Privacy Policy

1. Introduction

LeadFlippers(“we”, “our”, or “us”) is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using LeadFlippers, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please discontinue use immediately.

2. Information We Collect

2.1 Information You Provide

• Account data: Name, email address, and password when you register
• Profile data: Optional information you add to your profile
• Billing data: When you purchase a subscription or lead list, payment is processed by our payment processor (Stripe). We do not store your full card details on our servers
• Communications: Messages you send us via support

2.2 Information Automatically Collected

• Log data: IP address, browser type, pages visited, and access times
• Device data: Device identifiers and operating system
• Usage data: How you interact with our service

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Provide, operate, and maintain our service
• Process payments and deliver purchased lead lists and subscriptions
• Send transactional emails (account verification, password resets, receipts)
• Detect, prevent, and address fraud, abuse, and security incidents
• Comply with legal obligations
• Analyze usage to improve our service

We do not sell your personal information to third parties.

4. Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data under the following legal bases:

• Contract performance: To provide the services you requested
• Legitimate interests: Security, fraud prevention, and service improvement
• Legal obligation: To comply with applicable laws
• Consent: For optional marketing communications (you may withdraw at any time)

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Account data is deleted within 30 days of account deletion requests. Audit logs and security records may be retained for up to 2 years as required by law and for fraud prevention.

6. Data Sharing

We may share your data with:

• Service providers: Hosting, payment processing (Stripe), email delivery, and analytics/advertising providers under data processing agreements
• Legal requirements: When required by law, court order, or government authority
• Business transfers: In connection with a merger, acquisition, or sale of assets

7. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data (“right to be forgotten”)
• Portability — receive your data in a machine-readable format
• Object — object to certain processing activities
• Restriction — request we restrict processing of your data
• Withdraw consent — withdraw consent at any time where we rely on it

To exercise these rights, contact us at stizzyraxx@gmail.com. We will respond within 30 days.

8. Business Contact Data & Your California Rights (CCPA/CPRA)

LeadFlippers compiles and provides business-to-business (B2B) contact information for local businesses — such as a business name, business address, business phone number, and publicly listed business email. This is professional, business-directory information, not consumer profiles.

Do Not Sell or Share My Personal Information.Because we make business-contact data available to our customers, this activity may be considered a “sale” or “share” of personal information under the California Consumer Privacy Act (CCPA/CPRA) and similar U.S. state laws. If you are an individual associated with a listed business, you have the right to opt out. To opt out, or to request that your information be corrected or removed from our datasets, email us at stizzyraxx@gmail.com with the subject line “Do Not Sell/Share” or “Data Removal Request.”

We do not sell the personal account data (name, email, password) of our registered users, and we do not knowingly include information about minors in our datasets. Exercising these rights will not result in discriminatory treatment.

9. Data Sources & Attribution

Our business listings are compiled from public records and open datasets, including government business registries, publicly available directories, and open geographic databases. We aggregate and standardize this information to build our lead datasets.

Portions of our location and business data are derived from OpenStreetMap. As required by the Open Database License, we provide the following attribution:

© OpenStreetMap contributors, licensed under the Open Database License (ODbL).

More information about this data and its license is available at openstreetmap.org/copyright. To request correction or removal of a specific business listing, contact us at stizzyraxx@gmail.com.

10. Security

We implement industry-standard security measures including encryption in transit (TLS), password hashing (bcrypt), rate limiting, audit logging, and access controls. However, no method of transmission over the Internet is 100% secure. We encourage you to use a strong, unique password.

11. Cookies & Advertising

We use strictly necessary session cookies to maintain your authentication state. You may disable cookies in your browser, but this will prevent you from logging in.

Our public pages (such as our blog) display advertising provided by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet.

You may opt out of personalized advertising by visiting Google Ads Settings, or opt out of a third-party vendor's use of cookies for personalized advertising at aboutads.info.

12. Children's Privacy

Our service is not directed to individuals under 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, contact us immediately.

13. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or a prominent notice on our website at least 30 days before they take effect. Continued use after changes constitutes acceptance.

14. Contact Us

For privacy-related inquiries: