Privacy Policy.
Version 2026-10-01. Lead Finder is operated by Overbuilt Studio SRL, Bucuresti, Romania ("we", "us"). Questions: hello@madefast.dev.
This policy covers two kinds of personal data: data about you, our user (we are the controller), and data about the leads your searches find (you are the controller; we are your processor, see the GDPR page).
1. Data about you
| What | Why | Kept |
|---|---|---|
| Email, name, plan, account status, sign-in records | Running your account (contract) | Until you delete the account |
| Date and version of the terms you accepted | Proving acceptance (legal obligation, legitimate interest) | Account lifetime plus 3 years |
| Your Apify token (encrypted) and Apify username | Running searches on your account (contract) | Until you remove it or delete the account |
| Usage counts: searches, new leads, costs (no lead details) | Quota, statistics, abuse prevention (legitimate interest) | Up to 2 years; unlinked from you when you delete the account |
| Technical logs (IP address, requests) | Security and troubleshooting (legitimate interest) | Up to 30 days |
We use a strictly necessary sign-in cookie; no advertising or tracking cookies.
2. Data about the leads you find
- Search results and research: kept for at most 12 hours, then deleted.
- Keyed fingerprints of leads delivered to you: kept 1 year, only to avoid showing them to you twice.
- Do-not-contact fingerprints: kept until you remove them, so people who objected are never shown to you again.
- We never use lead data for our own purposes, never combine it across users, and never sell it.
If you are a person found by a Lead Finder user: the user who contacted you is responsible for your data and must tell you how to object. You can also write to us at hello@madefast.dev; we will pass your request to the user and, where we still hold anything, delete it.
3. Who else processes data
- Hosting: Hetzner Online GmbH, servers in Germany.
- Email delivery (sign-in codes and account emails): Resend, Inc. (United States, under the EU Standard Contractual Clauses).
- Your own providers, under your own contracts: Apify (Czech Republic) and the scrapers you run there; Anthropic (Claude), where your conversations happen.
4. Your rights
You can access, correct, export or delete your data, object to processing based on legitimate interest, and complain to your data protection authority (in Romania: ANSPDCP, dataprotection.ro). Delete your account from your account page, or write to hello@madefast.dev.