Privacy Policy
Information on the processing of personal data when using LeadQuero.
Provider: Tim Bent
Bückersdyk 10
47918 Tönisvorst, Germany
Email: info@leadquero.de · Web: www.leadquero.de
1. Scope and purpose
This privacy policy informs users, customers, prospects, visitors and other affected persons about the processing of personal data in connection with the website and platform LeadQuero. It applies to the public online presence, registration-required areas, user accounts, research and search functions, lead management, export functions, payment and subscription functions, support and communication functions as well as other functions provided via LeadQuero. LeadQuero is designed as a digital B2B research and lead platform and can research, structure, display, store and make exportable company, location and business contact data for authorized users.
2. Controller
The controller within the meaning of the GDPR is Tim Bent, Bückersdyk 10, 47918 Tönisvorst, Germany, Email: info@leadquero.de, Website: www.leadquero.de. As long as no data protection officer is legally required, data protection inquiries can be addressed directly to the controller.
3. Legal bases
Personal data is only processed if a legal basis exists. Depending on the processing operation, Art. 6 para. 1 lit. a GDPR (consent), lit. b (contract performance), lit. c (legal obligation) and lit. f GDPR (legitimate interests) may apply in particular. Legitimate interests include in particular the secure and economic operation of the platform, the prevention of abuse, error analysis and the provision of a B2B research tool.
4. Data categories
Depending on usage, the following may be processed in particular: master and contact data, company data, access data, authentication data, contract and tariff data, payment and billing data, search parameters, stored leads, export information, communication content, support data, usage and log data, IP addresses, device and browser information, timestamps, location and map data as well as publicly available business contact information. Not every category applies to every user – the scope depends on the functions used.
5. Hosting, development and backend via Base44
LeadQuero is built and operated using the development and application platform Base44. Base44 provides, among other things, hosting, backend functions, database connections, API endpoints, user authentication and management, email functions, analytics functions and integrations with third-party providers. Where Base44 processes personal data on behalf of LeadQuero, the integration is carried out in accordance with data protection requirements.
6. Sub-processors of the Base44 infrastructure
Within the Base44 infrastructure, the following service providers may be used in particular: Mongo (data storage/hosting), SendGrid (email transmission), Render (server services), Google Cloud Platform (cloud/analytics services), OpenAI and Anthropic (API calls to language models), Wix.com Ltd. (payment processing), Datadog and Logfire (logging) and Langfuse (LLM logging). The actual processing depends on which functions are used. Where data is processed outside the EU/EEA, the applicable requirements for international data transfers (e.g. adequacy decisions, standard contractual clauses) apply.
7. Server log files and technical access data
When accessing LeadQuero, technically necessary information may be processed automatically, including IP address, date/time, accessed address, referrer, browser type, operating system, response status and security/error information. This serves technical provision, stability, troubleshooting and IT security. Log data is only stored for as long as necessary.
8. Registration, user account and authentication
A user account may be required for protected functions. The following may be processed: name, company, business email address, user ID, authentication information, registration time, login information and tariff-related data. Passwords are not stored in plain text. For password reset, the stored email address is processed and a time-limited token is generated.
9. Email sending and transactional messages
LeadQuero sends emails for registration, verification, password reset, security information, system notifications, support and contract-related communication; SendGrid may be used for this purpose. Typically, email address, message content, sending time and technical delivery information are processed.
10. Search, research and lead functions
When using the research functions, search terms, industries, postal codes, places, regions, geographic radii and other filters may be processed. Search operations can be assigned to a user account insofar as this is necessary for functionality, quotas, billing or history. Results can include company name, business address, website, phone number, business email address and other business-related information.
11. Origin of company and contact data
LeadQuero can obtain company and contact data from publicly accessible sources, company websites, search and map services, industry information and external interfaces. Data is not necessarily collected directly from the affected person. The public availability of information does not automatically remove data protection, competition or personality rights requirements.
12. Google Maps Platform, Places, Geocoding
LeadQuero uses Google services for map, location, company and location functions (e.g. Google Maps Platform, Places API, Geocoding). Google logs, among other things, project/API identifier, IP address, request URL, date/time and browser/operating system information. Google may process data under its own terms.
13. Google data and user responsibility
The display of a company or contact option is not a legal assessment of whether advertising contact is permitted. Users must check themselves before making contact whether the respective communication channel may be used lawfully.
14. Storage, marking and management of leads
Users can store, mark, categorize or annotate search results. This information is linked to the user account and stored in the database infrastructure. The user is responsible for not storing impermissible sensitive information in free text fields.
15. Export functions
LeadQuero enables the export of company and lead data in CSV, Excel or comparable formats. After export, the user is fundamentally responsible for further processing and must observe their own deletion, security and legal basis obligations.
16. Payment processing
For paid services, the data required for payment processing (name, billing address, email address, payment status, amount, currency, transaction identifier, subscription information) is processed via the integrated payment integration. Sensitive payment data is processed directly by the payment service provider without LeadQuero having to store complete payment data itself.
17. Invoice, tax and business data
Where paid services are offered, LeadQuero processes the information required for contract processing, invoicing and fulfillment of tax obligations. These documents may be retained beyond account termination due to statutory retention periods.
18. Cookies, Local Storage and Session Storage
LeadQuero may use cookies, Local Storage, Session Storage or comparable storage mechanisms. Technically necessary storage serves login, session management, security and storage of settings. Non-essential technologies are only used in compliance with applicable consent requirements.
19. Analytics and usage statistics
Where analytics functions are active for LeadQuero, pseudonymous or personal usage and event data may be processed. The specific scope and legal basis depend on the actual configuration.
20. AI and LLM infrastructure
Within the Base44 infrastructure, OpenAI and Anthropic may be used for API calls to language models and Langfuse for LLM logging. Where LeadQuero uses functions in which user input or search information is transmitted to AI services, users should not enter special categories of personal data or confidential information.
21. Support and communication
When contacting LeadQuero, the transmitted data is processed to handle the request (name, email address, company, subject, message content, technical diagnostic data). The data is stored for as long as necessary for processing and documentation.
22. Recipients and categories of recipients
Recipients may include in particular hosting and platform providers, database and server providers, email service providers, payment service providers, Google services, IT service providers, tax advisors, legal advisors and authorities, insofar as transmission is necessary and legally permissible.
23. Third-country transfers
Through the infrastructure used, Google or other international service providers, data may be processed outside the EU/EEA. In these cases, the data protection requirements (e.g. adequacy decision, standard contractual clauses) are observed.
24. Retention period and deletion
Personal data is only stored for as long as necessary for the respective purpose, then deleted or anonymized, unless statutory retention obligations conflict. Account data is generally stored until account termination and then for necessary settlement periods.
25. Data security
LeadQuero takes appropriate technical and organizational measures, in particular TLS/HTTPS, authentication, access restrictions, role and permission concepts, secure storage of secrets/API keys, logging and backups. No internet-based processing can guarantee absolute security.
26. Rights of affected persons
Affected persons have in particular rights to information, rectification, erasure, restriction of processing and data portability. Consent given can be revoked with effect for the future. Where processing is based on legitimate interests, a right to object may exist under Art. 21 GDPR.
27. Right to complain
Affected persons have the right to complain to a competent data protection supervisory authority. Independently of this, contact can first be made with LeadQuero so that the concern can be reviewed.
28. Automated decisions and profiling
LeadQuero does not make solely automated decisions that have legal effect against a person. Search, sorting, ranking or filter functions do not constitute a decision within the meaning of Art. 22 GDPR.
29. Minors
LeadQuero is not aimed at children or minors as a B2B service. User accounts should only be used by persons authorized for business use.
30. Changes to this privacy policy
The privacy policy is adapted when the legal situation, functions, data sources or technical architecture change significantly. The version published on LeadQuero at the respective time applies.