Skip to content
Draft

Pending legal review. Last updated 24 October 2026.

Privacy Policy

This policy explains what personal information LeadForge collects, why, and the choices available to you. It covers two groups: people who use LeadForge (account holders and team members) and businesses whose public information appears in LeadForge workspaces.

Information about account holders

When you create an account we collect your name, email address and a password hash. We record sign-in sessions (browser, approximate IP address, time) so you can review and revoke them. We log actions that affect your organization, such as invitations, role changes, exports and billing events, to provide an audit trail.

Payment is processed by Paystack. We never receive or store card numbers. We store the payment reference, amount, status and a masked card summary (brand and last four digits) that Paystack returns.

Information about businesses

LeadForge collects business-facing information: business name, category, address, business phone number, business email address, website and public social profile links. We collect it only from sources that are officially provided, permitted by their terms, or supplied by our users. We do not collect employee lists, personal profiles or private contact details. Where a sole trader's business contact is also a personal contact, we treat it as business contact information under legitimate interest and honor removal requests.

Each collected value is stored with its source, collection date and verification status. Values from sources with retention limits are removed when those limits are reached.

Legal basis and jurisdiction

We process personal information under the Nigeria Data Protection Act 2023. Where we serve users or process data about businesses in other jurisdictions, applicable local law such as the GDPR or UK GDPR also applies.

Your rights

  • Account holders can export their organization's data and request deletion from Settings.
  • Businesses can request correction or removal of their record through the data collection page.
  • Anyone can ask what information we hold about them by contacting us.

We aim to respond to requests within 30 days.

Retention

Account data is kept while the account is active and removed after deletion with a 14-day grace period. Billing records are retained for the statutory period. Audit logs are retained for two years.

Contact

Use the contact form for privacy questions or requests.