MysticLeads ("we", "our", or "us") operates mysticleads.io and the MysticLeads software-as-a-service platform. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service.
Account information: When you create an account, we collect your email address and password (stored as a secure hash via Supabase Auth). If you complete your profile, we also collect your name, phone number, and country.
Purchase information: When you make a purchase through any third-party platform or affiliate network we partner with (including but not limited to WarriorPlus, JVZoo, Stripe, PayPal, Digistore24, and similar commerce or affiliate platforms), those platforms send us your email address and order details via their notification systems. We do not process or store your payment card details — all payment processing is handled entirely by those third-party platforms.
Usage data: We log every search you run, including the niche searched, city searched, number of results returned, and credits used. This is used to calculate your usage and enforce plan limits.
Marketing consent: If you opt in to marketing communications, we record your email address, the date and time of consent, and your IP address at the time of consent.
Technical data: We collect standard web server logs including IP addresses, browser type, and access timestamps. This data is used for security monitoring and is deleted after 90 days.
We do not sell your personal data. We share data only with the following categories of third parties, and only to the extent necessary to provide the service:
We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it by law (for example, for tax or fraud-prevention purposes).
Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data. To exercise any of these rights, email us at support@mysticleads.io. We will respond within 30 days.
We use essential cookies for authentication and session management. We use optional analytics cookies (Google Analytics, Facebook Pixel) only with your explicit consent, which you can give or withdraw at any time via the cookie banner on our site.
We implement appropriate technical and organisational measures to protect your personal data. All data is encrypted in transit (HTTPS/TLS) and at rest. Passwords are stored as secure hashes — we do not have access to your password.
MysticLeads is operated from Canada. If you access the service from outside Canada, your data may be transferred to and processed in Canada or the United States. We ensure that such transfers are made with appropriate safeguards.
MysticLeads is not directed at children under the age of 16. We do not knowingly collect personal data from children.
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The "Last updated" date at the top of this page reflects the most recent revision.
For privacy questions or to exercise your rights, contact us at support@mysticleads.io.