Last updated: May 2025 · Effective date: May 2025
KronLeads ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect when you use our service, how we use it, and your rights with regard to it. By using KronLeads you agree to the practices described here.
1. Information We Collect
We collect information you provide directly to us, information generated automatically as you use the service, and information from third-party services you connect:
- Account information — name, email address, company name, and password hash when you register.
- Contact form submissions — name, email, company, website URL, and message content when you submit a demo request or inquiry.
- Campaign configuration — niche, target location, ideal customer profile, and any custom instructions you enter to configure a prospecting campaign.
- OAuth tokens — when you connect your Gmail account via Google OAuth, we store an encrypted OAuth refresh token. We never see or store your Google password.
- Usage data — logs of actions taken in the dashboard (e.g. emails approved, campaigns paused) along with timestamps and IP addresses.
- Prospect data — business names, websites, email addresses, and crawled website content gathered by the prospecting engine on your behalf. This data is stored in your Google Sheets export and our database and is owned by you.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the KronLeads prospecting service.
- Send prospecting emails on your behalf via your connected Gmail account.
- Score prospects using AI and generate personalized email drafts.
- Deliver Telegram notifications when prospects reply to your emails.
- Export prospect data and campaign results to your connected Google Sheet.
- Respond to your support requests and demo inquiries.
- Monitor system health, diagnose technical issues, and prevent abuse.
- Communicate with you about product updates, security notices, and billing.
We do not sell your personal data to third parties, and we do not use your data to train AI models without your explicit consent.
3. Data Retention
We retain your account data for as long as your account is active. If you cancel your subscription, we retain your data for 30 days to allow you to export it, after which it is deleted from our systems. Prospect data (lead lists, email logs) is retained for 90 days after account closure before permanent deletion. Server logs are retained for up to 14 days for security and debugging purposes.
You may request deletion of your data at any time by emailing hello@kronleads.com. We will process deletion requests within 14 business days.
4. Third-Party Services
KronLeads integrates with the following third-party services to deliver its functionality. Each service has its own privacy policy:
- Gmail OAuth (Google LLC) — We use Google's OAuth 2.0 to connect your Gmail account for sending prospecting emails. We request only the minimum required scopes (send, read replies). Your Gmail data is not shared with any party other than to perform the service. Google Privacy Policy →
- Google Sheets API (Google LLC) — Prospect data and campaign results are exported to a Google Sheet in your own Google Drive. We access only the specific sheet you authorize. Google Privacy Policy →
- Telegram Bot API (Telegram FZ-LLC) — Real-time reply notifications are sent to your Telegram account via a bot you authorize. We only send outbound messages; we do not read your Telegram message history. Telegram Privacy Policy →
- Anthropic Claude API — Prospect website content is sent to Anthropic's API for scoring and email generation. This data is processed in accordance with Anthropic's data usage policy and is not used to train their models under our enterprise agreement. Anthropic Privacy Policy →
- Web search APIs (SerpAPI / Serper) — Search queries based on your niche and location are sent to these services to discover leads. No personal data about you is shared; only the search query parameters you define.
5. Cookies & Tracking
Our marketing website uses no third-party analytics cookies. We may set a session cookie for authenticated dashboard users. We do not use advertising trackers or cross-site tracking pixels.
6. Data Security
We implement industry-standard security measures including HTTPS encryption in transit, bcrypt password hashing, encrypted storage of OAuth tokens, and access controls limiting data access to authorized personnel only. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security, but we take reasonable precautions to protect your data.
7. Your Rights
Depending on your location, you may have the following rights with respect to your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Deletion — request deletion of your personal data ("right to be forgotten").
- Portability — request your data in a portable format.
- Objection — object to or restrict certain processing of your data.
- Withdraw consent — disconnect Google or Telegram integrations at any time from your dashboard settings.
To exercise any of these rights, please contact us at hello@kronleads.com. We will respond within 30 days.
8. Contact
If you have questions about this Privacy Policy or our data practices, please contact us:
We reserve the right to update this Privacy Policy at any time. Material changes will be communicated via email or a notice on this page with an updated effective date.