Privacy Policy

Last updated: 1 October 2026

1. Who is responsible

Leads for Cleaners, operated at leadsforcleaners.com, is a service of Vergo s.r.o., registered at Okružná 1425/30, 020 01 Púchov, Slovakia, company number 46867121, which is the data controller for personal data described in this policy. Contact: support@leadsforcleaners.com.

2. What we collect about you

When you create an account

  • Your email address.
  • A cryptographic hash of your password. We never store the password itself and cannot recover it.
  • Account timestamps: when you registered and when you last signed in.

When you subscribe

  • Identifiers issued by Paddle linking your account to your subscription.
  • Your plan and credit balance.
  • Not your card number, billing address, or tax details. Those go directly to Paddle and never reach our servers.

When you use the Service

  • Each search you run: the business type, the location, when it ran, how many results it returned, and what it cost in credits.
  • Every credit movement, with the reason and the resulting balance. This is how we can answer a billing question accurately.
  • The lead records delivered to you, and any status or notes you add.

For security

  • Failed sign-in attempts, recorded as an irreversible hash of the email address tried plus the IP address it came from. We do not store the email address itself. These records are deleted automatically after 24 hours and exist only to limit password-guessing.
  • Server error logs, which may contain IP addresses, retained for no longer than 90 days.

3. Why we are allowed to use it

  • Performing our contract with you — running your account, delivering searches, and metering credits.
  • Legitimate interests — keeping the Service secure, preventing abuse, and keeping records that let us resolve billing disputes.
  • Legal obligation — retaining what tax and accounting law requires.

4. Who we share it with

  • Paddle.com Market Ltd – payment processing as Merchant of Record.
  • Apify – our data provider. We send the business type and location you search for. We do not send your email address, your account identifier, or anything else that identifies you.
  • DreamHost, LLC – servers and databases.
  • Brevo – email delivery.
  • GoatCounter – anonymous visitor analytics. See Section 5 for what it does and does not collect.

We do not sell your personal data. Some of these providers operate outside the European Economic Area; where they do, transfers rely on Standard Contractual Clauses.

5. Cookies, fonts and analytics

Sign-in cookie. We set one cookie to keep you signed in. It is essential to the Service and cannot be disabled while you use it.

You can also control or delete cookies through your browser settings. Disabling the sign-in cookie will prevent you from logging in.

GoatCounter Analytics. We use GoatCounter to see how many people visit the Service and which pages they read. It does not set a cookie, and does not store any information in your browser at all — no cookie, no localStorage, no cache. It does not store your IP address or your full browser identifier (User-Agent) in its database. To avoid double-counting the same visit, it briefly holds the site name, your IP address, and your User-Agent together in server memory — never written to disk — for up to 8 hours, mapped to a randomly generated ID; after that it is discarded. Because nothing identifying is stored on your device or kept in the database, this does not require your consent.

Google Fonts. This site loads web fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When your browser requests a font file, your IP address, user agent, and the referring page go to Google. Google states it does not use these requests for advertising profiles, but the connection itself transfers personal data.

6. How long we keep it

  • Account data: while your account exists, and 1 year afterwards.
  • Credit and billing records: 10 years, because we are required to keep them.
  • Failed sign-in records: 24 hours.
  • Cached search results: 96 hours from collection.
  • Lead records: until you delete them or close your account.

7. Business contact information in search results

A. Nature of Data Collected The Service retrieves publicly accessible business contact information, specifically names, telephone numbers, websites, and business addresses, sourced from public directories such as Google Maps. For businesses located in the United States, the Service also retrieves one business email address where the business publishes it on its own website. We acknowledge that where a business is operated by a natural person, such as a sole trader (SZČO), this information constitutes personal data under applicable data protection laws.

B. Legal Basis for Processing Our processing of this data is strictly based on our legitimate interest in providing B2B (business-to-business) prospecting and analytical tools, in accordance with Article 6(1)(f) of the EU General Data Protection Regulation (GDPR) and Section 13(1)(f) of the Slovak Data Protection Act (Zákon č. 18/2018 Z. z.). We rely on the exemption provided in Article 14(5)(b) of the GDPR, as directly notifying each individual business of this data collection would involve a disproportionate effort given the volume of public data processed and its already public nature.

C. Right to Object and Erasure If you are a business owner (including a sole trader) and wish to exercise your right to object to processing or request the erasure of your details from our systems, please email support@leadsforcleaners.com with your business name and specific location. Upon receipt, we will promptly remove your records and place your business on an internal suppression list to ensure it is not retrieved or returned by the Service in the future.

D. Disclaimer of Source Authorship We are an aggregator, not the primary publisher or source of this information. Removing a listing from our Service does not remove it from Google Maps or other public web sources. Requests for removal from the primary source must be directed independently to the respective platform.

E. User Liability and Direct Marketing Compliance Customers utilizing the Service act as independent Data Controllers regarding the data they export or access. It is the sole responsibility of the Customer to ensure that any subsequent direct marketing communications (including cold emails and telemarketing) comply strictly with applicable anti-spam legislation, including the Slovak Electronic Communications Act (Zákon č. 452/2021 Z. z.) and the EU ePrivacy Directive. The Service assumes no liability for unsolicited communications sent by the Customer.

8. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our use of it. You can also ask for your data in a portable format. Email support@leadsforcleaners.com and we will respond within one month.

Some data we must keep even if you ask us to delete it — billing records required by tax law are the usual case. We will tell you if that applies.

If you think we have handled your data wrongly, you can complain to your national data protection authority. In Slovakia that is the Úrad na ochranu osobných údajov Slovenskej republiky.

9. Security

Passwords are stored using bcrypt. Traffic to the Service is encrypted in transit. Sign-in attempts are rate-limited. Access to the production database is restricted to the operator.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authority as the law requires.

10. Changes

We will post any update here and change the date at the top. If a change materially affects you, we will email registered users at least 15 days before it takes effect.

11. Contact

support@leadsforcleaners.com