: You may voluntarily provide further information, including personal data, when contacting us, submitting feedback, or otherwise communicating with us. The decision to share such information is entirely yours, and our processing of this data will be based on your consent.
Service Provider and Contributor Information: If we engage you to provide services to Leadde, we may collect your name, contact details, and invoicing information. Additionally, if you are engaged to create stock avatars or participate in training data collection, you will be asked to provide images and/or audio recordings of your likeness and voice.

B) Content You or Third Parties Upload to Our Services

Your image or other personal data may be included in any content (e.g., training materials) uploaded to our Services by you or others.

C) Information We Automatically Collect When You Use Our Services

Technical Data: Like most websites and online services, we automatically collect and store certain information in log files when you interact with our Services. This includes:
- Internet Protocol (IP) address
- Full web page URLs and referring websites
- Browser type, device type, and operating system
- Geolocation data
- Diagnostic data (e.g., crash logs, launch times, hang rates, energy usage)
- Unique device or browser identifiers (including cookie IDs)
Usage Data: We collect data about how you interact with our Services, including:
- Browsing activity on our website
- Interaction with our emails
- Engagement with personalized content, insights, and advertising
- Page views, user events, session start and end times
- Clicks on and views of our advertisements
- Advertising identifiers (such as IDFA for iOS or AAID for Android)

We may use cookies and other tracking technologies to collect this information. For more details, please refer to our Cookie Notice.

D) Information We Receive from Third Parties

Partners: We receive information about you from third-party partners, such as advertising partners and data enrichment providers. This may include unique identifiers and profiles reflecting your interests and characteristics, derived from your activity on our Services and other platforms using our partners’ technologies. Why We Process Your Data and Our Legal Basis We process your personal data for a variety of purposes, depending on how you use our Services and any preferences you have shared with us. The specific legal basis for processing depends on the context and purpose. Below is an overview of how we use your data and the applicable legal grounds.
Provision of Our Services

We use your personal data to deliver the Services you access, such as when you upload voice, image, or video content to create digital avatars. This processing is necessary for the performance of a contract with individual users. For business users, we may rely on our legitimate interests in providing and operating the Service. Note: When we process data on behalf of a client (e.g., your organization) as a data processor, we act under their instructions and do not require a separate legal basis under data protection law.
Billing and Account Management

We process personal data—such as financial and contact information—for billing, transaction processing, and account administration. This includes sending invoices, purchase confirmations, and enabling secure login (e.g., using your email address for authentication). Legal basis: We have a legitimate interest in maintaining and supporting user accounts effectively and securely.
Service Communications

We send essential administrative messages, including service updates, security alerts, and legal notices, to the email address you provide. These communications are critical to the operation of the Service and cannot be opted out of. Legal basis: We have a legitimate interest in ensuring service continuity, customer support, and account security.
Marketing and Sales Outreach

With your prior consent, we may use your email address or other contact details to send promotional materials about our products and services. You may withdraw this consent at any time by contacting us (see “Contact Us” section).

Additionally, we may analyze the content you upload and use third-party tools to tailor and enhance our marketing and sales efforts. Legal basis: Consent (which you may revoke at any time).
Insights and Analytics

We use technical and usage data (e.g., page views, session duration, device information) to understand how users interact with our website, measure performance, and improve our Services. This may involve cookies or similar tracking technologies. Legal basis: Legitimate interest in conducting analytics and improving our Services. For non-essential cookies, we obtain your consent as required.
Feedback Collection and Service Improvement

We collect and analyze user feedback to identify areas for improvement and enhance the quality of our Services. If feedback is recorded (e.g., audio or video), we will seek your explicit consent. Legal basis: Legitimate interest in service improvement, or consent where recording is involved.
Personalisation

To enhance your experience, we use technical and usage data to personalize content, features, and recommendations within our Services. This includes showing you content we believe is relevant based on your behavior. Cookies and similar technologies may be used for this purpose. Legal basis: Legitimate interest in improving user experience and supporting marketing activities. For non-essential cookies, consent is required.
Data Enhancement and Management

We may use your technical and usage data, along with data from third-party suppliers, to:
- Enrich existing customer and user profiles (e.g., adding demographic or behavioral data),
- Perform data cleansing and updating (e.g., removing duplicates or correcting outdated records),
- Segment users for targeted engagement (e.g., identifying specific customer groups). This helps us maintain accurate, high-quality data for operational and analytical purposes. Legal basis: Legitimate interest in efficient data management and service optimization. Where non-essential cookies are used, we rely on your consent.
Security and Fraud Prevention

We process personal data to protect your account, verify identities, detect suspicious or fraudulent activity, and enforce compliance with our Terms of Service and Acceptable Use Policy. Legal basis: Legitimate interest in safeguarding our Services, users, and systems.

Protecting Our Legal Rights and Business Interests

We may use your information when required by law or when necessary to protect our legal rights, defend against claims, comply with regulatory obligations, conduct audits, or in connection with corporate transactions such as mergers, acquisitions, or asset sales. Legal basis: Legal obligation or legitimate interest in protecting and operating our business lawfully and effectively.
Other Purposes

We may process your personal data for any additional purposes where we have obtained your consent, or where otherwise permitted under applicable law and in accordance with this Notice.

How Long Do We Retain Your Data?

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, as described in this Notice (for example, to provide our Services, manage your account, or comply with legal obligations).

In some cases, we may be required by law to retain your data for a longer period—such as for tax, accounting, regulatory, or legal compliance purposes. Where applicable, we will retain your data in accordance with these requirements.

Once we no longer have a legitimate business need or legal obligation to process your personal data, we will securely delete or anonymize it in line with our internal data retention and deletion policies.

Third Parties With Whom We Share Your Data We may share your personal data with our Affiliates and third parties under specific circumstances. Any such sharing is conducted in compliance with applicable data protection laws and this Notice, and only to the extent necessary. These circumstances include:

Legal Compliance and Regulatory Obligations

We may disclose your personal data if required by law or in response to valid legal requests, such as from law enforcement, judicial authorities, or government agencies. This includes situations involving national security, criminal investigations, fraud prevention, or the protection of our rights, your safety, or the safety of others. We will only share data when legally obligated or when we have a legitimate interest in doing so, consistent with applicable laws.
Third-Party Service Providers and Business Partners

We engage Leadde Affiliates and third-party service providers to support the operation and delivery of our Services. These partners act as data processors or, where applicable, independent controllers or joint controllers, and may assist with:
- Hosting and infrastructure services
- Data storage and processing
- Payment processing
- Customer support and communication
- Email delivery and notification systems
- Authentication and identity verification
- Analytics, marketing, and advertising technologies
These providers are contractually obligated to protect your data and may only process it on our instructions and for specified purposes.
Professional Advisors

We may share your data with professional advisors such as lawyers, accountants, auditors, insurers, and financial institutions. These parties act as service providers or independent controllers and assist us with legal, financial, insurance, and compliance-related matters. Sharing occurs only as necessary and where permitted by law or supported by a legitimate interest.

Data Transfers

Our Services are hosted in Japan. If you access our website or Services from a region outside Japan—particularly from jurisdictions with data protection laws different from those in Japan—your personal data will be transferred to and processed in Japan.

By using our Services, you acknowledge and consent to the transfer of your personal data to Japan and potentially to other countries where we or our service providers operate.

For UK and EEA Residents:

We may transfer your personal data to countries that do not have data protection laws deemed equivalent in level to those in the UK or the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, as required by applicable data protection regulations. These safeguards include:

Adequacy Decisions

We may transfer your data to countries or organizations recognized by the European Commission, the UK Government, or other relevant authorities as providing an "adequate" level of data protection. This may include transfers to entities participating in frameworks such as the EU-U.S. Data Privacy Framework or similar recognized mechanisms.
Contractual Safeguards

Where no adequacy decision applies, we rely on approved legal mechanisms to ensure protection. The most common is the use of Standard Contractual Clauses (SCCs) adopted by the European Commission, the UK Government, or other competent authorities. These are legally binding contracts that impose data protection obligations on the parties involved. We may also use other legally recognized transfer mechanisms as permitted under applicable law.

How Do We Protect Your Data?

We take the security of your personal data seriously and implement a range of technical and organizational measures designed to protect it from unauthorized access, disclosure, alteration, or destruction.

Your account is protected by your chosen password. We strongly encourage you to choose a strong, unique password and to never share it with anyone. To further protect your account, we recommend that you log out after each session, especially when using shared or public devices.

To safeguard your data, we employ industry-standard security technologies and practices, including:

Encryption (e.g., TLS/SSL) for data in transit
Secure storage and access controls for data at rest
Firewalls and intrusion detection/prevention systems
Regular security assessments and monitoring

While we strive to protect your personal data using these and other appropriate measures, no system is completely immune to risk. The internet and digital systems inherently carry the possibility of unauthorized access or breaches despite robust safeguards. By using our Services, you acknowledge and accept that we cannot guarantee absolute security and that you assume certain risks in transmitting information online.

What Happens If You Do Not Provide Required Personal Data?

In some cases, we are legally required to collect certain personal data, or we need it to enter into or perform a contract with you (for example, to provide you with our Services).

If you do not provide the necessary data when requested:

We may be unable to deliver the Service you have requested
We may not be able to fulfill our contractual or legal obligations
As a result, we may need to suspend or cancel your access to the relevant Services

We will notify you if this is the case and explain the consequences of not providing the required information.

Your Privacy Rights

Depending on your jurisdiction and applicable data protection laws (such as the GDPR or UK DPA), you may have the following rights regarding your personal data. You can exercise any of these rights by contacting us at support@leadde.ai. We will respond within the timeframes required by law and may ask you to verify your identity for security purposes.

You have the right to:

Access – Request information about the personal data we hold about you and obtain a copy of it.
Rectification – Ask us to correct or update any inaccurate or incomplete personal data.
Erasure (Right to be Forgotten) – Request the deletion of your personal data, subject to certain exceptions (e.g., legal, regulatory, or contractual obligations).
Restriction of Processing – In certain circumstances (e.g., if you contest the accuracy of your data or believe processing is unlawful), you may request that we limit how we use your data.
Objection – Object to our processing of your data based on legitimate interests, including direct marketing. You may opt out of marketing communications at any time.
Data Portability – Receive your personal data in a structured, commonly used, machine-readable format and request that we transfer it to another service provider, where technically feasible.
Not to Be Subject to Automated Decision-Making – You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce legal effects or significantly affect you, unless such processing is necessary for a contract or authorized by law.

We will comply with your requests unless an exemption applies (e.g., for legal compliance, fraud prevention, or the rights of others).

If you are not satisfied with how we handle your request, you have the right to:

Lodge a complaint with your local data protection authority
- In the UK: Information Commissioner’s Office (ICO) – www.ico.org.uk
- In the EU: Visit the European Data Protection Board website for contact details of national authorities
Seek judicial remedy or claim damages through the courts, if applicable

Children’s Privacy

Our Services are not intended for individuals under the age of 13. We do not knowingly collect or process personal data from children under 13 years old.

If we become aware that we have inadvertently collected personal data from a child under 13 without verifiable parental consent, we will take immediate steps to delete the information.

If you believe that a child under 13 has provided us with personal data, please contact us at support@leadde.ai so we can take appropriate action.

Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, technologies, or legal requirements.

When we make material changes, we will:

Notify you via the email address associated with your account, or
Post a prominent notice on our website

We encourage you to review this page periodically to stay informed about how we protect your data and respect your privacy.

If you have any questions, concerns, or requests regarding this Privacy Notice, our data practices, or your rights, please contact us: