Privacy Policy

Codas Labs, LLC, doing business as LeadTale (“LeadTale”, “we”, “us”) provides a B2B data, verification, and enrichment platform. This Privacy Policy explains how we collect, use, share, and protect information in connection with our website, web application, browser extension, APIs, MCP server, and related services (collectively, the “Service”).

This policy covers three groups of people:

• Customers — individuals and companies who sign up for and use the Service.
• Business contacts — professionals whose work-related information appears in the LeadTale database.
• Visitors — anyone who visits our marketing site or interacts with our content.

We act as a data controller for information collected about Customers and Visitors, and for business-contact information included in the LeadTale database. When we process data that Customers upload or submit through the Service (for example, a list of contacts uploaded for verification), we act as a data processoron that Customer’s behalf.

From Customers

When you create an Account, subscribe to a plan, or interact with our support team, we collect identifiers (name, business email, phone number), company details, payment information (processed by our payment processor — we do not store full card numbers), and any other information you choose to provide.

From use of the Service

We automatically collect usage, device, and log data when you interact with the Service, including IP address, browser and device identifiers, operating system, pages visited, feature interactions, API requests, session timestamps, and diagnostic information. We use this information to operate, secure, and improve the Service.

From Customer Data

Customers may upload lists of contacts, search queries, or CRM exports for enrichment or verification. We process this data on the Customer’s behalf strictly to provide the Service, unless the Customer has separately authorized other uses.

Business-contact information in the LeadTale database

LeadTale builds and maintains a B2B database containing professional information about individuals in their work capacity, including name, job title, employer, professional email address, professional phone number, general work location, and professional profile links. We compile this information from:

• Publicly available sources, such as company websites, public profiles, press releases, and public filings.
• Licensed third-party data providers that have represented to us that they have collected and provided the data lawfully.
• Signals contributed by Customers of the Service through features that enrich or update records.

From Visitors

We use cookies, pixels, and similar technologies on our website to operate the site, measure performance, and personalize our marketing. See Cookies below.

We use the information described above to:

• Provide, maintain, secure, and improve the Service.
• Authenticate Accounts, process transactions, and manage Subscriptions.
• Build, verify, enrich, and update the LeadTale business-contact database so our Customers can reach decision-makers in a lawful, professional context.
• Train and evaluate the verification and scoring models that power the Service, using information in a manner consistent with this policy.
• Respond to support requests, communicate product updates, and send transactional emails.
• Market our Service to prospective Customers, subject to opt-out rights under applicable law.
• Comply with legal obligations, respond to lawful requests, and enforce our Terms of Service.
• Detect, prevent, and investigate security incidents and abuse.

Where GDPR, UK GDPR, or similar laws apply, we process personal information on one or more of the following legal bases:

• Legitimate interests — to build and maintain a B2B contact database for professional outreach, to secure and improve the Service, to prevent fraud, and to conduct direct marketing to business contacts in accordance with law.
• Contract — to provide the Service to you and perform our contractual obligations.
• Consent — where you have given consent (for example, to certain marketing communications or non-essential cookies). You may withdraw consent at any time.
• Legal obligation — to comply with applicable laws, court orders, and regulatory requirements.

We share information with:

• Customers of the Service, who receive LeadTale Data (including B2B contact information about other businesses and professionals) as a core feature of the Service.
• Service providers and subprocessors who help us operate the Service (including cloud hosting, email and payment processors, analytics, customer support, and security providers). They are bound by contractual confidentiality and data protection obligations.
• Integrated third-party platforms at Customer direction (such as CRMs, outreach tools, and workspace providers), only when a Customer configures an integration and initiates a transfer.
• Authorities, regulators, or other parties when we reasonably believe disclosure is required by law, to respond to lawful requests, to enforce our Terms, or to protect our rights, property, or safety or those of others.
• Successors in a business transaction such as a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

We do not sell personal information for money. Some data-sharing described above may be considered a “sale” or “sharing” of personal information under certain US state privacy laws. See Your rights below for details on opting out.

We use cookies and similar technologies on our website for authentication, security, preferences, analytics, and marketing attribution. You can control cookies through your browser settings and, where we offer one, through our cookie preferences tool. Blocking certain cookies may affect site functionality.

We honor Global Privacy Control (GPC) signals on our marketing site as an opt-out of the sale or sharing of personal information under applicable US state privacy laws.

We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and purpose; for example:

• Customer Account data: for the duration of the Account and a reasonable period afterward for recordkeeping and legal purposes.
• Customer Data uploaded for processing: for the period necessary to deliver the Service and as directed by the Customer, subject to short operational retention windows.
• Business-contact records in the LeadTale database: as long as the information is relevant for its stated purpose and accurate, subject to updates, removal on request, or suppression list retention to honor opt-outs.
• Log and security data: for a rolling window set by operational and compliance needs.

We maintain administrative, technical, and physical safeguards designed to protect information, including encryption in transit and at rest, access controls, least-privilege access, audit logging, secret management, dependency scanning, and regular security reviews. No method of transmission or storage is perfectly secure; if you believe your Account has been compromised or you detect a vulnerability, contact us immediately at security@leadtale.com.

We are headquartered in the United States and may process information in the US or other countries where we or our service providers operate. Where required by law, we use appropriate transfer mechanisms (such as Standard Contractual Clauses) to safeguard international transfers of personal information.

Depending on where you live, you may have rights under GDPR, UK GDPR, the California Consumer Privacy Act (as amended by the CPRA), and other US state privacy laws, including the right to:

• Access, correct, or delete your personal information.
• Restrict or object to certain processing, including direct marketing.
• Request a portable copy of your personal information.
• Opt out of the sale or sharing of personal information and of targeted advertising, where applicable.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority in the EU/UK or with your state’s attorney general in the US.

To exercise rights, email privacy@leadtale.com. We will verify your identity before acting on requests. You will not be discriminated against for exercising your rights.

Opt out of the LeadTale database

If you are a professional whose information appears in the LeadTale database and you would like to update, restrict, or remove that information, email privacy@leadtale.com and we will honor applicable requests. We maintain a suppression list to prevent re-inclusion where required.

The Service is intended for business use and is not directed to children. We do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has provided us with personal information, contact privacy@leadtale.com and we will take appropriate action.

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective” date at the top of the page and, for material changes, notify Customers by email or in-product notice. Your continued use of the Service after an update takes effect constitutes your acceptance of the updated policy.

For privacy questions or to exercise your rights, email privacy@leadtale.com. Our Data Protection Officer can be reached at dpo@leadtale.com.