Privacy Policy

Last updated: July 2026  ·  Effective date: July 2026

KronLeads is a service operated by VAMPD 24 LTD, a company registered in Bulgaria (EIK 208077602, VAT BG208077602) with its registered address at Troshevo, Geo Milev 83, floor 7, apt 34, Varna, Bulgaria. VAMPD 24 LTD ("we", "our", or "us") is the data controller for the personal data described in this policy and is committed to protecting your privacy. This Privacy Policy explains what information we collect when you use our service, how we use it, and your rights with regard to it. By using KronLeads you agree to the practices described here.

1. Information We Collect

We collect information you provide directly to us, information generated automatically as you use the service, and information from third-party services you connect:

• Account information — name, email address, company name, and password hash when you register.
• Contact form submissions — name, email, company, website URL, and message content when you submit a demo request or inquiry.
• Campaign configuration — niche, target location, ideal customer profile, and any custom instructions you enter to configure a prospecting campaign.
• OAuth tokens — when you connect your Gmail account via Google OAuth, we store an encrypted OAuth refresh token. We never see or store your Google password.
• Usage data — logs of actions taken in the dashboard (e.g. emails approved, campaigns paused) along with timestamps and IP addresses.
• Prospect data — business names, websites, email addresses, and crawled website content gathered by the prospecting engine on your behalf. This data is stored in your Google Sheets export and our database and is owned by you.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the KronLeads prospecting service.
• Send prospecting emails on your behalf via your connected Gmail account.
• Score prospects using AI and generate personalized email drafts.
• Deliver Telegram notifications when prospects reply to your emails.
• Export prospect data and campaign results to your connected Google Sheet.
• Respond to your support requests and demo inquiries.
• Monitor system health, diagnose technical issues, and prevent abuse.
• Communicate with you about product updates, security notices, and billing.

We do not sell your personal data to third parties, and we do not use your data to train AI models without your explicit consent.

3. Territories We Do Not Process Outreach For

Some jurisdictions prohibit unsolicited commercial email even between businesses. We therefore do not process prospect data for outreach into, and we reject campaigns targeting, the following territories:

• Germany and Austria — unfair-competition law (UWG §7) in both countries requires prior consent before commercial email may be sent, with no exemption for B2B recipients.
• Canada — Canada's Anti-Spam Legislation (CASL) requires express or implied consent before a commercial electronic message may be sent.

The restriction is enforced in the product: a campaign naming one of these countries, or a major city within one, as its target country or search area is refused at creation. This is a contractual requirement on our customers, set out in section 3 of our Terms of Service, as well as a limit on what we process. Our customers remain responsible for the lawfulness of their outreach in every territory they send to.

4. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, we retain your data for 30 days to allow you to export it, after which it is deleted from our systems. Prospect data (lead lists, email logs) is retained for 90 days after account closure before permanent deletion. Server logs are retained for up to 14 days for security and debugging purposes.

You may request deletion of your data at any time by emailing hello@kronleads.com. We will process deletion requests within 14 business days.

5. Third-Party Services

KronLeads integrates with the following third-party services to deliver its functionality. Each service has its own privacy policy:

• Gmail OAuth (Google LLC) — We use Google's OAuth 2.0 to connect your Gmail account for sending prospecting emails. We request only the minimum required scopes (send, read replies). Your Gmail data is not shared with any party other than to perform the service. Google Privacy Policy →
• Google Sheets API (Google LLC) — Prospect data and campaign results are exported to a Google Sheet in your own Google Drive. We access only the specific sheet you authorize. Google Privacy Policy →
• Telegram Bot API (Telegram FZ-LLC) — Real-time reply notifications are sent to your Telegram account via a bot you authorize. We only send outbound messages; we do not read your Telegram message history. Telegram Privacy Policy →
• Anthropic Claude API — Prospect website content is sent to Anthropic's API for scoring and email generation. This data is processed in accordance with Anthropic's data usage policy and is not used to train their models under our enterprise agreement. Anthropic Privacy Policy →
• Web search APIs (SerpAPI / Serper) — Search queries based on your niche and location are sent to these services to discover leads. No personal data about you is shared; only the search query parameters you define.

6. Cookies & Tracking

Our marketing website uses no third-party analytics cookies. We may set a session cookie for authenticated dashboard users. We do not use advertising trackers or cross-site tracking pixels.

7. Data Security

We implement industry-standard security measures including HTTPS encryption in transit, bcrypt password hashing, encrypted storage of OAuth tokens, and access controls limiting data access to authorized personnel only. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security, but we take reasonable precautions to protect your data.

8. Your Rights

Depending on your location, you may have the following rights with respect to your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data ("right to be forgotten").
• Portability — request your data in a portable format.
• Objection — object to or restrict certain processing of your data.
• Withdraw consent — disconnect Google or Telegram integrations at any time from your dashboard settings.

To exercise any of these rights, please contact us at hello@kronleads.com. We will respond within 30 days.

9. Contact

If you have questions about this Privacy Policy or our data practices, please contact us:

• Legal entity: VAMPD 24 LTD (trading as KronLeads)
• Company number (EIK): 208077602
• VAT number: BG208077602
• Registered address: Troshevo, Geo Milev 83, floor 7, apt 34, Varna, Bulgaria
• Managing director: Aleksandar Goshev
• General enquiries: hello@kronleads.com
• Legal and data protection notices: m.grigorov@kronleads.com

We reserve the right to update this Privacy Policy at any time. Material changes will be communicated via email or a notice on this page with an updated effective date.