LeadsCloud Privacy Policy

Effective date: Jan 2025
Last updated: Nov 2026

This Privacy Policy explains how DISPARATE LLC ("DISPARATE LLC", "LeadsCloud," "we," "us," or "our") collects, uses, shares, and protects information when you use our website at https://leadscloud.pro, the LeadsCloud AI Studio application at https://ai.leadscloud.pro, our API at https://api.leadscloud.pro, our MCP (Model Context Protocol) server, and related services (together, the "Services").

1. Information We Collect

1.1 Information you give us

• Account information: name, email address, password (stored hashed), company or brand details, and preferences.
• Content: prompts, drafts, posts, images, brand settings, and other material you create or upload.
• CRM and lead data: information about your leads or contacts that you enter, import, or capture through the Services, such as names, emails, phone numbers, and notes. You are responsible for having a lawful basis to give us this data.
• Billing information: if you buy paid features, payment is handled by a third-party payment processor. We do not store full card numbers; we may receive limited details such as the card brand, last four digits, and billing status.
• Communications: messages you send to us for support or feedback.

1.2 Information from connected third-party accounts

When you choose to connect a third-party account, we receive the information that you authorize, as described in Sections 3, 4, and 4A.

1.3 Information collected automatically

• Usage and device data: IP address, browser type, device information, pages viewed, features used, timestamps, and error logs.
• Cookies and similar technologies: see Section 7.

1.4 Third-party data providers

For local SEO rank tracking, we request public search-ranking data from DataForSEO, a third-party data provider, based on the keywords, locations, and business details you supply.

2. How We Use Information

• To provide, operate, and maintain the Services, including generating, scheduling, and publishing content you approve.
• To show you analytics, search, and local business performance reports.
• To manage your CRM and leads on your instructions.
• To process payments and enforce spending limits you set.
• To communicate with you about your account, security, and updates.
• To secure the Services, prevent abuse, and comply with legal obligations.
• To improve the Services using aggregated or de-identified usage information. This never includes Google user data (see Section 3).

3. Google User Data

If you connect a Google account, LeadsCloud accesses Google user data only through the scopes you grant on Google's consent screen.

3.1 Scopes we request and why

• openid, email, profile: to identify the Google account you connected and show its name and email in your LeadsCloud settings.
• https://www.googleapis.com/auth/analytics.readonly (Google Analytics, read-only): to list the GA4 properties you can access and display traffic and conversion reports for the property you select. We cannot change your Analytics settings.
• https://www.googleapis.com/auth/webmasters.readonly (Google Search Console, read-only): to display search performance data (such as queries, clicks, impressions, and positions) for sites you select. We cannot change your Search Console settings.
• https://www.googleapis.com/auth/business.manage (Google Business Profile): to list the business locations you manage and display performance insights and reviews. LeadsCloud can prepare draft posts and draft review replies for you; nothing is published to your Business Profile unless you review and publish it yourself.

3.2 Limited Use disclosure

LeadsCloud's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• We use Google user data only to provide and improve the user-facing features described above, which you can see in the LeadsCloud interface.
• We do not sell Google user data.
• We do not use or transfer Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
• We do not use Google user data to determine creditworthiness or for lending purposes.
• We do not use Google user data to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models.
• We transfer Google user data to third parties only as needed to provide or improve the user-facing features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
• No human at LeadsCloud reads your Google user data unless (a) you give us affirmative consent for specific data, for example for support; (b) it is necessary for security purposes, such as investigating abuse; (c) it is necessary to comply with applicable law; or (d) the data has been aggregated and anonymized for internal operations, as the Google API Services User Data Policy permits.

3.3 Storage and protection of Google data

OAuth access and refresh tokens are stored encrypted and are used only to make the requests described above. Report data retrieved from Google may be cached temporarily to display your dashboards.

3.4 Revoking access and deleting Google data

• You can disconnect Google at any time in your LeadsCloud settings. When you disconnect, we delete the stored tokens.
• You can also revoke LeadsCloud's access at any time at https://myaccount.google.com/permissions.
• To ask us to delete any Google data we still hold, email info@disparate.ai. We will delete it within 30 days unless the law requires us to keep it.

4. Meta (Facebook and Instagram), X, and LinkedIn Data

When you connect a Facebook Page, Instagram account, X account, or LinkedIn account or page, we receive the access tokens and the profile, page, or account details that you authorize. We use them only to:

• show which accounts are connected;
• publish or schedule the content you approve; and
• retrieve post and account metrics, where the platform permits, so we can show you performance.

We do not sell this data or use it for advertising profiles. Your use of each platform remains subject to that platform's own terms and privacy policy. You can disconnect any account in LeadsCloud or revoke access in the platform's own settings. To request deletion of data we received from these platforms, email info@disparate.ai.

4A. Pinterest Data

When you connect a Pinterest account to LeadsCloud AI Studio, LeadsCloud receives an access token and a refresh token, plus the account details you authorize. We request these Pinterest permissions:

• user_accounts:read: to show which Pinterest account is connected (username, account ID and account type).
• boards:read: to list your boards so you can choose where a pin goes.
• boards:write: to create a board when you ask for one in the Pin dialog.
• pins:read: to confirm a pin was published and show its status and link.
• pins:write: to publish pins you approve, with the image, title, description, destination link and alt text you provide.

LeadsCloud publishes to Pinterest only when you click Pin it, or when you turn on auto-pin for a project.

We store Pinterest tokens encrypted and use them only to carry out these actions for the account owner who connected them. We keep the connected account's username, ID, type and board list. We also keep a record of each pin we publish (pin ID, link, board and time), which is your publishing history.

We do not sell Pinterest data. We do not use it for advertising or profiling, or for any purpose unrelated to providing the service.

When you disconnect Pinterest in Social Connections, we immediately delete the stored tokens and account details. You can also remove LeadsCloud's access in your Pinterest account settings. To ask us to delete any other Pinterest data, including publishing history, email info@disparate.ai.

Your use of Pinterest is also subject to Pinterest's Terms of Service and Privacy Policy.

5. AI Features and the MCP Server

LeadsCloud uses AI models to help generate content. Prompts and the context needed to fulfill your request may be sent to AI model providers acting as our service providers. Your MCP server lets AI assistants that you authorize call LeadsCloud tools on your behalf. Any assistant you connect is governed by its own provider's terms. Google user data is never used to train generalized AI models (see Section 3.2).

6. How We Share Information

We do not sell your personal information. We share information only:

• With service providers that help us run the Services, under contracts limiting their use of the data. These include cloud hosting (DigitalOcean, Vercel), email delivery (Mailgun), a payment processor, AI model providers.
• With third-party platforms when you direct us to publish to them.
• For legal reasons, to comply with law or protect rights, safety, and security.
• In a business transfer, such as a merger or acquisition, subject to this Policy.
• With your consent.

7. Cookies

We use essential cookies and similar technologies to keep you signed in, secure your session, and remember preferences. You can control cookies in your browser settings, but disabling essential cookies may break parts of the Services.

8. Data Retention

We keep personal information for as long as your account is active or as needed to provide the Services. After you close your account, we delete or anonymize your data within 30–90 days, except where we must keep it for legal, tax, security, or dispute purposes. Connected-account tokens are deleted as soon as you disconnect the account.

9. Security

We use reasonable administrative, technical, and physical safeguards. These include encryption in transit (HTTPS), encryption of stored access tokens, and hashing or encryption of lead contact details in our CRM, plus access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

The Services are not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us data, contact info@disparate.ai and we will delete it.

11. International Transfers

We and our service providers may process information in the United States and other countries whose data protection laws may differ from yours. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

12. Your Rights

Depending on where you live (for example, under the GDPR/UK GDPR or California's CCPA/CPRA), you may have the right to:

• access, correct, or delete your personal information;
• receive a copy of your data in a portable format;
• object to or restrict certain processing, or withdraw consent;
• know what categories of personal information we collect and how we disclose them; and
• not be discriminated against for exercising your rights.

We do not sell personal information or share it for cross-context behavioral advertising. To exercise your rights, email info@disparate.ai. We may need to verify your identity. You may also complain to your local data protection authority. Where we process lead data on your behalf, we act as a processor or service provider, and requests from your leads should go to you.

13. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email or in the Services before they take effect, and we will update the "Last updated" date above.

14. Contact Us

DISPARATE LLC
Email: info@disparate.ai