What information LeadRecoverly collects, how we use it, how long we keep it, and the choices you have. By using LeadRecoverly you agree to this policy.
We keep data only as long as needed for the purposes below. If you disconnect HubSpot, our access ends immediately. If you cancel or delete your account, we delete your HubSpot-derived data and access tokens within 30 days, except for limited records we must keep for legal, tax, or fraud-prevention reasons.
| Data | Retention | Purpose |
|---|---|---|
| Account data (name, email, company) | While your account is active, then deleted within 30 days of account deletion | Run the service and contact you about it |
| HubSpot access tokens | Encrypted at rest (AES-256-GCM); deleted immediately on disconnect and within 30 days of cancellation | Maintain your authorized connection |
| Raw CRM records | Not stored as a standing copy. Records are read during a scan to compute findings, then discarded; we keep the derived findings, not your full record set | Generate your scan and report |
| Scan results and findings | While your account is active; deleted within 30 days of cancellation or account deletion | Show your saved report without re-scanning |
| Approved-action logs | Retained while your account is active and for up to 12 months after, for audit and dispute defense | Provide your action history and resolve disputes |
| Billing records (via Stripe) | Retained as required for tax, accounting, and fraud-prevention (typically up to 7 years) | Legal and tax compliance |
| Server and security logs | Typically 30 to 90 days | Security, abuse prevention, debugging |
| Backups | Rolling encrypted backups overwritten on a short cycle; deleted data ages out of backups within the backup window | Disaster recovery |
We do not keep a standing mirror of your full CRM. During a scan we read records to compute findings and then discard the raw records, retaining the derived findings tied to your account.
Where the GDPR applies, we process data to perform our contract with you, for our legitimate interests in operating and improving the service, to meet legal obligations, and with your consent where required (for example, non-essential cookies). Customers acting as data controllers should also review our Data Processing Addendum.
Depending on where you live, you may have the right to access, correct, delete, port, or object to the processing of your personal data, and to withdraw consent. California residents have rights to know, delete, and opt out of any sale (we do not sell). To exercise any right, email legal@leadrecoverly.com. You can revoke our access to HubSpot at any time from inside HubSpot.
Where required by law we ask for consent to non-essential cookies before setting them. You can control cookies through your browser settings.
Your data may be processed in the United States; where required we use appropriate safeguards for international transfers. LeadRecoverly is intended for business users only and is not directed to children.
We may update this policy and will revise the date above. Material changes will be communicated where appropriate.