Who we are
LeadMate (“the service”, “we”) is an embeddable website widget that answers visitors and captures leads, together with a dashboard for working with those leads. This policy describes what data we process, why, and what rights you have.
LeadMate is operated by FOP Chemshyrov Ihor (sole proprietor), registered in Ukraine.
What data we process
Account data: name, email, password (stored as a hash), interface language and dashboard settings.
Billing data: invoice history and payment statuses. We do not store card details — payments are handled by the payment provider.
Lead data: names, contact details and messages that visitors of our customers’ websites leave in the widget.
Technical data: IP address, browser type and the pages where the widget was opened — for abuse protection and statistics.
Cookies and localStorage
The dashboard uses cookies for the session and for remembering the interface language. The widget stores a technical conversation identifier in the browser’s localStorage so a visitor can continue an ongoing conversation. We use no advertising trackers.
How we use data
To make the service work: show the widget, run conversations, store leads and deliver them to the website owner.
To send the notifications configured by the project owner: email, Telegram, webhooks.
To generate AI assistant replies: conversation texts are sent to the language model provider to the extent needed to produce a reply.
To improve the service and compute anonymised statistics.
GDPR roles
For your account data we act as the controller.
For lead data we act as the processor: we process it on behalf of the website owner who installed the widget. The website owner is responsible for the legal basis of collecting data on their site.
Who we share data with
Only with the contractors the service cannot run without: hosting, email delivery, Telegram (when notifications are enabled), the payment provider and AI model providers. Each receives only the minimum data required.
We do not sell personal data and do not share it with third parties for advertising. Disclosure is possible only under a lawful request from competent authorities.
Retention and deletion
Data is kept while your account or project is active. Leads can be deleted in the dashboard, and the account can be deleted entirely; after deletion the data is removed from production systems within a reasonable time, and backups rotate automatically.
Your rights
You may request access to your data, its correction, export or deletion, and withdraw consent. Write to us — see the Contact page; we will respond within the legally required period.
Security
Connections are protected with HTTPS, access to data is restricted by roles and permissions inside the dashboard, and passwords are stored only as hashes.
Changes to this policy
We may update this policy as the service evolves. We will announce material changes in the dashboard or by email; the date of the last update is shown at the top of this page.