1. Who We Are
LeadSpark is an AI-powered lead generation platform operated by Questo ("we", "us", "our"). This policy explains how we collect, use, and protect data from LeadSpark users and the leads generated through our platform.
2. Information We Collect
From Platform Users (You):
- Account information - name, email, company name, billing details
- Campaign configuration - target audiences, content preferences, channel settings
- Usage data - feature usage, dashboard interactions, API calls
- Affiliate program data - tracking links, commission history, referral sources
Lead Data (Your Prospects):
- Contact information captured through your forms and landing pages
- Enrichment data - firmographic, technographic, and intent signals
- Engagement data - email opens, content downloads, page visits
- Lead scores and qualification status
3. How We Use Information
- Provide and operate the LeadSpark platform
- Enrich leads with AI-powered data signals
- Score and qualify leads based on engagement and fit
- Process billing and manage your subscription
- Improve our AI enrichment and scoring models
- Send service-related communications
- Detect and prevent fraud and platform abuse
We do not sell your lead data to third parties. Your leads are your data. We do not share lead lists between different LeadSpark customers.
4. Lead Data Ownership
You own all lead data captured and enriched through your LeadSpark account. We act as a data processor on your behalf. You are responsible for obtaining appropriate consent from leads and complying with applicable data protection laws for your outreach activities.
5. AI Enrichment and Processing
Our AI enriches leads using publicly available data, third-party data providers, and behavioral signals. Enrichment sources are documented in your dashboard. You can disable specific enrichment categories. The AI does not access private or non-public information.
6. Data Storage and Security
Data is encrypted using AES-256 at rest and TLS 1.3 in transit. We use Google Cloud Platform with access restricted to authorized personnel with MFA. Lead data is logically isolated between customer accounts.
7. Data Retention
Account data is retained during your subscription plus 90 days. Lead data is retained according to your configured retention policy (default: 24 months). Campaign analytics are retained for 36 months. You may delete leads or request full data deletion at any time.
8. Third-Party Services
- Google Cloud Platform - hosting and infrastructure
- Stripe - payment processing
- Email service providers - for campaign delivery (configurable)
All third-party services are bound by data processing agreements.
9. Your Rights
- Access personal data we hold about you
- Correct inaccurate data
- Delete your account and data
- Export your data including all lead records
- Object to marketing communications
- Restrict processing of your data
Email privacy@questo.media to exercise any right.
10. GDPR and CCPA
We comply with GDPR for EEA users and CCPA for California residents. We do not sell personal information. International transfers use Standard Contractual Clauses. You are responsible for GDPR compliance in your own lead generation activities.
11. Affiliate Program Data
If you participate in the LeadSpark affiliate program, we collect tracking data for commission calculation. Affiliate earnings and payment information are kept confidential and not shared with other affiliates or customers.
12. Changes to This Policy
Material changes are communicated via email at least 30 days in advance. Continued use after the effective date constitutes acceptance.
13. Contact
Questo
Email: privacy@questo.media
Website: leadspark.questo.media