Privacy Policy

Last Updated: May 20, 2026

CatchLead ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform.

1. Information We Collect

1.1 Account Information (Service Providers)

When you create a CatchLead account, we collect:

Full name and email address (via Google OAuth)
Business name, phone number, and address
Service offerings, pricing information, and business hours
Payment information (processed securely by Stripe — we do not store card numbers)

1.2 End-User Information (Website Visitors)

When website visitors interact with a CatchLead AI agent, we may collect:

Name and phone number (voluntarily provided during conversation)
Email address (if provided)
Service address or location (if provided)
Project or service details discussed during the conversation
Photos uploaded through the chat widget
Voice recordings (during voice agent interactions)
Conversation transcripts (text and voice)

1.3 Automatically Collected Information

IP address and approximate geolocation
Browser type, device type, and operating system
Pages visited and referral source
Session duration and interaction timestamps
Widget interaction events (open, close, messages sent)

2. How We Use Information

Purpose	Data Used
Provide AI agent conversations	Business info, visitor messages, voice audio
Lead capture and management	Visitor name, phone, email, project details
Appointment scheduling	Visitor contact info, scheduling preferences
SMS notifications and reminders	Phone numbers (service provider and visitor)
Billing and payments	Stripe customer ID, subscription status
Service improvement	Anonymized usage patterns, error logs
Customer support	Account info, conversation history

3. Third-Party Services

We share data with the following third-party services to operate the platform:

Google Gemini AI — Conversation content (text and voice) is sent to Google's Gemini API for AI processing. Google's data handling is governed by Google's Privacy Policy.
Stripe — Payment and billing information is processed by Stripe. See Stripe's Privacy Policy.
Twilio — SMS notifications and voice services are handled by Twilio. See Twilio's Privacy Policy.
Google Cloud Platform — Our infrastructure runs on Google Cloud Run. Data is stored and processed in the United States.

4. AI-Specific Data Practices

Conversations with CatchLead AI agents are processed by third-party AI models. Please be aware of the following:

Conversation processing. All messages exchanged with the AI agent are sent to Google's Gemini API for real-time response generation. This includes text messages, voice transcriptions, and uploaded photos.
Voice recordings. Voice interactions are streamed to Google's AI services for speech-to-text and response generation. We do not permanently store raw voice recordings after the conversation ends.
AI training. CatchLead does not use your conversation data to train AI models. However, Google may process data according to their own API terms and data handling policies.
No data selling. We do not sell conversation data or personal information to third parties for advertising or marketing purposes.

5. Data Retention

Active accounts: Data is retained for the duration of your subscription.
Conversation transcripts: Stored for up to 24 months after the conversation date.
Lead information: Retained until the service provider deletes it or the account is terminated.
After account deletion: We delete or anonymize your data within 90 days of account termination, except where required by law to retain certain records.

6. Data Security

We implement industry-standard security measures to protect your data:

All data transmitted via HTTPS/TLS encryption
Database encryption at rest
OAuth 2.0 authentication (Google Sign-In)
API key authentication for widget access
Regular security reviews and updates

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of personal data we hold about you
Correction: Request correction of inaccurate personal data
Deletion: Request deletion of your personal data
Portability: Request a machine-readable export of your data
Opt-out: Opt out of non-essential data processing

To exercise any of these rights, contact us at info@catchlead.dev.

8. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected and how it is used
Right to delete personal information
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising your privacy rights

9. European Residents (GDPR)

If you are located in the European Economic Area (EEA), we process your data under the following legal bases:

Contract: Processing necessary to provide the Service
Legitimate interest: Service improvement and security
Consent: Where required (e.g., marketing communications)

Data is transferred to and processed in the United States. By using the Service, you consent to this transfer.

10. Children's Privacy

CatchLead is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it promptly.

11. Cookies & Tracking

Our website and widget may use:

Essential cookies: Required for authentication and session management
Analytics: Anonymous usage tracking to improve the Service
Local storage: Widget state and returning visitor identification

We do not use third-party advertising cookies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on the Service. The "Last Updated" date at the top reflects the most recent revision.

13. Contact Us

For privacy-related questions, data requests, or concerns:

Email: info@catchlead.dev

Website: https://catchlead.dev