Privacy Policy

This policy covers:

• Website visitors
• Prospective and current customers
• Authorized users of our platform
• Business contacts whose professional data we process in connection with our services

Depending on the processing activity, we act as a controller of personal data or as a processor on behalf of our customers.

We act as a controller for activities where we determine the purposes and essential means of processing: operating our website and service, managing customer relationships, our own marketing, service improvement, security, and the collection and enrichment of professional business-contact data.

Where we process customer-provided data solely on a customer’s documented instructions, we act as a processor on that customer’s behalf. In those cases, the customer remains responsible for its own use of the data and for complying with applicable law.

a. Identity & Access

We collect your name, email address, company, job title, phone number and account credentials when you sign up, join our waitlist, use our services or contact us.

We use this information to:

• Set up and manage your account
• Provide the service
• Send product and transactional communications
• Provide customer support
• Secure and authenticate access to the platform

Legal basis: performance of a contract; legitimate interests.

b. Lead & Professional Business Contact Data

We collect and enrich professional information from lawful sources, including:

• Name, job title, company and professional location
• Public professional profile URLs
• Professional email addresses and phone numbers
• Company websites and business information
• Public professional activity and business signals, such as post interactions, comments and job changes
• Information provided by customers, integrations, or third-party data and enrichment providers

We use this information to identify, qualify, enrich, rank and display relevant B2B prospects to our customers, who may contact them by LinkedIn, email or WhatsApp.

Legal basis (GDPR): legitimate interests in conducting proportionate B2B business development and providing B2B prospecting services, subject to applicable rights and safeguards.

We do not collect this data directly from you. If you are a business contact whose data we process, you may ask us for its source and object to the processing at any time by contacting us. We will then delete your data and keep only a minimal suppression record, so that you are not contacted or enriched again.

Our services are intended for professional and B2B use. We do not intentionally use special-category personal data, such as political opinions, religion, health, race or ethnicity, or sexual orientation, to target individuals.

c. Usage Data

We collect data about how you use the platform, such as feature usage, technical logs, IP address, browser and device information.

We use this information to improve performance and usability, detect anomalies, fraud or abuse, and develop our services and AI-enabled features.

Legal basis: legitimate interests; legal obligation where applicable.

d. Billing Information

If you purchase a plan, we collect billing details such as your name, billing address and tax information. Payments are processed by a third-party payment provider. We do not store full payment card details.

Legal basis: performance of a contract; legal obligation.

e. Website & Cookies

Our website only uses cookies that are strictly necessary to operate the website and the service, such as keeping you signed in. We do not use analytics, advertising or website-visitor identification technologies. If this changes, we will ask for your consent first and update this policy.

Legal basis: legitimate interests (strictly necessary cookies do not require consent).

f. Communications

If you contact us or interact with support, we may keep your message and contact information in order to respond to your request, provide support and improve our services.

Legal basis: legitimate interests; consent where applicable.

We may use personal data to:

• Provide, operate, maintain and secure TapLead
• Identify, qualify, enrich and rank relevant B2B prospects
• Enable customer-selected integrations and workflows
• Communicate with users and customers
• Process subscriptions and payments
• Improve our platform and AI-enabled features
• Prevent fraud, abuse and security incidents
• Comply with legal obligations
• Protect our rights and enforce our agreements

We use third-party AI providers to power features such as lead scoring and message drafting. We only send them the data needed to provide the requested feature.

We may share personal data with:

• Service providers and subprocessors that help us operate the service (hosting, infrastructure, email and messaging delivery, AI, data enrichment)
• Customer-selected integrations such as CRM, email, messaging or productivity tools
• Our payment provider
• Professional advisers such as lawyers, auditors, insurers and accountants
• Public authorities where legally required
• Parties involved in a merger, acquisition or similar transaction
• Other parties where you direct or consent to the disclosure

Where required by law, we enter into data-processing agreements with our service providers. A list of subprocessors is available on request at [email protected].

We retain personal data only for as long as necessary for the purposes described in this policy and to comply with legal, contractual, security and accounting obligations.

• Account data is retained while your subscription or account remains active.
• Data processed solely on behalf of customers is retained according to our contractual commitments and the customer’s instructions.
• For business contact and lead data, we determine retention periods based on the purpose of the processing, the relevance and accuracy of the data, and any objection or deletion request. We review this data periodically and delete or anonymize records that are no longer necessary.
• Billing, tax and accounting records are retained as long as the law requires (currently 10 years for accounting records under French law).
• A minimal suppression record may be kept to honor an objection and prevent re-contact or re-enrichment.

Some of our service providers are located outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on lawful transfer mechanisms, including:

• An adequacy decision of the European Commission
• The EU-U.S. Data Privacy Framework, where the recipient is certified
• The European Commission’s Standard Contractual Clauses
• Another lawful transfer mechanism recognized under data protection law

If the GDPR applies to you, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Restrict certain processing
• Object to processing based on legitimate interests
• Object at any time to processing for direct marketing
• Receive a portable copy of your data
• Withdraw consent at any time where processing is based on consent
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects (our lead scoring supports our customers’ decisions and does not produce such effects)
• Lodge a complaint with a supervisory authority, such as the CNIL in France (www.cnil.fr)

To exercise your rights, contact us at [email protected]. We respond within one month. We may need to verify your identity first. If we process your data solely on behalf of a customer, we will refer your request to that customer. Depending on where you live, you may have additional rights under local laws; contact us to exercise them.

We use technical and organizational measures designed to protect personal data, such as encryption in transit, access controls and authentication safeguards. No system can be guaranteed to be completely secure.

Where required by applicable law, we will notify affected individuals and the competent authorities of qualifying personal data breaches within the legal timeframe.

Our services are intended for businesses and professionals and are not directed to anyone under 18. We do not knowingly collect personal data from minors. If we learn that we have, we will delete it.

Our website and services may contain links to or integrations with third-party websites, platforms and applications. This Privacy Policy does not cover their privacy practices, which are governed by their own notices and terms.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. If we make material changes, we may notify you by email, in the product or with a notice on our website, where required by law.

For privacy-related questions or requests, contact: [email protected]

TapLead is operated by Melvin Reymondon, sole proprietor, 156 Rue Galinette, 83400 Hyères, France, R.C.S. Toulon 992 339 762.