Privacy Policy

Leadhoot (“Leadhoot”, “we”, “us”) operates leadhoot.com, a service that monitors public subreddits you choose, scores posts for buyer intent, and surfaces the ones worth replying to. This policy explains what we collect, why, and what control you have over it.

It applies to leadhoot.com and every subdomain we operate. If you disagree with it, please stop using the service.

We collect three kinds of data, and nothing else:

• Account data. Your email address, and, if you sign in with Google, the name, email address, and profile picture on your Google account. We never receive or store your password.
• Reddit content you point us at. The public posts, author usernames, and timestamps from the subreddits you choose to monitor, plus the keywords and filters you configure.
• Usage and technical data. IP address, browser and device type, pages viewed, and error logs. This is how we keep the service up and catch abuse.

We do not collect payment card numbers. Checkout is handled by our payment processor, which sends us only a subscription status and the last four digits of the card.

• To authenticate you and keep you signed in.
• To fetch, score, and rank posts from the subreddits you monitor, and to notify you about matches.
• To bill you and manage your subscription.
• To debug failures, prevent abuse, and improve scoring quality.
• To send service email, receipts, security notices, and product updates you can opt out of.

We do not sell your data. We do not share it with advertisers or data brokers. We do not use the content of your monitored subreddits to train public machine learning models.

If you sign in with Google, we request only your basic profile and email address. We use them to create your account, identify you on return visits, and contact you about the service.

Leadhoot’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer this data to third parties except as needed to provide the service, comply with the law, or in connection with a merger or acquisition. We do not use it for advertising, and no human reads it except with your explicit permission or where required for security or legal reasons.

You can revoke our access at any time from your Google account’s third-party access settings. Doing so does not delete your Leadhoot account, email us if you want that too.

Leadhoot reads public posts in the subreddits and searches you ask us to watch. It never logs in to Reddit, X or Threads as you, and it never posts, comments or messages on your behalf.

If you write a reply pitch in Settings, Leadhoot drafts a reply and a direct message for each alert from the post and your pitch, using an AI model run on Cloudflare. The drafts appear in your alert email with links to Reddit and X; you decide whether to send them, from your own account. You are responsible for following each platform’s rules and each community’s rules for anything you send.

Posts we ingest are stored so we can score them, deduplicate them, and show you a history. Remove a source from your watchlist and we stop ingesting it; its stored posts are deleted within 30 days.

We set a small number of first-party cookies that carry your session so you stay signed in, plus cookies that remember interface preferences. They are strictly necessary, turning them off breaks login. We do not run third-party advertising or cross-site tracking cookies.

We use a short list of processors, each bound by contract to handle your data only on our instructions:

• Supabase, database, authentication, and file storage.
• Cloudflare, hosting, CDN, DDoS protection, and the AI model that drafts replies.
• Dodo Payments, subscription billing and invoicing.
• Google, sign-in, if you choose that option.
• treg, public Reddit and X data for searches and free tools.
• DataFast and Statsip, privacy-friendly website analytics.

We may also disclose data when the law requires it, or to protect our rights, our users, or the public. If we are ever acquired, your data may transfer with the business, you will be told before it does.

Our infrastructure runs on servers in the United States and on Cloudflare’s global edge network. If you use Leadhoot from outside those regions, your data is transferred and processed there under standard contractual clauses.

• Account data: until you delete your account, then up to 30 days in backups.
• Monitored subreddit content: 12 months rolling, or 30 days after you remove the subreddit.
• Billing records: as long as tax and accounting law requires, typically 7 years.
• Server logs: 90 days.

Data is encrypted in transit with TLS and at rest by our hosting providers. Access to production systems is limited to people who need it and is protected by multi-factor authentication. No system is perfect, if we ever suffer a breach affecting your data, we will notify you and the relevant regulator without undue delay.

Wherever you live, you can ask us to show you the data we hold, correct it, export it, or delete it. Depending on your jurisdiction, you may also have the right to object to processing, restrict it, or withdraw consent. Email support@leadhoot.com and we will respond within 30 days. You will never be charged or given a worse service for exercising these rights.

Leadhoot is for business use and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, email us and we will delete it.

We will update this policy as the product changes. Material changes are announced by email or an in-app notice at least 14 days before they take effect, and the date at the top always reflects the current version.

Questions, requests, or complaints: support@leadhoot.com.